Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
File:                     keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json)
Hash identifier:          5FDmNWjD++VWQXxcJGr0dBJlVJJ6ZF/BJxKMBFcz6zQ=
Subject key identifier:   98:8A:76:B2:9C:AE:C7:AB:A3:85:0E:B7:E3:FB:F6:95:91:C2:14:10
Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF
Certificate issuer:       /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
Certificate serial:       0540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
Manifest number:          053A
Signing time:             Fri 08 Aug 2025 23:58:15 +0000
Manifest this update:     Fri 08 Aug 2025 23:58:14 +0000
Manifest next update:     Fri 15 Aug 2025 23:58:14 +0000
Files and hashes:         1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: 5Px0ARDNFvoJoEpPYt9vn0jS2CO4mwi34c0FIU5egKE=)
                          2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl
                          rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
        Validity
            Not Before: Aug  8 23:58:14 2025 GMT
            Not After : Aug 15 23:58:14 2025 GMT
        Subject: CN=68968f16-ba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:4d:aa:be:31:5b:d1:10:c1:d7:72:58:b4:
                    17:42:b1:d7:2b:ed:3e:22:fc:b2:e1:c7:2d:03:cc:
                    86:ec:ca:03:6c:f1:2a:05:9c:d9:86:e3:46:47:ab:
                    b8:a7:c1:bf:f6:8b:8b:16:a8:ba:ca:df:d1:07:60:
                    cc:ed:84:3e:f5:2b:34:07:40:f8:36:68:10:b7:47:
                    60:50:86:d3:bf:a2:c9:75:fd:a9:15:7e:19:49:5a:
                    84:c9:eb:96:dc:b6:91:4c:93:ea:c6:0a:79:96:93:
                    e4:88:a1:fa:e8:8b:76:e7:da:a3:2b:a4:04:c9:c9:
                    a2:de:bb:db:bb:68:54:a6:37:3b:3a:b9:0e:95:e2:
                    a1:f7:6b:d0:7c:6d:41:72:68:42:a4:02:67:28:3d:
                    42:c0:85:a7:75:34:02:dd:0d:60:7b:81:65:a2:9a:
                    d0:9c:47:55:ff:33:d7:c6:b5:3f:8a:7b:87:4b:e3:
                    21:eb:13:96:ad:91:0c:54:16:b7:1f:04:68:97:4b:
                    6f:bc:ab:4d:5d:07:d5:df:0a:53:0c:bc:1d:ee:a3:
                    f0:bf:89:b6:3c:d8:aa:ef:4a:69:85:df:f6:c8:b5:
                    14:11:bf:e2:fb:3d:ed:4a:92:12:93:e1:7b:85:4e:
                    df:f6:80:1f:ca:88:84:91:a7:28:c0:f0:24:48:26:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:76:B2:9C:AE:C7:AB:A3:85:0E:B7:E3:FB:F6:95:91:C2:14:10
            X509v3 Authority Key Identifier:
                keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:98:b6:f1:53:b5:ea:b0:42:da:d7:0a:ff:97:92:89:fa:
         d8:21:dd:4b:23:80:b6:7f:9e:24:10:d9:f3:6a:30:d5:bd:31:
         e1:75:46:d4:7a:9d:e9:0b:e7:de:e7:24:bf:29:40:a8:b4:bb:
         e7:5c:d7:12:63:5f:fe:19:90:9a:e1:25:71:20:36:4d:33:57:
         a5:b0:f1:c4:55:01:2e:65:0f:82:2b:62:7f:c9:af:86:f9:90:
         80:26:51:f1:6e:fb:cd:4b:62:ee:74:1c:b2:0f:b5:9a:96:71:
         31:6b:e0:35:a1:93:45:0a:81:02:ea:38:71:17:b2:b3:39:e6:
         d4:57:6f:ff:59:53:28:df:00:a2:60:a8:24:89:a3:22:52:d6:
         6b:2a:82:9a:ad:ec:b4:64:73:a5:c8:d4:3c:16:c6:e8:35:bf:
         c7:d8:d2:41:b3:86:1c:fb:dc:16:ab:5c:eb:7a:5d:8a:29:7b:
         7a:1f:4d:cd:51:df:17:00:f1:29:1d:62:49:8b:98:19:ec:5f:
         1f:b9:e4:15:12:a8:83:32:69:d7:30:26:25:6e:79:cd:e8:a8:
         f9:31:7e:01:05:43:8f:3b:16:b6:3c:66:62:54:ba:99:9d:2a:
         60:2c:f6:35:55:58:20:1d:52:fe:4c:a7:78:60:b3:c1:73:c3:
         00:c2:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:00 2025 by rpki-client