Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          cXCNEL7B4O1/oKg1R7/Ug8xiO/lPmEujkOVuBMe2F/I=
Subject key identifier:   FE:CA:DF:C2:0E:DC:31:49:03:37:BE:55:43:15:10:58:14:CB:77:E4
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          14F5
Signing time:             Fri 08 Aug 2025 17:01:24 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:24 +0000
Manifest next update:     Fri 15 Aug 2025 17:01:24 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: 7kw8EAX0VFp9FEw4OF9V/R2JpFEeNyxaZNh/J3W5lGA=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5417 (0x1529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Aug  8 17:01:24 2025 GMT
            Not After : Aug 15 17:01:24 2025 GMT
        Subject: CN=68962d64-2049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:a1:fe:90:7e:a3:41:46:2e:0f:21:ba:c8:
                    98:3d:ce:2c:d3:67:8b:df:14:c2:3a:50:95:e9:dc:
                    33:c9:7f:e1:b0:b9:f6:3d:b5:31:7b:a8:4c:38:b4:
                    e2:70:6d:5f:b3:e0:d2:a7:cc:78:bf:b9:22:2e:3d:
                    64:d2:91:ea:99:ef:0e:a0:17:3d:56:09:a9:98:ee:
                    dd:6c:c6:58:5e:09:61:87:ee:12:6d:a1:40:80:7e:
                    ea:c1:b8:d7:32:77:e9:4b:79:8c:30:7f:b8:c3:a6:
                    b9:40:39:6b:6f:73:1d:ac:72:d3:22:e0:93:bf:b1:
                    6b:c1:4e:5f:0b:ea:dc:31:21:a9:85:99:0b:ff:22:
                    66:0f:8b:f1:f3:7e:0a:83:2a:e7:d5:aa:47:a6:0e:
                    26:f0:01:d2:0f:74:55:a1:39:81:93:fb:75:44:b6:
                    00:cf:df:d0:ff:e3:4d:1d:7b:5e:18:cb:3b:88:1b:
                    68:30:b2:86:b6:ff:73:1e:a9:2f:c3:7d:17:84:58:
                    1e:ce:14:7a:dd:ca:f7:fe:88:24:a1:94:73:39:66:
                    76:71:b1:cc:34:63:76:be:55:d4:a9:82:f4:73:32:
                    69:da:31:3d:53:d1:42:18:db:1c:f7:9e:67:07:6d:
                    3f:2f:1a:99:7f:bb:09:d1:da:6c:21:34:5a:4d:b9:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:DF:C2:0E:DC:31:49:03:37:BE:55:43:15:10:58:14:CB:77:E4
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:d1:91:3c:f3:71:57:16:40:e4:2e:11:21:d4:6f:b8:0d:
         0b:b3:d9:36:ce:69:a2:18:d7:5e:01:0d:d4:60:22:02:62:61:
         7b:e9:30:ec:c2:a1:1c:72:1f:b0:6f:9f:c2:bd:0f:c4:e1:ed:
         9e:55:ac:b9:53:50:5b:2d:de:0f:cf:5f:59:f7:34:14:f2:03:
         b3:c5:3d:b7:2b:aa:34:6e:98:b8:92:d6:0d:24:c9:a4:d9:6c:
         b0:a1:04:80:a2:7d:57:39:dc:91:42:17:f7:c0:37:f2:d8:d2:
         2d:ea:7b:98:d1:a1:87:8d:62:e9:e1:7f:3f:b8:0e:64:da:bb:
         64:4f:fe:cb:74:86:84:9a:71:06:65:eb:ad:9e:03:67:54:fc:
         e7:2d:8e:b0:a5:38:ad:13:7b:01:c7:75:d9:19:2d:99:d7:a3:
         5d:c7:d9:f7:74:94:9d:c1:60:e0:02:c3:ac:9f:58:fc:fc:77:
         31:3e:01:6e:da:f4:0c:81:ee:d9:cc:1f:14:e1:10:20:85:6b:
         b8:90:53:cb:11:68:59:dd:a7:87:a9:cf:f3:a5:7f:94:b4:df:
         3d:9d:ce:d7:d5:22:d5:8f:b6:5e:51:37:af:cf:f2:36:76:e2:
         9c:50:35:92:17:2e:b8:9a:b2:16:fe:52:db:df:76:7a:ab:d6:
         45:44:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:21 2025 by rpki-client