Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
File:                     yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json)
Hash identifier:          +aD+Eui8FEbyOI0jeKf8uJ/r6t9O9ewqUd7CNQIs3c4=
Subject key identifier:   14:10:2D:8D:A0:8A:80:38:F1:FD:F2:30:5F:15:49:5E:1E:5B:68:8E
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Certificate issuer:       /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial:       119C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
Manifest number:          1176
Signing time:             Sun 10 Aug 2025 17:14:22 +0000
Manifest this update:     Sun 10 Aug 2025 17:14:22 +0000
Manifest next update:     Sun 17 Aug 2025 17:14:22 +0000
Files and hashes:         1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: vO2fDeIu2pM2nQlUbLZjZ2BY/PH2mxnQ/upT6VFRuA8=)
                          2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=)
                          3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=)
                          4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=)
                          5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=)
                          6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4508 (0x119c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
        Validity
            Not Before: Aug 10 17:14:22 2025 GMT
            Not After : Aug 17 17:14:22 2025 GMT
        Subject: CN=6898d36e-b75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:b7:08:84:43:87:16:c2:e6:a1:98:ac:48:
                    50:ad:8d:e0:df:a6:0b:54:ab:93:1b:d2:72:ad:b8:
                    82:dc:e1:17:53:31:9e:3a:99:a5:5a:1d:b1:68:db:
                    5b:ad:88:09:51:1f:d1:8b:ba:99:11:cd:0d:75:61:
                    49:6b:7b:df:a4:be:58:33:76:40:b3:4d:af:a8:ea:
                    fc:af:d8:9b:ca:2b:2e:58:5b:72:b8:6b:91:37:98:
                    25:b0:9b:25:27:7b:cc:f6:44:0c:89:33:e6:02:34:
                    d6:3b:49:fc:89:4a:3c:8b:25:b6:58:48:b1:98:a8:
                    82:f1:53:12:95:94:77:66:81:ce:eb:87:37:06:ee:
                    bd:da:e8:52:4b:b5:19:d0:8a:9e:e1:31:25:ed:0b:
                    75:ff:f0:f1:8b:1d:bb:d3:e0:bf:dd:6a:80:ab:94:
                    30:7e:b2:98:96:ec:03:b1:2d:b9:78:bc:dc:20:bf:
                    3d:0c:2c:aa:18:26:35:2b:8c:69:be:94:23:8f:48:
                    95:f3:dc:6a:48:38:50:94:fb:d0:34:a1:e0:21:01:
                    fb:d4:a9:cd:1d:94:be:d7:9f:9a:7b:f8:87:05:fe:
                    46:84:ea:20:2e:2e:73:01:fb:94:30:ce:e9:42:70:
                    8a:87:a4:8b:e7:1c:d2:ee:54:cb:4b:8f:73:be:22:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:2D:8D:A0:8A:80:38:F1:FD:F2:30:5F:15:49:5E:1E:5B:68:8E
            X509v3 Authority Key Identifier:
                keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:98:52:1e:f7:f0:e5:1e:37:82:eb:79:06:82:36:ef:6e:
         1e:94:48:65:d4:2f:41:c9:f7:02:a3:0d:0f:65:e9:d4:57:d2:
         a0:5d:49:65:35:0b:9e:fc:82:3d:d8:e9:9c:f3:b7:d9:37:1f:
         e2:b2:db:18:34:f5:5d:ef:5b:d2:a1:aa:d8:ce:be:b5:a9:af:
         43:f1:fc:b1:16:3b:3b:ba:e6:03:64:b4:29:e8:94:ce:12:8a:
         97:47:18:ea:04:b6:47:aa:95:85:1c:cc:9f:30:a4:1c:29:d1:
         0e:12:4f:39:5b:db:77:a8:3e:d3:63:75:1e:d4:fd:5c:fd:f5:
         81:2d:7a:7e:37:1c:d2:e4:0f:3b:8a:bd:0e:e8:06:70:95:71:
         a3:aa:43:9f:6c:8d:2b:89:e5:68:3f:0a:19:07:c1:f3:5d:ff:
         9e:d7:4e:e2:27:c5:2e:b6:69:d4:60:3a:32:9f:59:b1:7a:d1:
         fb:4f:86:b1:a0:d9:77:b4:ed:bc:c0:16:08:33:b6:31:1c:ca:
         a7:6c:2e:24:c4:dc:17:5f:68:36:09:6a:fb:b6:16:96:46:0a:
         0c:a1:e5:af:29:09:a1:12:bc:42:dd:72:2a:b0:b9:dc:12:3c:
         77:60:26:cb:8b:ec:0d:1f:ff:20:24:c6:ed:b7:c0:7b:86:8c:
         b0:16:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:54 2025 by rpki-client