Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          hn6z5LBNwrKbb/TCNvV/uuH7XXmvW3LUocb4bzSJcXY=
Subject key identifier:   1A:F5:28:99:52:4E:D5:95:87:E4:BF:B1:A3:E1:97:D7:66:4B:73:12
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       1158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          1148
Signing time:             Fri 08 Aug 2025 17:26:20 +0000
Manifest this update:     Fri 08 Aug 2025 17:26:20 +0000
Manifest next update:     Fri 15 Aug 2025 17:26:20 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: 2c58eO90DY0ZFjz5VZui4T38B2Sclqx7aQGu6oQ4QKE=)
                          2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
                          3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4440 (0x1158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Aug  8 17:26:20 2025 GMT
            Not After : Aug 15 17:26:20 2025 GMT
        Subject: CN=6896333c-9fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:1c:64:23:84:1e:1e:5f:8d:5b:57:55:9f:
                    b0:1c:f8:de:b4:b8:3f:00:a8:c1:9f:a8:38:37:22:
                    5c:f4:52:d4:6d:aa:1b:69:b4:5b:20:fd:e8:c6:61:
                    8b:db:5e:82:da:70:35:a6:7c:99:7f:64:49:0c:fc:
                    dc:d7:2b:ba:7a:bd:f3:90:dd:5e:ff:0c:f1:28:aa:
                    03:04:63:a8:c1:14:3c:3c:b1:23:a8:6d:a9:49:b2:
                    83:b1:2c:29:75:b3:cd:c1:56:25:03:71:74:8d:c6:
                    24:b7:ae:f0:a3:1f:ec:02:66:3d:c1:b8:dd:6d:25:
                    f3:24:10:0d:2e:01:a7:02:b8:93:95:1b:4f:9d:9f:
                    3c:67:8b:fe:22:ba:29:1f:d2:1c:06:4c:29:3e:6f:
                    b1:85:c5:bf:13:ae:f1:9e:e6:89:e2:65:28:05:41:
                    aa:c0:8f:3e:41:5b:e5:32:6e:05:e6:b9:10:77:53:
                    ac:55:d3:6f:ac:71:e2:30:c9:9e:67:b9:f5:37:0d:
                    50:b9:c1:5e:d4:82:69:74:35:e9:a4:22:2d:94:9a:
                    b8:83:ed:92:76:02:bc:65:82:8e:9f:8d:53:b5:a6:
                    4c:0d:9f:6d:24:9b:96:37:ed:b0:51:f4:9c:68:17:
                    73:45:4d:a6:32:97:ba:73:c0:5f:06:e4:85:01:07:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:28:99:52:4E:D5:95:87:E4:BF:B1:A3:E1:97:D7:66:4B:73:12
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:82:96:0c:26:2f:8c:d3:14:32:84:f1:4e:9b:63:e6:0a:
         7c:31:c9:74:f4:7d:29:86:37:ac:68:35:9f:f6:25:65:57:d4:
         ef:70:08:f2:a7:2f:34:6a:49:37:0a:13:a1:1f:2d:74:18:a3:
         58:da:72:ba:4f:4f:f5:2e:ad:ec:59:12:e3:8e:ed:71:31:55:
         ca:23:06:01:30:5b:b9:46:fd:83:d1:7a:9d:3c:5d:08:64:d8:
         72:d6:99:61:02:37:09:ad:87:1d:b2:c4:60:c7:5f:92:6d:45:
         0d:da:cb:82:f6:a6:06:6b:44:e2:a4:74:e2:46:cb:1c:dc:db:
         2f:53:26:a8:10:43:09:52:ab:34:49:d4:79:9d:eb:64:fe:16:
         98:6d:11:d2:a1:98:4e:d8:16:76:31:19:48:79:1d:de:42:a4:
         e6:e6:08:37:ea:37:ce:ac:47:60:26:92:0e:73:f1:16:5d:15:
         c3:19:b7:dd:ad:69:a6:91:4c:ec:28:76:08:d0:89:f0:90:c5:
         97:c4:8f:26:25:51:f4:78:26:cf:58:9b:05:ae:c2:58:29:48:
         b9:1f:4e:7e:31:0a:7d:f4:a9:6a:e0:1b:43:d4:8b:e7:e6:d3:
         d6:23:54:d1:30:fd:9f:63:e2:93:4e:13:e0:10:3f:26:e3:8d:
         10:57:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:06 2025 by rpki-client