Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          YlXfh6pULnh4dAo8tjkxOuWyULv8klnb/r/0WABCryw=
Subject key identifier:   89:9C:E8:38:C1:33:79:9B:C2:1B:11:44:9F:6D:06:2F:39:9C:00:B1
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          0155
Signing time:             Mon 11 Aug 2025 04:17:50 +0000
Manifest this update:     Mon 11 Aug 2025 04:17:50 +0000
Manifest next update:     Mon 18 Aug 2025 04:17:50 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: L4mCcmuzgniVov1KZfCxPd+sY+D8sKOF7PP3Qg8Wfh0=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Aug 11 04:17:50 2025 GMT
            Not After : Aug 18 04:17:50 2025 GMT
        Subject: CN=68996eee-068d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:10:4a:65:d1:97:1c:02:fd:19:fd:03:e1:
                    31:50:40:c2:09:02:88:4c:c3:02:32:67:a1:88:9a:
                    d1:e8:ee:43:4d:db:9f:2f:c4:fb:01:fb:03:ad:72:
                    45:2f:ab:8f:c3:dc:8a:a1:a5:5a:1a:0f:54:d0:38:
                    93:25:42:5f:e3:64:02:51:e1:c7:80:34:6f:4b:c6:
                    aa:a8:75:13:2d:c8:79:f3:2f:92:b7:b4:88:38:e5:
                    2c:24:48:59:09:c9:ac:dd:7e:85:d8:db:7e:d5:aa:
                    81:ff:9c:05:d0:c9:b5:c5:e1:2f:d9:b7:97:3d:d0:
                    2a:ce:de:e6:15:98:76:c1:e6:0d:9c:d6:4a:13:bb:
                    f8:84:e5:1e:74:28:45:44:65:82:93:00:48:25:02:
                    e1:b9:5a:a4:ac:a6:08:4f:bf:22:4e:79:53:d7:70:
                    c3:23:32:1e:fc:0b:8b:7d:f7:29:83:c1:0f:ae:be:
                    3b:01:2c:ab:92:5d:20:9d:39:9a:ff:16:f8:0f:5a:
                    03:a4:d9:63:b4:65:4c:61:e5:57:04:52:1f:0a:37:
                    ec:33:3f:eb:b8:f9:19:1f:c4:2e:39:86:2b:22:d4:
                    3a:bc:f7:bf:bd:a0:93:97:ec:f5:9e:fb:94:fe:88:
                    da:62:72:c2:70:76:00:fd:9e:0e:1b:66:29:7e:96:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9C:E8:38:C1:33:79:9B:C2:1B:11:44:9F:6D:06:2F:39:9C:00:B1
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:55:74:6d:cd:a8:52:53:6d:60:b1:5f:c6:2d:b4:c5:e5:
         45:ed:bd:f0:71:ad:64:27:64:b5:3b:b0:8a:24:52:0f:ea:28:
         92:dd:6f:1b:e1:da:17:77:bc:ca:2a:94:e9:5d:b7:2e:79:72:
         4b:21:d8:9e:36:7c:b7:7c:63:02:0f:8b:e7:12:a4:88:e5:30:
         46:2c:66:bf:58:bd:a5:59:a2:af:90:d7:4c:08:3d:57:9b:62:
         3f:1c:cc:06:ad:b6:af:5d:a6:bf:29:f2:f9:73:9d:0c:3e:97:
         1f:fd:11:61:10:f6:4c:24:05:44:36:0e:ec:95:c9:a7:cf:ae:
         55:41:0a:7c:ba:eb:b6:82:b8:4a:d5:2c:29:08:13:72:50:11:
         06:99:bb:2d:9b:5b:68:00:e3:72:96:06:1a:16:c9:67:4a:21:
         7a:b1:19:e1:0e:a0:04:08:0d:6b:0a:eb:bd:2e:8f:c2:4b:63:
         ea:d7:7c:a5:4b:ef:66:42:df:c1:ad:75:35:28:71:0f:b7:41:
         cb:5b:2f:c2:dc:d2:6c:c1:26:73:f8:ab:4d:d1:64:d5:98:ac:
         0a:99:c0:7a:e6:be:ee:4f:5b:30:c5:32:71:9f:1e:4a:f1:e1:
         1a:ba:52:ff:f9:9c:2a:d1:bc:0d:ae:33:f6:64:6c:d1:4f:e3:
         6e:79:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:59 2025 by rpki-client