Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
File:                     h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json)
Hash identifier:          WAijwfAbUVgbjlz3Vu6ReILxxAW0zH18F2IK7Pxl4mI=
Subject key identifier:   C2:DB:4E:5C:7A:44:B2:52:7E:6A:D3:F2:5B:70:50:C8:0C:48:85:0B
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
Manifest number:          07BF
Signing time:             Sun 10 Aug 2025 21:16:06 +0000
Manifest this update:     Sun 10 Aug 2025 21:16:06 +0000
Manifest next update:     Sun 17 Aug 2025 21:16:06 +0000
Files and hashes:         1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: rcsRSF5nLHZd677XWX6cvAZWcUwVxU/UTvo++gu8n3Y=)
                          2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: +LCAkAjuOva0wvpdg8eQD1RUB4/36WnSyP1+IZjx2KI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Aug 10 21:16:06 2025 GMT
            Not After : Aug 17 21:16:06 2025 GMT
        Subject: CN=68990c16-b891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:be:07:c1:3b:1d:0a:4d:c4:d7:f2:50:52:
                    43:ce:d2:ea:bb:c6:2d:f8:60:a6:91:06:c7:44:0c:
                    a7:76:f0:8b:0d:4e:48:b2:cf:b1:89:41:1d:ac:75:
                    62:77:ee:c3:19:14:8e:f0:bf:a5:31:e8:f4:30:4a:
                    40:d5:8d:6a:c1:f0:ed:5b:3d:14:ba:ce:db:82:d4:
                    d0:f3:26:74:cb:a6:6b:57:b9:ef:e6:56:4a:4e:6d:
                    ac:69:28:9c:50:5f:c4:fb:44:ac:2c:2f:ba:08:5f:
                    70:bb:03:4e:72:9b:46:b1:2d:f5:33:b0:e3:b4:a5:
                    e9:85:98:68:aa:4e:5a:2b:64:37:2f:a4:b9:7c:52:
                    2f:2b:90:3a:97:4d:90:a8:45:3d:78:e2:66:39:07:
                    6e:02:dc:3d:32:54:8c:1f:ea:3a:c4:be:66:d5:a6:
                    56:cd:da:ec:a2:ae:54:4a:df:47:bf:04:03:83:94:
                    09:38:a1:7d:14:f8:da:c5:91:e8:c8:55:0f:f0:a3:
                    75:f8:b4:bb:0d:2c:0d:37:27:97:52:b7:a0:18:2e:
                    9d:66:66:7d:41:4f:b8:56:88:62:16:f8:d4:fd:94:
                    94:97:6a:79:3a:19:e3:f0:ee:e9:30:4c:15:41:0d:
                    39:50:b6:a9:4c:f3:30:d1:3a:ae:23:92:94:20:ea:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:4E:5C:7A:44:B2:52:7E:6A:D3:F2:5B:70:50:C8:0C:48:85:0B
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:57:05:43:76:dd:f0:d4:98:0e:23:f9:44:d5:32:d9:24:f4:
         18:76:76:b1:a3:7b:4e:f7:44:74:f9:1a:ae:58:00:66:4b:79:
         56:f9:83:2b:9e:06:35:c1:b9:1f:39:54:e6:eb:f8:41:04:7d:
         a2:9a:ab:70:2f:8e:9a:68:b4:32:9d:0b:e8:43:7d:85:c1:cd:
         73:c1:69:20:33:f1:56:0d:aa:ea:cf:a2:c0:cc:6d:98:b6:2c:
         e7:3e:80:a2:09:c0:91:95:46:34:8c:c5:cf:c5:82:4c:48:47:
         4c:8e:a5:fd:a2:47:15:52:f2:24:44:95:7c:cb:0c:69:bc:16:
         90:de:ad:4b:ac:5b:57:dc:cb:46:f0:72:41:c4:15:e3:ff:4c:
         79:39:83:ce:67:5b:41:44:3c:2a:c2:b3:37:a8:8a:f1:af:a5:
         56:10:c4:55:61:d9:b0:0c:1a:5c:5b:06:f5:20:90:32:b3:73:
         7e:5f:af:d8:a9:2a:8e:22:4d:4a:1c:d7:72:43:e3:a1:a0:e3:
         75:36:5b:9e:43:d7:01:ba:23:7d:fd:83:48:99:dd:c2:1f:0c:
         65:7c:69:9d:a9:d8:61:f9:9f:1b:60:95:95:30:ab:c0:cc:d2:
         c7:30:66:90:96:16:96:76:79:fe:89:18:78:d5:0f:25:77:7a:
         9a:ad:4b:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4
NzkzNDhBNDUwHhcNMjUwODEwMjExNjA2WhcNMjUwODE3MjExNjA2WjAYMRYwFAYD
VQQDEw02ODk5MGMxNi1iODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymq+B8E7HQpNxNfyUFJDztLqu8Yt+GCmkQbHRAyndvCLDU5Iss+xiUEdrHVi
d+7DGRSO8L+lMej0MEpA1Y1qwfDtWz0Uus7bgtTQ8yZ0y6ZrV7nv5lZKTm2saSic
UF/E+0SsLC+6CF9wuwNOcptGsS31M7DjtKXphZhoqk5aK2Q3L6S5fFIvK5A6l02Q
qEU9eOJmOQduAtw9MlSMH+o6xL5m1aZWzdrsoq5USt9HvwQDg5QJOKF9FPjaxZHo
yFUP8KN1+LS7DSwNNyeXUregGC6dZmZ9QU+4VohiFvjU/ZSUl2p5Ohnj8O7pMEwV
QQ05ULapTPMw0TquI5KUIOoLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLbTlx6
RLJSfmrT8ltwUMgMSIULMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB
QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY
ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXVwVDdt3w1JgOI/lE1TLZJPQYdnaxo3tO90R0+RquWABmS3lW+YMr
ngY1wbkfOVTm6/hBBH2imqtwL46aaLQynQvoQ32Fwc1zwWkgM/FWDarqz6LAzG2Y
tiznPoCiCcCRlUY0jMXPxYJMSEdMjqX9okcVUvIkRJV8ywxpvBaQ3q1LrFtX3MtG
8HJBxBXj/0x5OYPOZ1tBRDwqwrM3qIrxr6VWEMRVYdmwDBpcWwb1IJAys3N+X6/Y
qSqOIk1KHNdyQ+OhoON1NlueQ9cBuiN9/YNImd3CHwxlfGmdqdhh+Z8bYJWVMKvA
zNLHMGaQlhaWdnn+iRh41Q8ld3qarUvy
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:05 2025 by rpki-client