Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File:                     _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier:          v657uLl8iEwPbcuKLfJDZngR9I/f1tmJK80TET9qQ18=
Subject key identifier:   BC:00:A9:0F:8F:0E:1A:D6:C1:3F:EC:BB:51:A6:F7:F1:B1:23:D9:44
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number:          0B7A
Signing time:             Sun 10 Aug 2025 19:02:57 +0000
Manifest this update:     Sun 10 Aug 2025 19:02:57 +0000
Manifest next update:     Sun 17 Aug 2025 19:02:57 +0000
Files and hashes:         1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: p2x4Tpb13FBT1WOsGAIzFN4+OvECybHZfz7k1yth8EY=)
                          2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
                          rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
        Validity
            Not Before: Aug 10 19:02:57 2025 GMT
            Not After : Aug 17 19:02:57 2025 GMT
        Subject: CN=6898ece1-4112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:58:f0:7c:18:5b:98:3d:35:78:8d:6e:5d:
                    14:5f:97:17:be:7f:12:e8:c8:b2:f1:90:be:4d:79:
                    cf:a4:c0:a1:56:94:48:2d:7b:6b:43:6b:f0:94:16:
                    e8:81:72:3b:c6:3a:0e:39:4d:2d:b0:7c:99:4b:0c:
                    04:c7:05:87:d3:22:48:cd:42:69:fc:93:80:9b:f9:
                    0c:d5:ec:65:5c:4e:ef:35:07:92:6c:33:b2:0d:7e:
                    ab:ff:b4:08:7b:26:78:1d:7c:8f:75:20:89:f1:2b:
                    d0:60:19:fb:49:bd:11:da:7a:e6:3b:eb:d9:82:dd:
                    12:33:a6:1f:53:a7:b7:29:24:41:4e:88:6d:89:61:
                    87:fd:8d:eb:b2:99:b7:ed:ea:31:2e:06:6a:eb:4f:
                    77:17:8a:e2:04:bd:20:7c:d3:5a:5b:c9:9d:07:86:
                    37:3f:d5:1c:9b:9e:47:cc:5c:cd:32:45:b0:b5:e0:
                    11:75:75:99:95:96:73:7c:5f:2b:67:64:4c:a7:e4:
                    74:a1:a0:60:e3:fe:50:0e:35:92:6e:83:78:51:e1:
                    1e:ce:d4:54:2c:08:79:69:7e:7c:c9:35:ac:c4:fe:
                    08:c2:f9:9f:a6:2c:00:ce:0c:84:36:d2:0e:cb:64:
                    ba:69:ec:95:56:25:df:ff:72:7b:af:44:a8:5c:60:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:A9:0F:8F:0E:1A:D6:C1:3F:EC:BB:51:A6:F7:F1:B1:23:D9:44
            X509v3 Authority Key Identifier:
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:be:fe:b4:2d:b2:ff:84:ec:8f:ef:e8:2f:e6:4d:1a:cf:be:
         59:99:e2:ca:41:b9:1c:eb:ad:e2:aa:f0:c6:24:f9:9a:54:14:
         b9:ed:66:e2:a6:5f:7c:3b:42:37:ea:9c:87:fb:b9:30:51:3f:
         de:18:ce:4d:e1:0b:b6:0e:ca:fd:ca:c9:c2:6f:91:11:b2:e7:
         69:5f:9d:bd:8e:68:7e:c1:6c:2c:8d:06:df:fb:51:7c:a4:2b:
         19:80:14:92:42:4b:1b:47:bc:ed:e8:2f:b4:d0:49:44:95:61:
         4d:99:a7:0a:a0:f4:12:de:4a:a3:7e:3f:23:24:d9:27:c6:4b:
         3d:bf:15:7f:26:2b:6d:2a:ab:e0:3f:15:55:2f:4a:02:b9:21:
         51:bc:95:ad:e5:28:a2:e5:3c:57:d8:1f:0d:a3:0e:2a:d3:00:
         21:5c:6b:a4:ab:ab:08:56:01:35:c4:e9:c7:03:ae:9f:b8:37:
         90:ef:6b:3a:67:17:23:ae:7a:98:ab:42:60:a4:3f:f7:06:5f:
         8f:83:14:a7:a6:ca:d6:df:3e:a6:33:f6:92:dc:9b:56:71:25:
         31:51:5e:e7:d4:f2:80:d1:50:f1:ce:3c:55:53:7b:96:28:b7:
         c2:0d:38:b6:1f:b7:71:d1:49:57:1c:b4:b1:70:ad:a6:98:cc:
         26:6c:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:17:58 2025 by rpki-client