Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File:                     70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier:          tqzpI9kBeEJbGZ5HcMrxwcNz9wBa4FaLR0ahDq6j1Qo=
Subject key identifier:   CE:91:20:8C:3A:6D:EC:46:F2:F5:BA:89:58:C8:D4:4A:FD:29:E2:FA
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number:          06E0
Signing time:             Fri 08 Aug 2025 22:27:34 +0000
Manifest this update:     Fri 08 Aug 2025 22:27:33 +0000
Manifest next update:     Fri 15 Aug 2025 22:27:33 +0000
Files and hashes:         1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: z5tIqQhb4rvI5jbCAOSlwhceUHVx/GI1s15E7gAWLAI=)
                          2: 05F05106586011EE9399A92EC4F9AE02.roa (hash: uE1Fce5x0iyRAmN0knxTtSotHjcQGH0Wea/3oUShZPs=)
                          3: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: u+3Kqlk1/ablMkybk1cn19GMLJzdy6UlNuONo3CbZ6Y=)
                          4: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU=)
                          5: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: 2hIQWvs5gCQjNeqkzYCi7IsHJw8uYq2a3BY4+uJn8rA=)
                          6: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: TnWWrKTfNekbVi6pIzTrH/qhvsHIadymtQxdXn+0jBk=)
                          7: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34=)
                          8: 34956990D75511EF80E68A39C4F9AE02.roa (hash: dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=)
                          9: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: hXI7auCZSPvAdHOfiV427I6HYIQHsMDxA6gjGw/HO3w=)
                          10: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: lRSKSHnJ9I173rhXzeEXncsQoFojPmJc5tNaNSnncqo=)
                          11: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Aug  8 22:27:33 2025 GMT
            Not After : Aug 15 22:27:33 2025 GMT
        Subject: CN=689679d6-4ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:59:b2:03:a6:5f:53:67:8a:94:19:66:a9:
                    b8:21:c4:43:54:16:00:40:2b:f0:c0:3a:c5:49:6e:
                    03:38:3d:43:99:21:5f:3a:fb:3a:02:a5:d3:4d:3c:
                    fa:63:41:e2:e6:6a:87:03:ef:55:17:25:a6:43:06:
                    ab:e7:7d:0b:52:00:2f:2e:1b:83:31:9e:63:bd:79:
                    57:81:02:72:61:46:dd:de:a9:a5:6a:09:ed:7c:88:
                    28:34:a7:5a:65:cc:c9:2c:a1:65:f1:f3:5f:8b:4e:
                    fa:39:5a:7f:b4:8a:64:89:82:d1:28:db:a1:2d:d2:
                    10:c4:fe:a3:86:98:d5:ab:3a:29:fc:cc:7b:3c:c8:
                    9b:e0:12:db:13:bf:c8:53:be:6f:22:5a:c5:d8:95:
                    56:b0:65:e2:dd:71:76:3c:fe:b6:2c:59:ab:66:ea:
                    73:84:a6:4f:ba:24:10:65:e5:2d:93:39:c2:4b:b1:
                    d8:33:60:55:76:59:ff:7b:d8:5f:67:6e:47:42:14:
                    23:bd:40:89:fd:6e:f4:1f:91:bc:ad:f3:60:af:57:
                    38:e9:4f:1a:19:64:c5:f3:7e:15:1e:f1:3d:f5:a3:
                    b5:b3:f1:03:03:93:30:e3:c9:45:4f:3f:0f:d5:27:
                    02:5f:d0:56:d6:f4:86:0b:70:e7:57:87:56:6e:e9:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:20:8C:3A:6D:EC:46:F2:F5:BA:89:58:C8:D4:4A:FD:29:E2:FA
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:3a:63:47:57:66:5c:9d:bb:11:8f:11:73:3a:a5:f6:da:
         8e:25:1d:88:ca:eb:0d:c9:a4:21:a0:e3:ef:d6:b5:05:36:67:
         b6:64:a0:8d:a4:ea:4f:b8:dc:ea:cb:76:19:15:71:6c:32:ab:
         e8:52:3c:d8:84:4f:45:e2:d9:29:8d:fe:a0:60:f0:0f:a0:c1:
         18:4a:89:4b:24:3e:96:90:a5:3e:c1:36:36:06:4d:9b:6f:c6:
         dc:2e:20:64:11:e2:19:da:40:bf:33:56:cb:77:a6:4b:84:f6:
         90:3f:98:68:40:47:30:7f:d5:e0:83:5a:cc:9b:a6:da:d3:53:
         e9:6a:f8:15:38:c6:ee:1e:c2:c5:22:8c:bc:e6:79:aa:ec:0a:
         6d:0b:db:32:0e:b2:7a:30:1d:8a:41:18:fd:8c:d3:b1:d8:ab:
         31:57:a6:64:8e:22:21:3a:01:91:46:99:b5:78:00:42:62:26:
         93:f2:26:99:a2:ca:c9:02:04:93:8f:09:a3:7d:69:21:37:6b:
         79:49:e5:46:fd:6b:10:96:8d:28:38:e1:54:2f:41:37:7f:3d:
         16:64:af:6d:16:37:1b:91:2a:c0:8a:c7:07:b2:31:7e:42:e6:
         21:28:6c:d0:58:74:4c:6e:3b:a6:18:de:76:eb:ad:c7:6a:21:
         38:b2:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:55 2025 by rpki-client