Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
File:                     4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json)
Hash identifier:          j1f3cPOSTUJd/KN1bc+2h13bkkE0o79nivNYVAbhzgo=
Subject key identifier:   4A:63:13:0E:E8:9E:DE:C4:06:A5:6A:84:2F:F7:69:72:FA:BF:E8:E2
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
Manifest number:          3581
Signing time:             Mon 04 Aug 2025 14:29:22 +0000
Manifest this update:     Mon 04 Aug 2025 14:29:21 +0000
Manifest next update:     Mon 11 Aug 2025 14:29:21 +0000
Files and hashes:         1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: wlfFh3E1D7Jf8n4+SPd4U33rPQi+OehriSk8rQfXH5I=)
                          2: 8FA30C8436FA11F087F24B11C4F9AE02.roa (hash: CIOWM46A7OrehJJzF5o6WcXQACQL/brTWBmCYOJEPrI=)
                          3: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=)
                          4: 0B28C4E63DA611F0BE531A20C4F9AE02.roa (hash: bCf2+Kf1Gx3ylLxT2UrIXzeFtJkNdW2hW/PFUSCAXGA=)
                          5: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=)
                          6: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=)
                          7: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=)
                          8: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=)
                          9: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=)
                          10: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=)
                          11: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=)
                          12: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=)
                          13: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=)
                          14: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (hash: j7V2cLxBPJmgE9BS61lbh9dr46zqgDVKwuwWKKEatjA=)
                          15: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=)
                          16: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=)
                          17: 4AE8C5D45B6211F097761A3EC4F9AE02.roa (hash: AXMZPAxxDRwcgBxBo+cJ6EaXUVogXGNqmcItWPjK+ac=)
                          18: 747C7164462C11ED90035452C4F9AE02.roa (hash: ysgxI/G91R+a/iojor3l2n28shR0MhG5qk8DtBNdJ8I=)
                          19: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=)
                          20: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=)
                          21: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=)
                          22: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=)
                          23: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=)
                          24: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=)
                          25: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=)
                          26: 766AE05E614611F09CC5B85AC4F9AE02.roa (hash: VxDk7PIGlg4d7UuqFMx0UW7gDN4AF2vfbs5hldjyXwM=)
                          27: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=)
                          28: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=)
                          29: E8FBE58C6E4D11F09E60AF15C4F9AE02.roa (hash: F3Nkvr8Ot+/Vj1pN7iXz4hhR7XsF6oalV5YpZrBcH1c=)
                          30: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=)
                          31: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=)
                          32: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=)
                          33: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13942 (0x3676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Aug  4 14:29:21 2025 GMT
            Not After : Aug 11 14:29:21 2025 GMT
        Subject: CN=6890c3c2-eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:ad:f3:a1:b0:86:0e:fc:9f:7a:0a:b7:89:
                    90:17:0b:88:36:0d:d0:05:83:d9:e3:57:10:ed:4a:
                    a0:c5:e7:a0:04:6f:7a:c4:f7:7f:fe:d6:4c:0c:9a:
                    a4:41:b9:c7:1e:1c:ee:21:f0:42:9c:d4:30:db:de:
                    d0:9a:a5:f7:88:3c:ed:b2:94:05:1e:78:7c:b7:40:
                    9a:d3:ce:5c:55:35:19:b3:2f:d2:9b:70:1e:12:4e:
                    42:2a:cd:38:0f:0d:7e:79:00:7f:b5:69:6e:4a:ef:
                    1a:76:94:20:41:d8:57:7d:41:41:ce:f3:46:75:69:
                    88:2e:d7:01:cf:16:9c:e2:ad:ed:7c:00:cb:99:3b:
                    6e:4f:c5:ad:4a:d0:14:34:ee:09:0e:b7:dd:95:12:
                    4f:09:6e:9d:d6:b7:67:38:89:8e:c3:f1:0c:8a:72:
                    1f:c5:8f:d2:17:52:b3:ee:97:4b:dc:8b:bb:1e:5f:
                    75:45:08:6d:c9:90:92:b2:c7:ab:81:17:6a:10:01:
                    29:8d:96:e5:ce:2c:ef:9f:48:47:51:00:42:7a:0c:
                    02:26:6b:c7:46:9e:a1:db:64:27:3f:d6:c9:db:a1:
                    64:fd:0f:83:bc:ae:ba:53:10:b9:51:2d:9b:ba:56:
                    d1:7e:27:12:f1:05:aa:74:2f:8b:83:fd:6d:37:dd:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:13:0E:E8:9E:DE:C4:06:A5:6A:84:2F:F7:69:72:FA:BF:E8:E2
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:3d:59:5f:1b:ae:3e:6b:47:f3:08:9d:fb:b0:68:52:04:
         02:5c:b7:b5:06:60:16:4e:52:16:6a:af:64:4a:6a:4f:e0:fb:
         fa:a4:0a:75:bc:b3:33:24:65:e3:74:0a:35:ff:ac:96:14:ca:
         32:0a:0d:df:74:c8:41:fd:32:fb:65:c9:8c:25:b7:3f:14:e9:
         13:06:58:6a:4d:27:e3:c2:ac:73:a2:4d:14:ad:8b:57:87:82:
         ba:cc:d5:65:2f:65:70:d3:2a:54:ba:44:59:3b:98:ed:92:cb:
         94:8c:cf:a0:30:98:e2:e0:f2:85:2b:93:10:0c:f6:99:fd:00:
         ac:5a:a2:b3:ef:8e:54:26:43:bc:62:b5:54:5f:ff:f6:d5:f3:
         8a:68:e9:94:71:fb:df:7f:05:77:30:a6:df:5a:fe:54:15:e7:
         e3:51:ae:e2:84:0f:06:87:2a:14:71:0b:24:6b:96:a5:70:35:
         dd:17:cb:04:61:19:ba:bb:4e:66:dc:f9:93:1b:c1:84:fb:00:
         7b:ff:88:e7:06:b4:c0:41:1c:63:4f:76:55:15:5b:9b:93:fd:
         41:f9:1d:b6:d8:ca:a5:31:90:39:97:8d:f8:6b:28:54:3e:d9:
         8d:c9:58:89:4b:e5:09:ed:c1:6f:ad:67:64:c7:74:27:27:c5:
         9e:9c:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:21 2025 by rpki-client