Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File:                     1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier:          +h6P3HbWhT0BijFSssYYUHRICD0OM/GQiR3B09y6nF4=
Subject key identifier:   1A:10:8C:79:65:B4:8C:C9:A8:1B:3C:08:50:62:3D:28:CE:63:60:A3
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number:          0659
Signing time:             Fri 08 Aug 2025 22:59:46 +0000
Manifest this update:     Fri 08 Aug 2025 22:59:46 +0000
Manifest next update:     Fri 15 Aug 2025 22:59:46 +0000
Files and hashes:         1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: FJcP5G4IG9xiqcXCOjOUc4QZf94jGLgRfGQjaIJHiq4=)
                          2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: oJo0EldVtMJvTJnA4FpJe7JGIUD/xhTk+VY6Q3vUpoY=)
                          3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: ZgaT6NUPSJGrS2FDGhXNf1URQXdcMTQg5TCptCSVeas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Aug  8 22:59:46 2025 GMT
            Not After : Aug 15 22:59:46 2025 GMT
        Subject: CN=68968162-b196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:e6:70:ff:e7:a5:2e:b1:ae:11:cf:54:f3:
                    2d:b2:16:e5:47:62:0f:1d:ac:dc:2d:8f:5a:3b:0c:
                    29:04:e8:5c:a0:fd:c9:c7:dd:90:17:c8:0b:23:45:
                    a6:7a:a6:af:2e:06:6d:27:ba:a0:50:58:38:92:b7:
                    19:fa:48:12:35:bf:f1:15:51:f8:c1:59:50:1e:de:
                    cd:65:ee:e2:8b:c0:55:a3:6b:16:2b:53:35:01:c7:
                    13:ec:21:85:ac:75:86:73:b4:48:0b:b7:9d:e7:93:
                    78:01:a9:f4:bf:82:da:f9:07:cc:d1:a8:3a:9e:86:
                    2a:cc:4c:e0:d3:c2:eb:00:44:39:4d:8a:33:19:96:
                    69:a2:8c:7d:dc:83:f3:94:01:4a:72:6c:4d:d5:97:
                    b8:4f:fe:47:db:55:8b:e3:e5:2f:6b:80:87:6d:05:
                    e5:d4:2c:73:47:3e:19:6a:38:fa:fa:b7:bc:69:53:
                    7b:30:ea:19:54:85:d1:1b:6d:a9:48:9e:90:5c:86:
                    36:50:9a:d6:bb:32:94:ff:3b:e2:80:2e:98:3e:61:
                    5d:d3:01:1a:98:4e:5d:d8:9a:3e:3a:b0:5f:af:a9:
                    35:f0:4c:87:e2:80:6e:40:d8:b6:69:ef:a1:37:83:
                    bc:43:1f:5f:f2:b0:6e:7f:f6:8e:9e:eb:9e:54:b5:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:8C:79:65:B4:8C:C9:A8:1B:3C:08:50:62:3D:28:CE:63:60:A3
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:42:3e:30:5c:d9:f6:39:08:d2:c1:89:88:95:7f:8e:c4:e0:
         17:8a:b2:ae:4d:aa:ec:e5:3f:7e:fd:fc:fe:23:ee:66:97:7f:
         ef:ef:ef:15:eb:bd:28:72:2c:72:51:4c:af:37:d4:93:15:21:
         93:68:58:0d:a1:9c:2e:aa:c3:8b:25:e6:d1:ca:9e:4d:67:8f:
         d6:d1:ae:d1:cd:ad:94:9f:d8:8a:b4:62:57:54:d4:00:7d:50:
         9d:c9:9e:60:12:92:8e:08:f4:78:de:38:c4:a3:65:a7:99:1c:
         11:32:f7:4a:1c:eb:cc:5d:13:eb:cb:54:f4:97:80:97:42:85:
         e6:54:c4:2a:f8:db:16:3f:bc:e9:5a:77:d7:d8:39:20:2d:bd:
         40:82:28:0e:7d:88:4a:28:43:ac:c4:8f:3f:c8:87:c8:15:39:
         b4:43:a3:7d:e0:c4:e5:c0:2f:4e:92:6b:9b:4e:0f:65:f2:a0:
         15:38:60:56:20:54:01:2b:0d:dd:d6:21:53:32:79:e4:4c:ff:
         39:27:59:02:f6:06:0a:b3:14:cc:77:2f:d1:27:e2:f6:46:68:
         d8:b9:d5:bb:0b:bd:65:1e:de:1d:5f:b2:6d:e1:55:1d:fe:50:
         96:40:ae:a5:bd:ef:e2:40:b5:0b:2d:be:f5:c2:05:60:31:b3:
         9a:b2:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:26 2025 by rpki-client