Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          ZQaXS1xafNsNV/Jady7+04QM8Fuvs6Z0TjItvD6iD08=
Subject key identifier:   3D:C9:64:EF:59:E3:29:2D:3D:21:14:C3:0E:4E:60:4C:7A:58:43:EF
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          034D
Signing time:             Mon 11 Aug 2025 01:20:49 +0000
Manifest this update:     Mon 11 Aug 2025 01:20:49 +0000
Manifest next update:     Mon 18 Aug 2025 01:20:49 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: AoL1QtbUSnCh5PZyjNvBFlo6wzjM2q1EkASNFlARl6s=)
                          2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: ZYAh/gwuXCu7E/Q2FaIlQuRJqUbt0BTDxqZaA+sc86E=)
                          3: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (hash: /MfCrt6/jA1ZbMDAzt6eDA2A3MF3tPOIgWCPnCZuvrI=)
                          4: 748FD068C11011EFB6161F67C4F9AE02.roa (hash: kNrHILbGlKEl0e6X3meuW2JyQCzSzvppG78DH9tkhNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Aug 11 01:20:49 2025 GMT
            Not After : Aug 18 01:20:49 2025 GMT
        Subject: CN=68994571-875d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:7e:9f:61:6d:9c:a4:7f:61:93:8a:9a:e6:
                    06:b7:2c:ab:3b:b3:4b:6f:6c:39:1f:dc:e6:34:2e:
                    8a:10:4c:c9:5b:10:13:80:dd:40:4b:2d:70:6a:5a:
                    06:1e:b7:d7:06:e5:7e:b5:b0:93:ca:52:e5:cc:81:
                    14:03:7d:f8:b3:29:23:9e:0b:ac:19:b1:39:ea:4d:
                    9b:a2:7f:ce:85:89:d5:f8:2f:18:48:10:ca:0a:49:
                    12:db:02:70:ed:d4:fa:15:49:6f:38:b9:79:93:bd:
                    c9:29:c2:3a:35:0c:ef:e3:0d:e2:59:25:c8:6c:a1:
                    8f:ed:f0:9a:e5:fb:e2:49:d7:7b:ae:7d:52:6f:22:
                    08:90:f5:5a:da:60:f6:4c:33:08:09:ad:c4:07:b5:
                    f7:46:1a:bb:1b:ca:74:b0:ac:14:78:81:25:c0:07:
                    76:43:a8:f8:73:0d:1a:d1:e9:0f:a8:91:d7:80:22:
                    a7:06:de:a8:92:13:59:ce:66:c0:09:c6:a9:9b:db:
                    d5:65:94:f8:a5:52:ab:0c:b3:e5:c1:11:d3:45:40:
                    a7:a7:52:2d:ec:bf:78:61:24:15:77:27:31:54:0c:
                    01:b3:f1:f0:aa:95:d2:75:1b:e2:72:14:b5:cb:80:
                    92:3c:db:04:37:81:e5:b0:31:0a:eb:49:e3:89:0b:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:64:EF:59:E3:29:2D:3D:21:14:C3:0E:4E:60:4C:7A:58:43:EF
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:08:68:9b:c7:4e:07:1c:db:f2:d5:16:1d:d4:70:00:52:d1:
         70:8e:85:c4:f6:f2:a4:c8:8b:e1:8e:4a:f7:e6:ee:47:34:9c:
         25:54:07:3a:e0:7d:ea:f7:b7:69:bb:fe:66:51:58:4e:bf:38:
         6a:14:de:44:7c:9a:55:2d:cb:8c:29:83:d0:d2:78:32:2a:0d:
         7f:d7:dd:fd:12:fe:e0:6c:f2:0b:5d:4b:33:0f:3b:42:10:22:
         35:53:76:e1:a9:65:07:ce:70:e6:4d:af:6f:ef:1e:88:ec:47:
         7c:8f:1d:eb:27:84:ab:ea:73:81:01:94:2d:ac:34:c4:ba:3d:
         39:dd:1e:1a:aa:6d:5a:62:e0:b4:72:45:06:19:94:9b:a4:d6:
         c5:0a:56:8e:6e:c0:db:d8:de:3d:ae:62:ef:ab:95:8c:6a:e6:
         cf:98:12:27:88:46:ec:a4:48:a9:4d:b7:a8:67:05:7d:eb:81:
         ac:c9:8b:b1:e2:b4:29:7d:91:7b:65:f3:6d:4c:1b:36:7f:18:
         65:55:7a:75:10:37:d0:5e:b5:10:dc:e6:2d:b5:b9:67:7e:70:
         d2:a0:8f:d0:22:92:d9:88:ce:97:04:4f:34:60:81:f0:75:12:
         86:77:9c:55:09:b2:db:f2:95:6f:77:2f:0e:ea:53:1c:b9:9d:
         a7:cb:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:35 2025 by rpki-client