Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File:                     9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier:          oRmBA4OrIJy/DUhLW9i0qGzYBMxm/uCRhRH9A0Njl9I=
Subject key identifier:   A9:50:61:FF:79:7E:34:26:31:53:23:1D:9E:43:C4:E7:E5:05:6C:AE
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number:          BA
Signing time:             Sat 09 Aug 2025 06:20:22 +0000
Manifest this update:     Sat 09 Aug 2025 06:20:21 +0000
Manifest next update:     Sat 16 Aug 2025 06:20:21 +0000
Files and hashes:         1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: dU9+GKDm0fxE4pExqQ7HMGaRO7gEuexu0gfOhVit9yY=)
                          2: BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa (hash: Gqrui0OpB1CczHELSAaN90W0H5eLSv922/lG6tauLOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
        Validity
            Not Before: Aug  9 06:20:21 2025 GMT
            Not After : Aug 16 06:20:21 2025 GMT
        Subject: CN=6896e8a6-921e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:e3:a3:ec:26:20:58:5f:d1:62:75:7e:06:
                    cc:aa:79:f2:37:85:c6:24:86:8e:86:25:25:e8:f2:
                    94:1b:f2:9e:1f:92:d0:c4:49:06:f7:3f:b5:0c:1c:
                    ea:d1:18:66:bc:aa:2f:75:e0:7c:f5:4f:75:63:16:
                    19:f4:e0:ac:55:48:14:7b:e3:d7:51:51:d8:cc:db:
                    4f:cb:dd:cd:b7:cd:9a:7d:ef:47:fc:67:ea:cc:b4:
                    14:37:fa:02:c2:45:5b:5f:e9:52:66:79:86:68:1a:
                    8f:8b:bc:10:d3:65:cd:cc:9c:73:a3:d8:bf:e0:6b:
                    05:15:bf:ec:84:e6:d1:82:ff:cd:3b:e0:f0:77:fd:
                    de:b1:6a:01:cd:2c:d7:c0:3b:f2:b1:a6:26:b4:d9:
                    e2:13:1a:40:5a:52:e6:24:bb:e5:04:8a:61:77:77:
                    64:20:82:7f:fc:95:25:f4:f2:08:5e:4b:3d:20:31:
                    30:e3:14:91:0f:81:20:34:a6:a6:0b:49:d7:37:28:
                    7a:38:0f:a1:12:04:7d:aa:bf:69:bc:18:a4:20:d0:
                    3e:93:79:bb:68:d7:09:82:48:30:8a:04:55:fd:11:
                    38:d3:a9:1e:d0:1c:cd:db:37:03:6a:81:02:84:b1:
                    4a:ea:c7:b3:2e:16:84:5f:b0:5e:47:5f:49:64:cc:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:50:61:FF:79:7E:34:26:31:53:23:1D:9E:43:C4:E7:E5:05:6C:AE
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:f4:fd:33:0e:ef:d2:a6:c8:c4:c3:a6:8c:ea:e1:25:ad:
         54:e7:8e:13:4f:94:27:7b:51:c4:64:c9:6f:a3:0f:6d:0f:33:
         eb:30:50:1f:fe:c8:1f:87:20:fe:af:f3:63:81:e4:fc:32:ee:
         db:30:91:1b:57:41:6a:7b:87:62:99:2c:1d:ec:c0:14:41:b6:
         5d:b9:30:d0:13:87:94:ff:c5:be:a5:c1:4d:0b:b7:f0:ab:a4:
         1a:da:09:2e:65:c9:20:29:19:4a:a5:eb:e3:32:84:a5:57:d9:
         a5:1c:97:64:86:f0:45:6e:a1:55:ee:66:78:9a:d6:d0:be:2a:
         3c:bc:83:a3:7a:e9:80:13:6a:ae:e2:cb:8b:d5:7c:3f:a8:70:
         23:53:fe:49:69:ba:01:46:52:4f:6f:b3:15:f7:d9:fb:a0:8c:
         91:73:b1:73:be:50:39:00:2f:dd:62:6f:c0:15:1e:a0:90:a0:
         ba:73:42:e3:e4:88:d6:b1:00:4b:f4:8f:0c:8d:5c:60:a2:40:
         8f:cb:17:9e:ef:31:dc:e2:8d:b6:a4:e1:b8:81:f2:9a:11:6a:
         53:c1:ed:bc:0f:df:b1:d7:ed:db:53:ec:a0:d1:37:5b:98:dd:
         cd:da:db:08:bf:75:46:62:28:59:57:96:32:24:83:5f:a0:87:
         40:8d:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:26 2025 by rpki-client