Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
File:                     racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json)
Hash identifier:          scMgnXsJKgZ24q4QPJkooeXcuiWumMEt0TtJybEX7FA=
Subject key identifier:   96:67:7C:5E:87:C2:46:C1:2B:58:E0:18:88:3C:48:53:AF:DA:B2:2C
Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
Certificate issuer:       /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Certificate serial:       0763
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
Manifest number:          12A1
Signing time:             Sun 10 Aug 2025 19:08:44 +0000
Manifest this update:     Sun 10 Aug 2025 19:08:44 +0000
Manifest next update:     Sun 17 Aug 2025 19:08:44 +0000
Files and hashes:         1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: 8OaxkHjEMYTL+OYXecb7U96jb9HfpoGFSt9dMMd8EVM=)
                          2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
        Validity
            Not Before: Aug 10 19:08:44 2025 GMT
            Not After : Aug 17 19:08:44 2025 GMT
        Subject: CN=6898ee3c-983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:0f:5c:67:4e:b9:de:47:80:05:c2:a8:e5:
                    dc:99:b7:96:33:0d:5d:df:6c:33:e6:fc:5f:b9:36:
                    4b:9b:94:56:d8:24:d0:bd:da:a4:b0:28:98:a3:e3:
                    8b:28:de:31:91:c6:b0:5f:54:4b:6d:4d:9f:d3:e6:
                    ad:58:0e:c4:ce:18:48:7b:7b:31:35:14:0e:46:fe:
                    50:8c:11:72:89:18:b4:2b:b5:80:da:e6:63:c4:15:
                    a5:1c:10:24:a8:bf:ea:65:eb:a6:42:cf:48:0d:67:
                    84:15:7d:e0:dd:13:87:13:4e:fc:5b:41:b6:59:30:
                    0f:f8:a3:7b:15:b0:16:14:7e:2a:ca:33:73:35:23:
                    12:78:7d:2b:5d:81:df:a5:41:4e:9f:1e:a8:d8:fb:
                    ba:cf:b6:22:40:16:84:38:3a:4c:9b:47:60:e3:61:
                    26:15:0c:ae:4b:1c:f5:71:91:ea:48:60:26:d4:a0:
                    b7:62:dd:73:da:4b:61:a9:c0:0c:7f:c6:41:d8:3c:
                    1f:49:e6:4e:28:67:87:34:85:6b:b3:ae:7d:e4:fa:
                    ac:d0:ee:d1:bf:e0:e6:0e:2e:92:fd:9c:18:b9:6c:
                    64:ad:14:48:8b:b6:f1:cf:36:58:f1:3b:35:fb:8b:
                    7b:a8:d8:6d:99:a8:34:46:2a:18:ea:2a:ec:87:dc:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:7C:5E:87:C2:46:C1:2B:58:E0:18:88:3C:48:53:AF:DA:B2:2C
            X509v3 Authority Key Identifier:
                keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:04:c1:1d:bf:6b:88:6c:8a:1d:17:34:3a:2c:df:7f:e2:3d:
         09:1f:ac:76:66:2a:d7:cd:7b:d9:68:31:05:3d:38:99:62:2d:
         29:19:76:57:92:24:78:4c:b4:b6:c2:33:e8:1d:e3:dc:fc:0e:
         90:e9:ed:a8:90:45:1f:a1:fa:4e:c6:78:a7:fc:b9:cb:74:84:
         08:ed:03:0b:9b:1d:bd:a9:c8:47:b7:0c:f5:51:cf:43:4e:fe:
         0e:5e:f5:8f:25:10:54:ee:d5:5d:3c:66:b3:16:ab:ab:28:08:
         5d:7c:e0:ec:6d:b8:cb:dc:f2:62:74:aa:5b:69:72:49:89:e8:
         ef:9f:4a:e7:14:3b:b9:09:41:c8:57:7e:c2:ef:00:31:a1:f9:
         d5:d7:f6:ed:9b:f8:3d:bd:f9:2c:c2:fa:3c:5c:68:a2:c1:98:
         d0:35:f2:95:1f:3e:7e:bd:f0:10:f4:df:02:d4:09:f0:40:81:
         2c:8f:d0:21:0a:8c:38:ca:2d:55:89:1d:0f:28:02:2f:3d:2a:
         43:de:85:34:88:c4:87:e5:9d:38:36:4f:c0:02:6f:7a:7a:4a:
         8f:2c:a1:c8:06:f5:cc:2d:d4:fc:42:c6:39:44:a0:be:b4:36:
         91:59:a7:85:87:98:69:b6:a7:90:47:36:83:55:81:be:a6:3d:
         be:6d:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:04 2025 by rpki-client