Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          0YSeyu8TAigxBgXZUhiPgEjzG48Dl1HNps9GiF13Hmg=
Subject key identifier:   C2:30:DC:CF:DD:E5:B9:8C:9E:21:46:AC:B4:B8:F9:16:B7:22:5C:B0
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          0766
Signing time:             Sun 10 Aug 2025 21:38:43 +0000
Manifest this update:     Sun 10 Aug 2025 21:38:42 +0000
Manifest next update:     Sun 17 Aug 2025 21:38:42 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: iA5h2OEDSXzsH+GnLDCa2wD0Io17CxPz66dUT5MTDYA=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Aug 10 21:38:42 2025 GMT
            Not After : Aug 17 21:38:42 2025 GMT
        Subject: CN=68991162-2d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:c5:68:c8:00:13:55:73:a5:eb:97:00:48:
                    59:43:b9:73:86:a6:22:fc:29:e8:eb:f0:1e:bc:05:
                    22:0d:e1:e8:ea:a0:35:43:dd:a0:25:48:77:19:14:
                    dd:db:8f:f1:6d:73:6f:28:95:4c:17:d8:0e:50:54:
                    f2:c2:bb:98:b9:74:39:20:84:bb:9d:0a:8b:15:fa:
                    0b:4c:f3:cb:09:c4:74:02:2e:c7:ea:df:57:60:74:
                    51:bc:3c:bc:9f:f6:3a:12:77:b9:83:0b:ab:ac:f4:
                    db:6b:0e:44:20:55:44:4f:ef:ca:a1:c0:98:23:ae:
                    2d:d6:54:e8:38:99:4a:e4:b1:f3:92:06:6d:1b:b3:
                    cc:5a:6e:ba:a2:cc:d8:a1:63:c6:71:57:91:d1:71:
                    fd:23:20:4f:8c:87:12:e8:75:b8:ee:12:29:1f:de:
                    3f:c1:b1:7e:8f:d5:2f:2a:02:98:25:b2:1f:72:82:
                    2a:97:e3:be:df:0c:51:5b:c8:cd:f4:68:71:a1:6d:
                    7c:34:25:f6:5c:e3:13:3d:fb:45:32:11:0f:08:f9:
                    50:76:76:91:57:d0:8e:1d:ff:0a:d9:60:f0:30:f1:
                    b2:1c:20:cf:29:b5:6b:26:b3:37:a4:39:33:58:95:
                    9a:d3:34:b0:d0:25:5b:c8:c9:f5:57:12:4f:6c:7b:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:DC:CF:DD:E5:B9:8C:9E:21:46:AC:B4:B8:F9:16:B7:22:5C:B0
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:a2:e1:aa:ce:8c:18:09:ff:da:9b:01:80:49:16:81:85:
         00:38:bc:f0:ca:dd:c4:58:bd:d0:74:8d:b1:d3:5b:f5:49:59:
         79:96:dc:73:38:ec:93:93:5e:1d:ba:7c:a1:66:e3:64:e5:4f:
         3f:78:95:4c:82:2e:75:53:bc:a1:cf:a2:67:56:bc:d8:75:1d:
         58:fc:f1:60:5a:f3:15:20:0f:2b:19:5c:43:27:34:ca:6a:8b:
         8b:cc:7b:ad:fc:c6:53:20:9e:d2:05:fc:9c:22:9e:13:90:ec:
         6a:70:ab:6d:d8:fd:e1:5d:72:67:42:f2:db:c8:84:d2:75:02:
         e0:57:21:e7:60:76:59:b5:6e:06:0f:a4:b9:a5:cc:5c:ff:03:
         bc:d7:75:9c:67:34:bf:c7:c3:17:c0:5f:0e:e9:46:3c:3f:9d:
         60:18:ba:2b:69:55:2b:38:f7:7a:36:29:76:2b:f9:86:73:aa:
         48:5a:39:84:85:4d:fe:87:da:6d:3a:95:29:e5:b5:2c:4d:de:
         cc:f4:6f:a4:ad:de:ab:54:5b:82:03:3e:1d:a1:fb:6b:85:55:
         e6:31:83:56:dc:20:f2:40:d8:10:ba:30:cb:e8:de:97:76:99:
         6f:4b:67:94:bd:fd:69:b2:22:db:f2:eb:8a:1a:a8:f2:4c:48:
         a0:d4:28:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND
NEU4Qzk2MDAwHhcNMjUwODEwMjEzODQyWhcNMjUwODE3MjEzODQyWjAYMRYwFAYD
VQQDEw02ODk5MTE2Mi0yZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbHFaMgAE1VzpeuXAEhZQ7lzhqYi/Cno6/AevAUiDeHo6qA1Q92gJUh3GRTd
24/xbXNvKJVMF9gOUFTywruYuXQ5IIS7nQqLFfoLTPPLCcR0Ai7H6t9XYHRRvDy8
n/Y6Ene5gwurrPTbaw5EIFVET+/KocCYI64t1lToOJlK5LHzkgZtG7PMWm66oszY
oWPGcVeR0XH9IyBPjIcS6HW47hIpH94/wbF+j9UvKgKYJbIfcoIql+O+3wxRW8jN
9GhxoW18NCX2XOMTPftFMhEPCPlQdnaRV9COHf8K2WDwMPGyHCDPKbVrJrM3pDkz
WJWa0zSw0CVbyMn1VxJPbHv9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIw3M/d
5bmMniFGrLS4+Ra3IlywMB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB
MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H
a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8aKLhqs6MGAn/2psBgEkWgYUAOLzwyt3EWL3QdI2x01v1SVl5ltxz
OOyTk14dunyhZuNk5U8/eJVMgi51U7yhz6JnVrzYdR1Y/PFgWvMVIA8rGVxDJzTK
aouLzHut/MZTIJ7SBfycIp4TkOxqcKtt2P3hXXJnQvLbyITSdQLgVyHnYHZZtW4G
D6S5pcxc/wO813WcZzS/x8MXwF8O6UY8P51gGLoraVUrOPd6Nil2K/mGc6pIWjmE
hU3+h9ptOpUp5bUsTd7M9G+krd6rVFuCAz4doftrhVXmMYNW3CDyQNgQujDL6N6X
dplvS2eUvf1psiLb8uuKGqjyTEig1Ci1
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:17 2025 by rpki-client