Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
File:                     n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json)
Hash identifier:          XVeLIlvIc1/gwbiaFCG4nGrA0Xl9MdsG/MjNBwj6m70=
Subject key identifier:   43:94:E6:0D:11:0A:34:4D:AE:E2:72:7B:7F:EE:8B:D6:95:15:D3:58
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Certificate issuer:       /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
Manifest number:          0787
Signing time:             Tue 12 Aug 2025 21:49:14 +0000
Manifest this update:     Tue 12 Aug 2025 21:49:14 +0000
Manifest next update:     Tue 19 Aug 2025 21:49:14 +0000
Files and hashes:         1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: MskV6IHIQmMWgeI3K4sd/vaF49Vz51xdCYUxR6/OTiU=)
                          2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
                          rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 21:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
        Validity
            Not Before: Aug 12 21:49:14 2025 GMT
            Not After : Aug 19 21:49:14 2025 GMT
        Subject: CN=689bb6da-60cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:13:92:9c:33:aa:6a:dd:01:df:00:39:67:
                    da:a8:44:12:19:ba:34:5e:3e:98:ea:91:fb:3c:0d:
                    91:05:d9:42:3c:d0:49:77:69:2f:f0:3f:68:06:6a:
                    bf:39:31:cc:6b:d6:0b:34:71:27:33:d4:70:e5:12:
                    7e:98:45:86:0e:d6:a3:e4:ba:7a:dc:bc:18:2e:03:
                    b9:2d:3c:fd:ae:5a:3d:3f:b6:d5:01:fc:ef:24:74:
                    d0:73:65:35:77:e3:ba:99:57:2c:0c:8d:e0:f9:f2:
                    ba:32:f0:03:97:ab:bb:6a:d5:ff:3e:8a:24:27:ad:
                    b6:76:1b:83:6f:84:6a:a1:b2:2e:84:a0:f3:99:18:
                    9e:93:ac:2c:80:35:3e:7c:20:f0:49:36:05:3e:86:
                    1f:f9:76:d8:f1:02:38:d0:c6:0e:9e:d6:84:7b:d9:
                    18:b0:21:ae:a6:93:26:73:ed:74:6f:2d:2f:77:66:
                    e8:92:82:5c:9d:f9:af:61:8d:1b:6f:05:76:db:e1:
                    3d:19:37:00:da:05:20:f0:63:ce:c8:e0:7b:bb:c5:
                    0a:4a:92:8c:ca:a9:37:84:d4:11:e2:fb:d4:65:39:
                    37:70:12:66:28:67:34:ee:81:b0:26:d9:c5:70:e6:
                    e6:b9:1b:26:15:4f:50:46:00:5d:20:4b:30:63:cf:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:E6:0D:11:0A:34:4D:AE:E2:72:7B:7F:EE:8B:D6:95:15:D3:58
            X509v3 Authority Key Identifier:
                keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:2a:a2:ff:c2:f1:c8:ac:4e:f8:e4:05:f7:71:92:de:25:
         3d:fb:5b:f5:c6:68:ae:b5:75:47:e4:a2:53:e4:95:e4:3d:4e:
         3f:de:f7:9a:21:96:72:61:e7:a0:bd:e5:e2:fb:12:e7:47:ad:
         45:15:3e:24:b7:bc:31:d8:f7:40:d0:ef:17:2e:f5:bf:b7:2e:
         71:1e:37:cd:89:17:8a:17:ad:f3:94:b6:6c:88:b6:b4:fb:27:
         e3:95:39:51:f7:8f:a6:e0:f8:5f:03:37:fb:45:36:31:ed:16:
         f7:51:cd:78:c9:c7:bd:bc:97:7d:63:0b:66:07:74:e2:7a:48:
         09:32:49:b9:c4:8f:a1:0a:6e:55:4f:34:ca:42:c6:47:2c:7b:
         ba:2f:e1:20:05:73:9c:10:a0:b3:5f:61:82:5f:6a:12:cc:08:
         f4:12:92:2a:03:8c:c0:75:3f:0e:9c:60:a0:8b:51:9a:8b:32:
         80:07:a2:a1:2b:ae:7d:83:f5:cf:20:6a:78:d9:ac:bf:3d:90:
         ef:7a:a5:ae:c2:5c:12:7b:1f:35:4b:cd:93:c1:4c:cf:0f:e3:
         ba:79:e8:8a:7c:8a:65:9c:4d:05:8f:b9:60:77:0e:ce:75:84:
         47:35:69:24:8f:f4:25:0c:56:8c:da:8e:9a:07:c4:5e:fb:83:
         93:7a:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:08 2025 by rpki-client