Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File:                     TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier:          f99hsRpbWgt1tMYGlK0hLVBUdhR4hBSnzaOBaNkYu50=
Subject key identifier:   E8:E4:3E:AE:60:15:B8:96:8D:5B:F3:58:92:6A:46:38:77:44:DC:AF
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer:       /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number:          0158
Signing time:             Sat 09 Aug 2025 04:31:49 +0000
Manifest this update:     Sat 09 Aug 2025 04:31:48 +0000
Manifest next update:     Sat 16 Aug 2025 04:31:48 +0000
Files and hashes:         1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: 6tfBFXuh3JNlGaT/BOGZN3a+K+gG0/fSRcyjdEjS8K0=)
                          2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=)
                          3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
                          rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
        Validity
            Not Before: Aug  9 04:31:48 2025 GMT
            Not After : Aug 16 04:31:48 2025 GMT
        Subject: CN=6896cf34-edd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:f1:8e:4c:17:29:fd:dc:b1:2f:eb:f8:81:
                    ce:5d:cf:75:c9:a5:00:b2:2c:3b:e2:17:9b:50:26:
                    6d:49:24:92:2a:4c:20:e7:e5:43:9a:90:f5:dd:5e:
                    63:35:12:d2:de:fc:19:86:3e:4b:32:a7:bc:f2:8c:
                    65:13:15:86:22:18:17:b9:57:34:36:43:0a:a5:e9:
                    01:8a:02:ac:d4:57:d3:6d:ec:c6:41:fe:6f:6e:4c:
                    e4:f7:4b:6a:85:03:12:9f:cc:50:77:0b:01:1d:07:
                    39:41:07:c2:a3:a7:c2:bd:b4:0d:23:d2:fd:ea:32:
                    00:94:82:00:a3:63:f2:68:19:28:39:5a:e0:51:e2:
                    52:78:64:c3:8d:67:f4:93:95:29:9c:e4:02:b5:88:
                    0c:13:44:39:dc:11:72:63:d1:2f:0c:1a:c4:1a:6e:
                    25:e7:b7:99:2c:da:69:55:4d:8c:00:0b:b1:d9:f6:
                    ca:06:96:49:41:04:39:91:f9:11:79:7e:0b:9e:72:
                    8d:1d:79:21:8a:da:f6:ad:45:28:ab:5c:b0:77:70:
                    a1:74:3e:81:df:2a:24:26:1e:3a:2e:46:a7:f2:81:
                    e3:a4:19:c8:45:b1:4b:20:05:c3:ec:4e:a5:b5:72:
                    02:3e:f7:47:b3:66:8a:43:60:bf:0f:24:77:bd:f6:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E4:3E:AE:60:15:B8:96:8D:5B:F3:58:92:6A:46:38:77:44:DC:AF
            X509v3 Authority Key Identifier:
                keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:e5:4a:20:f9:27:b4:99:9f:c5:70:86:cd:7a:2a:93:07:
         f7:4d:41:86:60:9d:83:bb:28:76:e6:ea:ac:a5:93:18:8b:56:
         4c:39:37:05:02:32:72:04:62:19:c2:b4:3f:fa:c3:4c:a2:4a:
         4d:da:70:a5:14:13:0c:c0:ee:46:55:97:55:3e:fe:66:6c:e3:
         cc:af:44:f8:65:33:e7:f6:da:fc:89:fb:bd:3e:c2:71:ae:75:
         95:c7:30:8e:b3:9d:2a:d5:77:6f:5f:af:78:05:51:9e:54:d6:
         04:8f:17:54:a2:08:6a:05:97:c5:a5:13:be:1e:0c:65:e4:99:
         ed:a0:73:99:1e:80:12:2a:96:75:47:20:54:57:a1:c1:b7:2e:
         c9:78:ad:f6:ad:a8:49:19:10:73:89:de:95:52:a6:00:58:26:
         7d:10:43:7c:53:de:2e:22:61:c8:1a:62:1f:81:00:2d:53:3b:
         74:53:67:32:b8:6f:d1:1a:e6:72:f0:d5:26:a9:ea:df:8d:6f:
         dd:00:0f:2c:59:ea:6e:c0:e0:ba:f7:60:f6:88:ff:5f:f7:15:
         25:2e:f5:c3:aa:7e:03:21:ef:e0:5c:2a:82:30:5c:36:28:d5:
         b2:f9:a5:87:0c:7d:c8:f9:44:09:7f:e9:89:38:0e:83:34:fb:
         a8:04:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:06 2025 by rpki-client