Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          Z+X11c8TmGzwB7fo13wGXd5McOmNWeE2YEDqp9bGwxc=
Subject key identifier:   5F:9D:82:9A:E2:A7:BC:DE:10:A7:8D:AE:3A:F9:C2:F6:F0:EB:E6:63
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          34E1
Signing time:             Fri 08 Aug 2025 15:22:53 +0000
Manifest this update:     Fri 08 Aug 2025 15:22:52 +0000
Manifest next update:     Fri 15 Aug 2025 15:22:52 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: eNBqDuiyQkvuGapzAaxpucW9V32Z4Tr96CNNZ6oJans=)
                          2: 137AB7E8556211F08830E141C4F9AE02.roa (hash: J5ujZc+vMwHlknZdwOT8szkE8i/s5cFV08Bj4/0BHsw=)
                          3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          5: 9D90A69E682311F09706D560C4F9AE02.roa (hash: GCjc9YJR3NBBocMpvSMW4rOX2jJcVMsmD+K+LbaLNm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Aug  8 15:22:52 2025 GMT
            Not After : Aug 15 15:22:52 2025 GMT
        Subject: CN=6896164d-c9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e4:7f:e9:10:fa:72:48:b2:71:47:26:b9:8e:
                    c4:bd:7a:d9:a8:7e:4b:c7:48:0a:2e:52:88:11:72:
                    7a:76:09:d9:02:e9:a4:8f:fb:36:6b:48:7d:4b:bf:
                    4f:ba:33:75:52:da:eb:5a:76:d8:5e:f9:7d:e9:5b:
                    79:76:8b:73:c2:cb:44:f8:45:f7:ec:9e:6e:3f:88:
                    6a:8d:b3:b5:70:03:88:69:15:82:09:37:b9:17:1d:
                    9e:9f:25:bc:5f:3f:c6:5c:ea:13:48:cb:ad:24:f6:
                    19:22:c6:99:a7:a2:f3:e0:11:fa:ab:26:26:15:eb:
                    81:9d:01:6b:e8:12:11:66:3d:a8:88:67:ff:c8:15:
                    fa:70:fd:c8:09:f1:27:8e:06:94:76:83:64:79:e1:
                    d4:77:29:1a:88:4f:e6:70:ea:c8:4d:a4:04:53:d3:
                    d0:1c:6d:51:2e:2a:cb:32:26:6f:a6:d8:17:d4:b6:
                    cb:fb:07:e7:c8:ae:6b:80:a6:a9:d0:ca:8d:1b:15:
                    c5:a4:e9:10:51:85:d2:f8:41:86:24:d9:03:53:52:
                    c2:4e:01:09:94:0b:63:b4:5e:d2:29:c1:26:2d:b0:
                    4e:08:05:33:39:da:f9:20:58:f7:d2:be:24:50:20:
                    d5:bc:9b:81:ba:9e:a9:3c:0a:04:99:98:af:c1:b4:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:82:9A:E2:A7:BC:DE:10:A7:8D:AE:3A:F9:C2:F6:F0:EB:E6:63
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:01:3f:fb:16:d1:ab:73:88:ab:a7:c0:3c:4c:6e:38:78:
         aa:57:73:e0:55:45:dd:18:4a:c4:4e:b6:58:09:65:14:83:12:
         1d:2d:77:bd:84:9e:cc:a3:78:78:b1:c0:7d:b4:da:d2:9b:37:
         3a:01:b0:b3:78:79:d6:08:5c:1a:64:cc:1d:92:b7:57:9d:82:
         73:91:1a:81:27:68:cf:8a:7f:5b:69:51:94:ef:7e:39:40:26:
         7f:d3:2c:eb:51:41:2c:cb:01:93:7f:0a:e2:16:c6:42:a3:a1:
         9f:db:52:bb:45:53:57:cc:1c:5c:6a:b7:5b:c2:2e:80:55:e4:
         e2:d8:12:de:9f:24:e3:14:e9:99:aa:b9:af:b4:b4:68:92:3c:
         cf:28:02:f3:eb:5f:71:3b:75:17:5a:a0:2e:4c:50:4c:59:1a:
         17:e0:a1:d1:0c:e3:43:10:4f:e3:ab:59:8b:21:d4:19:9a:dd:
         2f:70:bb:66:89:52:4e:00:c3:c7:37:2f:b1:4b:5e:08:d2:0e:
         62:b8:7e:41:f4:91:d8:f2:51:a3:5f:6f:ae:80:07:e6:0c:0c:
         c5:b6:e1:1f:00:11:f2:24:48:5d:df:ca:8a:af:11:33:c3:8a:
         a6:08:21:2a:fb:d6:fc:ed:ad:9e:93:1d:28:9c:ff:53:9e:17:
         ee:0c:f4:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjUwODA4MTUyMjUyWhcNMjUwODE1MTUyMjUyWjAYMRYwFAYD
VQQDEw02ODk2MTY0ZC1jOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+eR/6RD6ckiycUcmuY7EvXrZqH5Lx0gKLlKIEXJ6dgnZAumkj/s2a0h9S79P
ujN1UtrrWnbYXvl96Vt5dotzwstE+EX37J5uP4hqjbO1cAOIaRWCCTe5Fx2enyW8
Xz/GXOoTSMutJPYZIsaZp6Lz4BH6qyYmFeuBnQFr6BIRZj2oiGf/yBX6cP3ICfEn
jgaUdoNkeeHUdykaiE/mcOrITaQEU9PQHG1RLirLMiZvptgX1LbL+wfnyK5rgKap
0MqNGxXFpOkQUYXS+EGGJNkDU1LCTgEJlAtjtF7SKcEmLbBOCAUzOdr5IFj30r4k
UCDVvJuBup6pPAoEmZivwbT2CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+dgpri
p7zeEKeNrjr5wvbw6+ZjMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx
VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDpQE/+xbRq3OIq6fAPExuOHiqV3PgVUXdGErETrZYCWUUgxIdLXe9
hJ7Mo3h4scB9tNrSmzc6AbCzeHnWCFwaZMwdkrdXnYJzkRqBJ2jPin9baVGU7345
QCZ/0yzrUUEsywGTfwriFsZCo6Gf21K7RVNXzBxcardbwi6AVeTi2BLenyTjFOmZ
qrmvtLRokjzPKALz619xO3UXWqAuTFBMWRoX4KHRDONDEE/jq1mLIdQZmt0vcLtm
iVJOAMPHNy+xS14I0g5iuH5B9JHY8lGjX2+ugAfmDAzFtuEfABHyJEhd38qKrxEz
w4qmCCEq+9b87a2ekx0onP9TnhfuDPRK
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:04 2025 by rpki-client