Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          GkDDPGe4Y8EyOz8ROFaearYtNWf6AknUyKhX5STp1Sg=
Subject key identifier:   37:35:FD:44:45:01:BB:6E:2D:19:B6:09:C3:81:D1:C2:6A:5B:D1:D8
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          0412
Signing time:             Sat 09 Aug 2025 01:02:57 +0000
Manifest this update:     Sat 09 Aug 2025 01:02:56 +0000
Manifest next update:     Sat 16 Aug 2025 01:02:56 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: gHSNgWrYUUVq9/8pJbWnJNWWwbKfi+Ezh25SVqltlPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Aug  9 01:02:56 2025 GMT
            Not After : Aug 16 01:02:56 2025 GMT
        Subject: CN=68969e40-3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:df:0c:60:71:92:63:8d:4b:5f:91:f3:98:64:
                    f0:df:97:34:5c:6e:98:a4:4e:6e:75:53:29:82:66:
                    71:cb:e3:d6:3d:80:b9:3f:7d:e7:27:42:f5:52:fd:
                    3c:71:d9:1d:c3:23:28:69:4f:eb:6d:28:e0:82:f6:
                    e4:99:b3:5b:2a:a7:11:ab:b2:ba:98:3e:cd:6e:ec:
                    48:31:7d:3f:36:0b:25:53:a1:2a:30:28:8c:2c:14:
                    1b:71:7c:60:be:db:dc:24:c8:0d:fc:ec:f5:6c:ab:
                    53:37:91:91:18:77:f9:f2:6f:38:84:74:42:db:e4:
                    56:de:07:9f:20:f7:b8:9c:b4:8f:a2:4f:7e:15:21:
                    de:40:41:38:ef:5e:58:4a:ab:71:93:28:e6:46:32:
                    87:da:05:8e:c0:5b:48:86:71:70:38:e3:b8:98:0e:
                    89:05:e6:39:2d:5a:6c:be:24:e9:41:c8:bc:7f:59:
                    59:96:69:ec:1e:8d:f5:63:0b:89:b4:7a:87:e9:e5:
                    03:83:83:fe:60:25:3a:70:07:40:01:49:89:3d:4d:
                    65:cd:85:f2:58:3a:42:52:f4:df:9b:25:ee:4b:e0:
                    67:07:6e:26:ec:bd:8d:45:79:d4:8c:4e:bc:e8:9c:
                    3e:20:07:4b:6a:be:f6:d5:c1:ea:2a:8a:84:dc:ad:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:FD:44:45:01:BB:6E:2D:19:B6:09:C3:81:D1:C2:6A:5B:D1:D8
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:13:11:a7:c0:93:d0:2d:fe:57:5f:7f:45:f3:a5:b8:f8:dd:
         18:9d:29:6c:9f:d2:91:85:a0:c3:ac:1b:74:93:ed:79:94:b4:
         2b:a0:3d:6c:ad:f9:14:ff:c1:f4:9f:25:62:5f:51:1d:6f:06:
         07:ae:18:c7:c5:e0:59:e4:9e:27:bd:e4:e8:bc:65:af:f4:13:
         8f:83:ca:4d:4c:6e:3c:72:9b:1e:ff:c4:22:a2:c8:1f:7f:ed:
         e9:12:f5:90:8f:64:25:6a:91:ef:71:05:54:bb:9d:c5:7f:07:
         a6:3f:74:ef:5e:41:c3:dd:fe:df:36:77:d7:92:70:76:20:cb:
         0f:8d:7f:46:4f:59:11:69:d2:81:cd:2a:c3:a1:45:b9:88:b7:
         03:0f:08:f8:09:0c:b2:3f:a2:6b:59:34:23:18:48:04:6d:7a:
         19:01:7e:db:b8:91:b2:19:8b:e3:f1:e5:b0:fe:83:60:c9:72:
         a3:b4:f9:2a:5a:92:14:64:f1:70:57:1d:03:7e:af:13:d1:7b:
         56:f9:b0:b6:af:0f:54:6a:53:0d:4c:d7:95:c3:65:06:be:69:
         bd:05:38:a4:97:06:b3:3e:0f:7c:80:e7:17:c1:e9:36:97:44:
         b4:5e:98:dc:e8:ee:57:23:af:cf:5e:8d:54:f5:e8:cf:6d:91:
         0e:f2:6a:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlBOUYxMTAvBgNVBAUTKEY3OUJBNEJCQkVBRDNERUFEQzlBRDQ1NjRCRkE5RUYx
MEE2QUEyQjIwHhcNMjUwODA5MDEwMjU2WhcNMjUwODE2MDEwMjU2WjAYMRYwFAYD
VQQDEw02ODk2OWU0MC0zODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8t8MYHGSY41LX5HzmGTw35c0XG6YpE5udVMpgmZxy+PWPYC5P33nJ0L1Uv08
cdkdwyMoaU/rbSjggvbkmbNbKqcRq7K6mD7NbuxIMX0/NgslU6EqMCiMLBQbcXxg
vtvcJMgN/Oz1bKtTN5GRGHf58m84hHRC2+RW3gefIPe4nLSPok9+FSHeQEE4715Y
SqtxkyjmRjKH2gWOwFtIhnFwOOO4mA6JBeY5LVpsviTpQci8f1lZlmnsHo31YwuJ
tHqH6eUDg4P+YCU6cAdAAUmJPU1lzYXyWDpCUvTfmyXuS+BnB24m7L2NRXnUjE68
6Jw+IAdLar721cHqKoqE3K2kjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc1/URF
AbtuLRm2CcOB0cJqW9HYMB8GA1UdIwQYMBaAFPebpLu+rT3q3JrUVkv6nvEKaqKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB
OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBlcmNtdFJXU19xZThRcHFv
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk1dWt1NzZ0UGVyY210UldTX3FlOFFwcW9ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBl
cmNtdFJXU19xZThRcHFvckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzExGnwJPQLf5XX39F86W4+N0YnSlsn9KRhaDDrBt0k+15lLQroD1s
rfkU/8H0nyViX1EdbwYHrhjHxeBZ5J4nveTovGWv9BOPg8pNTG48cpse/8Qiosgf
f+3pEvWQj2QlapHvcQVUu53FfwemP3TvXkHD3f7fNnfXknB2IMsPjX9GT1kRadKB
zSrDoUW5iLcDDwj4CQyyP6JrWTQjGEgEbXoZAX7buJGyGYvj8eWw/oNgyXKjtPkq
WpIUZPFwVx0Dfq8T0XtW+bC2rw9UalMNTNeVw2UGvmm9BTiklwazPg98gOcXwek2
l0S0Xpjc6O5XI6/PXo1U9ejPbZEO8mp7
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:50:01 2025 by rpki-client