Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          wgNzOjHcMcqlfvxSgUc9J+UxBaHljhBP0kEgKpMPmG8=
Subject key identifier:   58:AA:F4:2D:52:59:F1:BD:58:1D:04:8F:07:22:2A:C9:10:68:1D:94
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       03EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          03E2
Signing time:             Sat 09 Aug 2025 01:05:37 +0000
Manifest this update:     Sat 09 Aug 2025 01:05:37 +0000
Manifest next update:     Sat 16 Aug 2025 01:05:37 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: haMyENXKOt2W3Qrd9yQUsAKXlUlgy46keKkv7Yy8IEg=)
                          2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=)
                          3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Aug  9 01:05:37 2025 GMT
            Not After : Aug 16 01:05:37 2025 GMT
        Subject: CN=68969ee1-f278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:a2:5b:bf:aa:d5:7a:d7:9b:90:c1:45:0c:
                    6b:16:48:7d:ec:4e:db:93:f9:c4:2a:86:81:11:1d:
                    f0:ed:c7:a6:0a:ce:24:0c:98:77:9c:ec:44:44:86:
                    b0:52:b2:6e:61:cf:7b:fb:7b:0f:1a:1d:da:4b:f0:
                    09:9a:6d:4b:10:fc:1e:f6:3b:74:04:ac:2b:8e:76:
                    70:9b:3c:0c:a9:66:14:c7:db:7e:8a:6d:79:85:d8:
                    8d:23:56:4c:8f:21:25:2d:40:4c:b1:bf:0d:5a:df:
                    86:b0:9f:4b:19:9e:45:61:fb:44:a2:53:06:62:b8:
                    ee:2c:6e:1b:85:d4:7c:d4:19:2e:95:cd:cc:a2:5e:
                    17:5a:a3:7b:d7:ff:40:5c:63:ad:12:e1:32:66:16:
                    64:5d:ba:4a:20:cb:76:2d:f1:b8:22:c7:ad:39:75:
                    e9:a2:ce:dd:53:42:40:50:20:bc:3b:8b:d1:e4:8f:
                    81:1e:e0:7d:0a:f4:1f:8d:58:04:83:9f:5a:ab:a6:
                    1c:1c:26:ce:cd:f2:2d:11:15:dc:1e:ff:b6:5d:33:
                    e6:17:fe:b2:a7:99:ee:f3:2a:e6:90:5f:e7:40:8a:
                    2e:b9:c6:fb:9a:41:8d:4c:09:14:80:de:48:1e:98:
                    44:86:02:04:3d:54:de:48:1a:37:20:03:d1:c1:91:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:F4:2D:52:59:F1:BD:58:1D:04:8F:07:22:2A:C9:10:68:1D:94
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:30:9d:ed:5e:7e:7a:09:35:2f:41:69:6a:3f:0f:03:fc:
         93:83:50:7f:c8:cb:c6:6e:23:1f:5a:02:c6:e1:24:cb:e4:98:
         a4:12:3b:5c:5e:0c:a3:6e:19:67:0c:2b:55:fe:dd:da:16:9f:
         9c:7c:d0:5a:99:27:bc:f7:d1:cf:8a:34:a6:db:c7:4a:e7:80:
         50:5f:17:83:e7:33:af:72:38:a1:52:c5:b8:af:09:76:16:37:
         46:93:52:04:5e:ba:47:d1:e6:d8:54:42:5e:c7:1a:09:36:bc:
         de:b9:71:04:6a:30:61:b4:61:dc:d5:8c:f6:d9:26:ab:1b:40:
         78:de:a2:44:c8:fb:83:7a:6b:fe:0f:d3:26:9a:2e:56:3d:26:
         7a:94:55:e1:c9:64:e6:53:46:45:31:fe:5c:7b:5f:bf:4a:35:
         df:21:d0:d8:6b:19:3c:39:2e:b6:17:2d:f8:4d:45:3e:22:80:
         07:89:55:ca:0a:47:65:3e:03:31:e9:82:f0:d2:d0:1e:c1:ed:
         d7:27:55:ab:0d:af:7d:95:44:1c:96:0f:71:41:07:10:77:bf:
         74:37:3d:ed:f5:fb:3f:0e:b2:26:e8:6d:bf:5d:42:d3:d8:56:
         50:2b:55:54:b8:8c:e0:3f:f4:e9:3f:6a:25:1a:ae:b3:74:ae:
         b8:5a:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:59 2025 by rpki-client