Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          qTmfD9XAHVVXKpmB3FPBGaO9s2a/Isci4ScAnkjm78s=
Subject key identifier:   8E:D5:FF:A6:57:59:DD:54:EA:51:D1:B7:9C:36:2A:8D:2F:4E:84:81
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0A7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0A6C
Signing time:             Wed 06 Aug 2025 19:56:37 +0000
Manifest this update:     Wed 06 Aug 2025 19:56:37 +0000
Manifest next update:     Wed 13 Aug 2025 19:56:37 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: 5sN/gqc3v+VRDm/dKMuwRRTsp4Z+a/eaQ1gZAowbovA=)
                          2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=)
                          3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 19:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682 (0xa7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Aug  6 19:56:37 2025 GMT
            Not After : Aug 13 19:56:37 2025 GMT
        Subject: CN=6893b375-5111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:c6:ef:e9:41:a4:18:1c:68:5a:4f:bf:cd:
                    f3:4f:bb:a5:ef:76:97:6c:83:8e:ad:96:cb:4e:c4:
                    7c:fb:a3:08:6b:21:b2:64:d2:a3:25:9e:bb:36:d0:
                    ef:0c:2f:cc:c5:ef:f7:e0:ea:34:cb:02:ed:26:58:
                    50:3d:15:b9:d9:74:52:5e:a8:5f:d0:e1:ea:b8:f6:
                    41:c0:76:46:96:36:23:d8:1e:e7:e8:71:d1:c5:48:
                    61:2f:9a:f8:16:8f:b0:c6:b9:3f:e5:0c:b8:1a:9e:
                    f9:98:2c:b1:5e:1e:7d:d5:4c:b7:64:59:3a:28:9b:
                    19:26:b2:60:29:5a:52:d0:c8:f3:ec:d5:b2:0e:ea:
                    23:bb:43:29:cb:c0:d7:95:34:45:63:b6:aa:22:e7:
                    f6:1a:06:a6:f7:6d:d9:b8:89:bc:7d:6b:de:e5:c2:
                    75:bf:8f:d4:d6:ec:1d:dc:fa:37:e3:fe:fa:bc:4f:
                    4c:70:fe:a8:ab:87:51:66:99:ac:ad:ed:10:03:a5:
                    d2:80:0f:7d:bf:f0:45:99:09:55:83:1b:8a:34:13:
                    84:45:d2:96:0d:50:f9:e3:d8:5b:37:e2:dc:23:48:
                    15:23:6f:cf:eb:75:bb:c7:c7:a0:60:cb:b4:64:a3:
                    e8:51:80:ab:af:53:ab:72:3e:22:65:16:e5:67:dc:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D5:FF:A6:57:59:DD:54:EA:51:D1:B7:9C:36:2A:8D:2F:4E:84:81
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:97:7f:78:87:4e:ca:b1:38:91:94:b9:cd:73:fb:49:c6:
         ed:59:d6:13:41:88:3b:36:5e:f4:81:6a:e9:2c:6d:bd:02:63:
         d8:8f:76:cb:d9:8c:28:a2:18:31:6d:61:2a:8e:91:65:e9:e1:
         86:27:b4:ed:11:49:70:af:17:54:6a:72:5d:03:ed:05:1b:e8:
         2f:33:04:ca:35:19:00:ec:d3:56:2b:17:0f:c2:b5:4d:61:ad:
         5a:6e:ed:1c:59:be:e0:7a:6a:f1:5b:b2:d6:03:1b:e0:71:5e:
         c1:fe:ed:33:56:06:98:31:ca:bb:1e:15:cb:1b:82:a1:44:99:
         4e:e9:88:74:a1:fb:52:46:df:03:3c:93:65:85:c5:77:53:9b:
         a5:52:0c:73:14:c9:d8:c7:c9:26:b4:8b:79:88:1d:f3:f3:50:
         c1:ee:34:3b:5d:8a:0e:ae:c0:f2:8e:58:15:2c:bd:8e:ff:bf:
         0c:0b:f5:85:2a:f1:3b:c1:aa:83:7c:c1:14:7e:6b:1a:03:6e:
         d7:69:e4:9e:44:44:c3:59:ec:a4:d0:f7:b3:0e:78:bf:39:0a:
         1f:f3:0f:6e:70:55:37:81:95:76:24:83:cd:c1:06:29:58:38:
         dc:3f:39:27:1c:35:82:e9:63:d9:3c:ec:82:04:0c:48:1a:68:
         2d:c6:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:47 2025 by rpki-client