Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File:                     De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier:          EBNFNhrtk4jLYku39jkjm8Ey56013NvRmkJdFeW9mh8=
Subject key identifier:   E7:13:7F:D5:D2:95:F2:A6:0C:0C:E6:9E:66:54:2A:96:E7:41:7C:44
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer:       /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial:       1360
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number:          1349
Signing time:             Fri 08 Aug 2025 17:11:59 +0000
Manifest this update:     Fri 08 Aug 2025 17:11:59 +0000
Manifest next update:     Fri 15 Aug 2025 17:11:59 +0000
Files and hashes:         1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: AbfsfzVT/d33bW4l3KxX3oeC93j+kGs+O1a4k00t1sQ=)
                          2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=)
                          3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4960 (0x1360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
        Validity
            Not Before: Aug  8 17:11:59 2025 GMT
            Not After : Aug 15 17:11:59 2025 GMT
        Subject: CN=68962fdf-0f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:8d:f4:25:40:52:4f:11:71:04:72:7a:ed:
                    70:a5:d1:aa:3a:c2:a9:47:a3:4b:db:15:f1:ec:a7:
                    69:93:a0:96:6b:0b:0a:08:7e:7b:68:d5:64:c8:7b:
                    47:90:58:92:36:9b:83:01:f8:4f:e0:61:bc:b0:f8:
                    52:d8:ef:7a:5a:24:6e:13:80:21:a0:2b:76:87:43:
                    79:c1:61:b1:06:09:87:0b:03:6f:4e:c6:ac:1d:9f:
                    9a:be:fc:1d:36:23:09:ec:c7:b0:1d:b8:04:a2:9e:
                    77:73:08:a0:26:e5:16:c3:c6:46:c3:06:29:62:31:
                    10:0d:5f:1f:d8:9f:cd:35:94:6c:c2:40:ce:58:19:
                    f0:e1:73:a8:26:b8:c7:02:ec:4f:51:2a:a8:04:d2:
                    c3:85:92:65:58:19:fb:85:e2:2a:d2:a5:8a:78:7d:
                    27:b9:f0:3c:98:ef:a4:40:46:39:7f:a1:b0:74:88:
                    70:02:76:b0:a4:8a:14:22:d1:af:50:58:ae:f7:14:
                    bb:c5:77:85:3d:af:55:ba:31:c0:90:96:4c:27:e6:
                    fd:b8:18:1e:d8:9c:a0:5f:43:2e:0b:4c:e7:93:d7:
                    89:9b:57:86:7d:bc:7c:68:da:e2:01:4e:82:d2:49:
                    16:94:5d:86:93:d5:83:dd:ff:6b:99:ca:fc:16:7d:
                    89:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:7F:D5:D2:95:F2:A6:0C:0C:E6:9E:66:54:2A:96:E7:41:7C:44
            X509v3 Authority Key Identifier:
                keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:17:b9:ea:b0:3c:49:b0:fe:ea:dc:0c:fc:81:1f:47:f5:74:
         64:e7:63:34:79:9f:ef:12:23:0d:32:b7:86:9f:14:d2:39:43:
         f0:7a:ad:d2:ec:69:ff:35:ca:61:d5:60:d3:2a:ca:56:06:29:
         ad:6f:7c:02:d4:85:62:fb:59:cb:33:9e:42:2b:af:1d:7d:5e:
         3f:cf:51:02:b5:69:58:24:e2:fc:39:65:5f:3c:af:80:99:83:
         a1:d7:df:91:f4:49:a2:92:57:59:db:8b:8c:55:f1:c9:6f:bf:
         e6:00:02:88:86:c5:7c:aa:d0:f8:1f:5b:62:d0:e1:db:04:e4:
         8a:dc:12:5b:4f:ff:2a:a8:a4:38:62:ea:6a:9a:0e:a7:81:55:
         30:68:64:da:71:e0:90:aa:91:5f:bb:02:d5:ef:c3:66:1d:99:
         5e:f3:89:7e:77:7c:93:cf:33:af:3c:8b:c7:8b:4c:71:f3:a5:
         7d:17:6c:d3:5e:65:4d:12:76:3e:77:a1:c2:e6:a3:c0:59:d4:
         ba:af:d7:fe:9e:29:34:62:e7:b7:f7:9f:c0:89:a2:26:78:d0:
         09:a7:86:59:63:85:85:b4:bd:15:bc:de:79:77:10:2c:48:6d:
         35:49:ae:92:84:31:8c:74:bb:30:fb:c8:9d:d4:24:fa:ec:e2:
         a5:46:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:46 2025 by rpki-client