Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File:                     iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier:          eSNdFSBXoP+h7DNBoTy9aYRElJ3nXss3EPGzPAYoo9I=
Subject key identifier:   05:F7:44:3B:B6:F9:C7:B2:8E:7E:85:7B:73:79:67:A0:DC:EF:96:57
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer:       /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial:       07C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number:          07C2
Signing time:             Fri 08 Aug 2025 21:33:19 +0000
Manifest this update:     Fri 08 Aug 2025 21:33:19 +0000
Manifest next update:     Fri 15 Aug 2025 21:33:19 +0000
Files and hashes:         1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: 7/9OV3kshY366q71+5djjDjtYYZO5cTlmHE0notVrdc=)
                          2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: IGUI6ypPN1raHp9GKwNU8LZ6l1B0WS2Xv77ok6Yzg+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
                          rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
        Validity
            Not Before: Aug  8 21:33:19 2025 GMT
            Not After : Aug 15 21:33:19 2025 GMT
        Subject: CN=68966d1f-b776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:f0:b5:2e:5c:f0:4a:b4:55:18:26:48:9b:
                    f4:44:f5:2b:44:0d:ad:8e:85:8b:42:c6:2b:a1:ad:
                    7d:9a:f6:63:af:c4:d6:46:07:4f:a8:a9:46:6c:94:
                    f8:99:2d:af:f4:b0:17:e1:28:c1:eb:01:e3:bb:fe:
                    1d:bd:c5:19:14:bd:75:b2:b3:54:a7:23:27:ee:46:
                    d9:1d:b1:3a:da:31:da:4c:a8:3a:a3:f1:b8:0d:60:
                    08:c5:7e:7b:41:f3:76:74:86:ca:a8:57:5d:8a:01:
                    ed:b6:a1:66:78:69:9e:89:9b:66:30:53:5b:da:57:
                    03:d9:fd:ce:99:43:d7:98:14:00:3f:2e:fb:8d:5b:
                    a7:43:70:e1:a1:06:5a:65:98:f1:ef:b5:ca:f9:08:
                    6d:17:f1:e0:87:fa:c6:f7:42:85:c3:c3:8b:66:3a:
                    62:97:42:4b:92:bc:69:94:3c:ac:18:06:b0:ab:25:
                    a3:18:35:47:0c:1c:91:b7:98:bf:19:03:e4:ee:8f:
                    58:dc:f4:a9:d0:01:87:d7:4c:5f:0f:ff:d2:63:f7:
                    94:f9:68:97:bd:f0:03:9c:d6:78:22:37:22:c2:da:
                    06:6b:1a:dd:95:7f:73:d9:53:d8:1b:6c:e4:3e:58:
                    e7:95:79:1d:64:94:41:0b:61:41:5e:aa:94:a0:8d:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:44:3B:B6:F9:C7:B2:8E:7E:85:7B:73:79:67:A0:DC:EF:96:57
            X509v3 Authority Key Identifier:
                keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:c9:18:17:0c:e5:fe:cb:76:cf:96:af:d5:89:a4:54:30:
         34:8a:f5:7e:83:53:76:50:9a:4a:59:fb:20:c9:7f:7c:58:bd:
         60:23:89:94:7e:92:fd:62:bb:05:c1:0a:4e:35:a8:7f:58:20:
         ff:91:15:11:fd:30:9c:5f:05:90:8d:51:9c:66:50:06:31:7a:
         59:89:6a:c3:82:7e:ae:a1:e2:d7:fa:09:dd:ca:31:dd:27:90:
         5b:7b:eb:a8:ab:ad:33:f5:0f:19:57:9b:42:d4:c6:5e:f7:3c:
         60:14:d1:ba:f0:1c:61:2b:e4:b4:df:8d:26:29:9b:56:9f:b8:
         5c:64:c6:fe:35:51:65:25:94:98:08:d0:1a:b2:51:9a:8a:76:
         24:88:bf:95:84:a6:a5:37:6a:d9:e9:8f:1d:4c:ae:6f:fb:f0:
         71:98:cb:22:35:78:35:b4:8c:ea:e3:28:43:ca:81:a9:8e:87:
         d9:39:ca:58:81:c4:d4:69:36:9d:47:a5:35:bc:ea:90:a1:ed:
         48:5f:45:0a:e3:d6:fd:22:6b:61:cb:ea:a3:16:61:21:98:58:
         d7:bb:9e:07:18:c7:48:44:97:1d:80:44:ac:aa:22:c2:12:72:
         35:69:82:97:05:38:78:a2:70:ef:fe:cd:1b:cd:91:61:2f:52:
         a0:3e:48:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4
MUMyNzhENkYwHhcNMjUwODA4MjEzMzE5WhcNMjUwODE1MjEzMzE5WjAYMRYwFAYD
VQQDEw02ODk2NmQxZi1iNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdrwtS5c8Eq0VRgmSJv0RPUrRA2tjoWLQsYroa19mvZjr8TWRgdPqKlGbJT4
mS2v9LAX4SjB6wHju/4dvcUZFL11srNUpyMn7kbZHbE62jHaTKg6o/G4DWAIxX57
QfN2dIbKqFddigHttqFmeGmeiZtmMFNb2lcD2f3OmUPXmBQAPy77jVunQ3DhoQZa
ZZjx77XK+QhtF/Hgh/rG90KFw8OLZjpil0JLkrxplDysGAawqyWjGDVHDByRt5i/
GQPk7o9Y3PSp0AGH10xfD//SY/eU+WiXvfADnNZ4IjciwtoGaxrdlX9z2VPYG2zk
PljnlXkdZJRBC2FBXqqUoI0ZHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX3RDu2
+ceyjn6Fe3N5Z6Dc75ZXMB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2
OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy
RDBIeTZ1anRraFdCd25qVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrdckYFwzl/st2z5av1YmkVDA0ivV+g1N2UJpKWfsgyX98WL1gI4mU
fpL9YrsFwQpONah/WCD/kRUR/TCcXwWQjVGcZlAGMXpZiWrDgn6uoeLX+gndyjHd
J5Bbe+uoq60z9Q8ZV5tC1MZe9zxgFNG68BxhK+S0340mKZtWn7hcZMb+NVFlJZSY
CNAaslGainYkiL+VhKalN2rZ6Y8dTK5v+/BxmMsiNXg1tIzq4yhDyoGpjofZOcpY
gcTUaTadR6U1vOqQoe1IX0UK49b9Imthy+qjFmEhmFjXu54HGMdIRJcdgESsqiLC
EnI1aYKXBTh4onDv/s0bzZFhL1KgPkht
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:35 2025 by rpki-client