Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
File:                     9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json)
Hash identifier:          KFKns55CntOQmM88JEYMX9sXDGMM7LlQamWNuF2N3aI=
Subject key identifier:   DB:5A:AB:77:FF:F0:E0:E8:6B:C6:FF:CE:52:77:BA:78:C8:47:9D:B2
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
Manifest number:          065A
Signing time:             Tue 12 Aug 2025 22:54:45 +0000
Manifest this update:     Tue 12 Aug 2025 22:54:44 +0000
Manifest next update:     Tue 19 Aug 2025 22:54:44 +0000
Files and hashes:         1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: EzgIaVZaaXxCvWs+GTrp9gBO63dXR49TTeDG6OQ6rVI=)
                          2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=)
                          3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 22:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: Aug 12 22:54:44 2025 GMT
            Not After : Aug 19 22:54:44 2025 GMT
        Subject: CN=689bc634-dad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:6b:a4:ec:e3:19:bb:c5:25:18:7b:41:24:
                    c7:aa:1c:8a:90:fa:06:86:b8:5d:66:d2:e9:a2:87:
                    dc:3b:1b:2f:90:5a:42:82:cf:0d:d4:07:e2:49:76:
                    75:d9:04:09:25:77:04:e4:43:29:06:ff:5d:f4:12:
                    32:04:69:35:64:fc:f2:dc:99:34:ec:7d:12:69:20:
                    df:c8:68:27:7f:5a:e3:89:05:3d:da:1b:7f:72:5b:
                    55:f8:46:15:f4:ea:b0:96:84:9f:b7:2b:a2:6a:e2:
                    d9:bf:58:f5:c7:a3:9c:92:70:18:48:f4:89:8d:22:
                    3b:15:6b:6e:3d:12:c5:fa:f6:45:ae:14:c3:d2:03:
                    04:b3:69:57:b3:25:f2:0d:20:6e:40:13:5b:27:05:
                    1e:0c:c4:38:c8:10:1b:7c:66:fd:cf:bb:0a:30:bc:
                    39:a0:e9:d1:f1:8e:db:fc:c8:0f:43:19:ef:17:14:
                    ca:e9:4b:52:03:3d:c1:89:89:d3:5e:b4:ca:65:6d:
                    c9:e5:9e:d4:c4:2f:6b:76:fd:f1:9b:a4:d0:bc:ea:
                    c8:43:97:88:40:d3:6a:2f:7e:03:63:b1:1b:ba:bd:
                    67:a1:80:a7:e3:0f:22:b7:5d:d6:fa:15:aa:00:e2:
                    b4:f8:df:4c:ea:1f:3b:2e:ea:7b:92:58:ba:fc:1a:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:AB:77:FF:F0:E0:E8:6B:C6:FF:CE:52:77:BA:78:C8:47:9D:B2
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:19:ea:91:39:c6:8a:fd:5a:27:70:db:0f:d7:68:c1:89:81:
         37:1f:fe:5d:76:2f:de:e6:74:e3:db:52:3e:3f:c4:09:03:cc:
         2e:e2:41:fd:9a:d1:c8:af:20:8b:88:8d:56:03:e7:7f:50:5c:
         7b:07:1b:e1:b6:7d:15:09:f7:78:44:04:89:24:52:9b:45:a6:
         b5:07:f1:87:9a:e9:74:97:53:48:24:5e:19:28:6c:a6:10:c4:
         af:47:ca:2a:bb:c9:0b:2f:66:42:d3:0a:26:b3:66:43:2b:f7:
         3c:38:d6:ba:dc:43:ec:60:88:56:52:42:8e:83:af:ef:30:cd:
         2e:fd:57:ea:34:05:84:63:51:ab:6a:7a:77:81:21:b3:0a:75:
         65:c0:ab:73:83:49:3c:1a:ab:08:d8:a7:f8:82:ba:58:c5:16:
         12:7f:f8:b0:3a:4e:f6:f3:fa:ea:19:ed:3e:11:f5:98:71:7d:
         f1:a0:cb:8f:4f:ec:59:ed:39:be:47:cb:62:e7:f8:82:ec:ce:
         e7:e2:cc:d6:39:30:41:ff:1b:5a:78:54:5b:d5:92:20:d8:a3:
         87:7c:ab:85:cd:fb:34:31:91:ff:f0:89:77:d6:f7:f3:23:9e:
         29:7d:26:37:47:ee:e0:85:69:58:c1:16:50:ac:52:ed:23:cd:
         b8:9e:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:31:16 2025 by rpki-client