Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File:                     i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier:          LGiR2yB3zRKIFg7WD0FmU+nJsgW/MTXY//cTBCg6iYU=
Subject key identifier:   D1:6A:35:1A:1D:A0:69:24:29:AC:43:BD:70:27:C2:67:A3:6B:FF:3E
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0771
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number:          06EA
Signing time:             Mon 04 Aug 2025 22:49:58 +0000
Manifest this update:     Mon 04 Aug 2025 22:49:58 +0000
Manifest next update:     Mon 11 Aug 2025 22:49:58 +0000
Files and hashes:         1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: UirlIwjerXSzC/fAjY7Y+fRJ9+fLv0eUPOT8ebKJHqk=)
                          2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=)
                          3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=)
                          4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=)
                          5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=)
                          6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=)
                          7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=)
                          8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=)
                          9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 22:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Aug  4 22:49:58 2025 GMT
            Not After : Aug 11 22:49:58 2025 GMT
        Subject: CN=68913916-c27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:bc:f4:06:e0:56:d4:fd:68:f2:09:a5:85:
                    b4:9a:e5:77:71:c0:fd:07:45:98:73:f2:af:7c:03:
                    04:3b:34:0a:b9:3d:8a:78:0d:7e:93:1b:25:29:4e:
                    ec:75:5d:99:25:e9:99:ae:e1:8d:7d:fb:49:6e:c3:
                    81:90:40:27:34:be:b4:59:76:56:75:97:32:14:e8:
                    d9:02:90:ab:0a:7c:95:1d:8c:1d:d3:80:cc:a1:b6:
                    04:8e:6d:ea:2e:d3:7e:c3:35:44:98:ab:6f:9a:91:
                    06:57:5f:9a:a8:e7:2d:74:27:e9:92:d4:2d:e8:5d:
                    2d:66:ba:30:df:a2:f6:42:8e:f1:c5:52:08:24:65:
                    27:53:29:b6:8f:94:d1:dd:95:f5:45:6f:e9:24:6e:
                    7b:30:3c:0a:29:0d:52:07:75:87:37:90:2d:a9:e4:
                    01:7e:1b:d4:ff:40:2e:d3:5e:25:9c:40:a3:d6:89:
                    18:e3:53:b4:7c:bf:11:34:65:6b:72:a7:4c:c1:4f:
                    e6:90:8c:4f:c6:64:f0:97:0e:78:6c:3b:0f:69:b5:
                    5c:36:fc:39:5d:0c:be:f7:6c:60:ca:2e:10:79:7c:
                    7f:02:56:e5:8c:0c:25:0f:d8:92:89:59:a4:ed:92:
                    c9:cd:ee:4e:da:b8:d6:ff:12:09:9d:40:96:db:3f:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:35:1A:1D:A0:69:24:29:AC:43:BD:70:27:C2:67:A3:6B:FF:3E
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:16:9b:9c:84:38:86:c6:77:50:67:e7:b8:49:83:58:93:
         75:9b:a0:80:0a:b6:f5:77:8a:3e:55:7a:9c:d6:f1:e4:7d:6f:
         49:ae:8b:1c:01:69:45:10:a0:7f:59:8e:ea:45:38:5f:f8:11:
         63:ef:ac:8a:86:8a:ef:7d:83:0d:bf:c1:07:4a:3c:e8:6a:93:
         14:e9:0d:15:b1:b1:4c:c2:08:0a:45:0c:a8:6d:b8:ed:a9:ed:
         7d:8c:9c:ce:6f:72:da:5f:6b:95:13:59:a5:71:c7:6b:bd:12:
         b2:15:d2:16:5d:14:e4:58:5c:57:e4:8c:f3:85:a4:df:eb:3f:
         8c:0c:6d:fb:a8:d5:e2:ad:4f:83:ec:6d:ee:32:eb:2e:e2:35:
         4a:5e:29:70:ac:4a:5d:fc:73:a4:26:03:b7:f3:aa:b8:a5:a6:
         d6:89:e5:56:7d:8f:15:19:e8:b2:e2:55:18:c7:3f:cd:8c:b1:
         c8:39:18:14:9b:e0:65:9a:94:18:b9:d4:35:d3:8f:4a:5c:8e:
         5a:d9:5b:ed:ec:85:07:60:97:0e:ad:32:09:ac:0c:60:27:35:
         31:60:d4:6b:04:78:58:e2:59:da:60:b5:92:eb:bd:a9:64:b2:
         44:f1:6a:09:de:37:20:8b:25:80:92:e0:52:5b:37:b0:ff:f8:
         98:2b:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:10 2025 by rpki-client