Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
File:                     76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json)
Hash identifier:          euj0KAe7fK0fSJUnmh6k57GZ+HaQs2rykh2JNRH5ye0=
Subject key identifier:   C6:F1:6A:4C:92:25:E4:4C:11:FA:57:46:F6:BE:BE:41:62:90:E7:CD
Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
Certificate issuer:       /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
Manifest number:          088C
Signing time:             Fri 08 Aug 2025 20:57:43 +0000
Manifest this update:     Fri 08 Aug 2025 20:57:42 +0000
Manifest next update:     Fri 15 Aug 2025 20:57:42 +0000
Files and hashes:         1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: MrISU68JCJYjCM1hP3zKKfrnXd1lcr7IAKMg7aratGs=)
                          2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: oQabdmEmsE0xS2pzwUEQIF+XAWD0QihN42o3aT+jjXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
        Validity
            Not Before: Aug  8 20:57:42 2025 GMT
            Not After : Aug 15 20:57:42 2025 GMT
        Subject: CN=689664c6-dfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:8e:86:06:37:62:1f:ae:26:a9:52:3c:85:
                    37:3c:66:e5:cc:88:05:d8:a0:c7:af:10:39:f4:4a:
                    c6:a1:62:92:df:fb:4e:a0:3c:b7:24:c4:4d:16:5c:
                    31:47:33:3a:26:a2:7c:e2:de:47:3b:da:a6:13:a3:
                    59:ec:47:67:f3:a6:c0:dc:ee:72:2c:99:b9:a7:4a:
                    e6:50:88:b2:ec:ef:47:25:88:6e:d5:93:c1:e1:47:
                    d4:05:a8:a5:c5:fe:fe:ce:85:60:c7:86:b7:34:d0:
                    bf:e1:be:66:f0:0d:89:c9:54:ed:c8:0e:76:bb:d1:
                    0b:72:8e:0e:38:07:23:09:63:19:ce:6c:41:e3:05:
                    ea:f7:db:b7:35:f2:46:c0:35:1f:e2:21:ef:e7:76:
                    94:25:2c:60:73:a5:fa:6c:f7:47:0d:c8:4e:f1:e4:
                    3b:ea:f3:a5:a4:6a:0a:b9:8c:bf:98:a0:32:a8:a0:
                    2a:47:3f:ff:8f:47:e7:61:f1:06:0e:50:b4:04:b8:
                    d3:31:12:41:34:8a:0c:20:87:e3:ec:61:fc:97:29:
                    34:b6:01:12:ac:be:43:11:6e:99:5e:db:a8:fa:15:
                    37:b0:ff:28:b2:e6:8d:14:7b:a8:34:cd:11:04:98:
                    52:1e:87:bd:03:ca:8d:41:5c:97:be:de:6b:22:5c:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:6A:4C:92:25:E4:4C:11:FA:57:46:F6:BE:BE:41:62:90:E7:CD
            X509v3 Authority Key Identifier:
                keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:2c:2b:22:eb:cb:3c:02:22:e2:3c:4e:04:3a:2e:c7:d0:
         d2:87:56:76:5c:5f:dd:59:15:af:37:a0:12:15:56:10:9d:44:
         19:27:10:0a:c5:b6:bc:a1:d0:4f:b8:5e:62:4a:2b:b7:29:29:
         b2:11:e6:4e:47:a6:0d:db:8b:d1:80:23:fe:63:75:a1:c3:75:
         23:1c:a8:3f:98:c8:f1:fe:20:e4:bf:25:cc:49:f6:ac:39:bc:
         0b:38:35:fe:05:16:61:a8:c1:c5:22:11:49:60:08:b2:89:db:
         ce:59:e1:d7:df:68:88:7a:e8:fc:39:07:5e:3d:46:05:d7:90:
         f6:57:ea:74:be:00:09:37:88:d7:17:6b:46:e7:9f:25:b7:5c:
         70:28:96:2c:eb:5b:a3:24:70:dc:a0:31:13:51:16:44:69:2a:
         04:ca:fe:74:c8:3c:47:8c:b1:80:a6:fa:f7:a3:a0:d2:6b:99:
         47:b1:5d:81:32:dd:9c:e3:6a:23:6c:42:13:ed:1b:02:ad:a5:
         58:c8:99:9a:4f:af:8f:c0:5b:4f:f6:9b:be:6d:ef:76:ec:3e:
         64:c9:91:7a:41:ac:20:c8:bb:78:8c:cc:78:a8:dc:dd:06:a6:
         52:f0:3c:2c:70:b1:55:c4:d9:c6:be:6e:4e:e7:93:33:2b:c5:
         db:20:41:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:42 2025 by rpki-client