Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File:                     pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier:          CdcwKhoOI2iYZ1niqJBZ0zk492VtptBfoOXSDbvNMV8=
Subject key identifier:   C1:A1:C4:15:92:C7:10:B1:8E:51:DE:52:B7:5C:2A:01:AB:17:32:C8
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number:          F5
Signing time:             Sat 09 Aug 2025 05:47:12 +0000
Manifest this update:     Sat 09 Aug 2025 05:47:12 +0000
Manifest next update:     Sat 16 Aug 2025 05:47:12 +0000
Files and hashes:         1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: Q5EZCn1JewDESHhWqAbSbgmGPNdOi+Alt5Thu8llOiI=)
                          2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=)
                          3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: Aug  9 05:47:12 2025 GMT
            Not After : Aug 16 05:47:12 2025 GMT
        Subject: CN=6896e0e0-cb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:fb:45:c2:5d:04:82:89:fe:5c:ce:e3:f8:
                    9d:1a:3c:fb:fb:d7:40:46:e4:56:7e:29:89:ec:54:
                    f5:bb:a8:2f:54:13:28:91:2a:52:50:85:c5:3c:1d:
                    c8:b8:37:0b:f7:c7:73:ee:1c:4a:de:3e:8a:a6:24:
                    65:f5:95:84:01:8a:83:27:58:55:fa:59:44:56:35:
                    35:68:09:e5:d3:18:da:36:d3:51:07:14:1a:55:37:
                    f0:fc:98:67:9a:3f:65:2c:f6:1e:37:4f:29:f4:ac:
                    0b:05:65:8e:4d:99:18:80:00:ea:00:4a:bb:7b:97:
                    90:58:63:d4:45:67:8a:3c:20:37:ae:49:91:a4:2c:
                    a1:4b:70:5c:10:a9:cb:cc:fe:36:46:20:22:82:a6:
                    a1:aa:4d:69:2c:bd:8b:70:b4:d4:10:6b:cc:4b:9f:
                    d7:2a:b3:b9:e7:65:15:7a:5f:2e:af:a8:57:17:98:
                    05:d5:60:71:62:eb:1d:df:a9:89:09:d2:1e:63:fc:
                    e6:07:5a:16:f0:79:ec:81:41:0c:7d:e7:bc:13:53:
                    4d:6f:84:2a:52:bf:e5:51:35:a3:e1:c5:01:76:a2:
                    81:1a:7e:23:97:7c:43:05:bf:a8:e7:87:7f:3d:c3:
                    d8:c5:37:54:4e:dd:a3:42:68:cb:67:c4:ac:6d:18:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A1:C4:15:92:C7:10:B1:8E:51:DE:52:B7:5C:2A:01:AB:17:32:C8
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:64:ab:70:bf:86:98:28:39:07:d8:44:d0:7e:18:aa:1d:
         5a:6d:7a:a5:eb:f9:89:39:5c:2a:17:fe:b0:fc:47:51:ad:4f:
         b1:94:a4:e4:3a:99:4f:86:0f:8a:92:4f:0a:19:24:1a:75:1c:
         37:77:08:89:95:9e:77:41:03:a4:bf:41:3a:e8:36:e9:2b:52:
         79:3f:ac:7a:a0:14:75:f1:e3:76:c7:28:ca:9c:64:6e:02:f9:
         ee:cb:a6:4f:0d:68:9c:47:58:6f:e2:4c:d9:eb:5b:aa:b4:e1:
         9b:7e:15:6c:85:b3:3f:f1:05:04:fd:d7:09:b7:4a:d1:b4:65:
         cf:6c:44:bc:fb:0a:5a:7f:73:92:22:94:04:59:38:7f:f6:f8:
         79:07:06:56:59:f6:21:52:9b:ba:15:4d:bc:93:7d:b0:7e:fb:
         61:52:64:4b:0a:ef:ac:30:98:d5:45:e4:28:cd:8f:df:d0:a5:
         98:a6:37:c7:f2:91:8e:e7:2b:35:c6:9a:27:32:73:df:b2:ea:
         85:9e:ef:ea:5a:9f:4a:cd:bb:6b:be:f2:36:62:1f:dc:8f:98:
         d6:62:ba:ac:74:4a:bc:21:ad:87:88:39:a9:74:dd:56:04:b3:
         14:27:2d:de:06:dc:52:34:a0:a0:d2:60:b4:e9:ea:04:a8:50:
         0c:ec:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:24 2025 by rpki-client