Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          gRRte9jw1RZ88Uy9Ry/hb4UwkfN2plXyPi7MGoIBEv0=
Subject key identifier:   82:BE:3D:C5:BD:9D:37:98:A2:7E:EA:A5:7E:BE:F0:83:CC:67:84:E7
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       1140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          1137
Signing time:             Tue 12 Aug 2025 17:22:47 +0000
Manifest this update:     Tue 12 Aug 2025 17:22:46 +0000
Manifest next update:     Tue 19 Aug 2025 17:22:46 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: HylhBzar5ihMWlpk25g0pmKnUHGtNCVbTD44/g6YxoI=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4416 (0x1140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Aug 12 17:22:46 2025 GMT
            Not After : Aug 19 17:22:46 2025 GMT
        Subject: CN=689b7866-d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:2b:6d:7c:dc:81:7c:cf:55:61:16:f2:ad:
                    34:c2:b1:13:a2:20:f4:57:e0:e5:f6:c5:37:35:64:
                    97:82:a1:b6:09:1d:f2:be:59:70:e4:8a:aa:20:d3:
                    40:92:d4:f8:32:09:26:74:a6:e7:57:db:32:5c:4a:
                    1b:67:c9:42:09:1f:34:10:70:22:7a:cd:90:d2:e0:
                    25:0d:45:5b:58:c4:09:cc:da:75:39:39:e3:47:9b:
                    dc:1d:5c:32:e7:4b:d5:57:19:32:16:57:4e:5c:e7:
                    4f:d2:e7:4b:1a:03:ea:d4:ac:d6:9f:ee:a0:9a:4a:
                    9c:6b:5e:82:e7:bd:cb:18:d3:50:b8:05:7f:15:39:
                    24:85:c1:55:ca:4d:e7:b6:92:62:93:ae:ce:bb:ad:
                    93:b2:3a:be:4f:68:ef:bd:e4:e2:e1:ee:9f:89:4d:
                    b8:88:8a:14:33:c0:ca:80:0d:81:3a:bd:23:0c:81:
                    1a:58:c5:a1:ca:ad:8d:65:b6:50:b0:e9:32:ef:24:
                    d3:59:00:82:02:af:34:cf:13:03:aa:ec:06:56:d3:
                    cb:15:98:ab:8c:0b:3f:3e:ce:b9:ef:17:98:fc:d3:
                    69:b2:0b:b0:1c:4d:28:6b:50:b0:fe:5b:46:f8:24:
                    b6:b6:72:3b:5e:21:a4:09:05:63:b0:d0:fb:fb:3c:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:3D:C5:BD:9D:37:98:A2:7E:EA:A5:7E:BE:F0:83:CC:67:84:E7
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:ae:6c:2b:66:18:1f:2f:2f:cb:d4:ee:b5:6c:17:c7:00:
         ff:60:2d:10:7b:80:fa:9b:3b:77:bf:ec:54:91:2a:29:bc:a5:
         bc:2f:09:8c:b7:00:c9:cd:c2:b0:d4:b8:1b:d2:f6:33:8d:5c:
         17:dd:63:bd:45:51:7e:5c:9a:c4:e1:db:e2:fd:a7:14:cf:41:
         7a:f3:29:36:e8:03:b2:55:4a:a8:ee:22:3b:75:aa:16:1d:59:
         cc:f5:83:eb:be:b8:0b:6a:18:82:fd:e4:d1:1f:7f:0e:6d:77:
         01:c9:d5:a2:d5:60:94:bb:e8:78:2a:9e:ee:6b:2b:3d:b0:09:
         19:1d:c9:3c:d4:3e:95:3d:88:33:f9:56:cc:5e:0e:27:d3:24:
         1b:10:6e:7d:54:ad:8a:a6:9c:94:ec:f4:67:eb:3f:c3:89:26:
         fe:d6:23:f4:1c:ae:72:af:fd:0b:4f:ef:f4:f1:bf:36:65:a0:
         f9:35:dc:da:9b:38:df:f9:7a:18:c5:fe:23:56:3c:be:e9:47:
         c4:f4:5f:5b:7f:cf:c9:94:b7:14:21:66:54:e5:7c:a8:c0:ff:
         f5:c4:97:d3:ca:73:96:fa:75:7b:f4:df:88:c4:2b:c4:5b:69:
         7c:33:cc:65:25:5f:e7:e9:53:20:23:b1:27:71:45:37:2d:63:
         fb:49:74:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4
RjI4MjA0OEIwHhcNMjUwODEyMTcyMjQ2WhcNMjUwODE5MTcyMjQ2WjAYMRYwFAYD
VQQDEw02ODliNzg2Ni1kN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxsrbXzcgXzPVWEW8q00wrEToiD0V+Dl9sU3NWSXgqG2CR3yvllw5IqqINNA
ktT4MgkmdKbnV9syXEobZ8lCCR80EHAies2Q0uAlDUVbWMQJzNp1OTnjR5vcHVwy
50vVVxkyFldOXOdP0udLGgPq1KzWn+6gmkqca16C573LGNNQuAV/FTkkhcFVyk3n
tpJik67Ou62Tsjq+T2jvveTi4e6fiU24iIoUM8DKgA2BOr0jDIEaWMWhyq2NZbZQ
sOky7yTTWQCCAq80zxMDquwGVtPLFZirjAs/Ps657xeY/NNpsguwHE0oa1Cw/ltG
+CS2tnI7XiGkCQVjsND7+zx0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK+PcW9
nTeYon7qpX6+8IPMZ4TnMB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz
NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy
OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhfa5sK2YYHy8vy9TutWwXxwD/YC0Qe4D6mzt3v+xUkSopvKW8LwmM
twDJzcKw1Lgb0vYzjVwX3WO9RVF+XJrE4dvi/acUz0F68yk26AOyVUqo7iI7daoW
HVnM9YPrvrgLahiC/eTRH38ObXcBydWi1WCUu+h4Kp7uays9sAkZHck81D6VPYgz
+VbMXg4n0yQbEG59VK2KppyU7PRn6z/DiSb+1iP0HK5yr/0LT+/08b82ZaD5Ndza
mzjf+XoYxf4jVjy+6UfE9F9bf8/JlLcUIWZU5XyowP/1xJfTynOW+nV79N+IxCvE
W2l8M8xlJV/n6VMgI7EncUU3LWP7SXSd
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:33:01 2025 by rpki-client