Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          GSZIS48zJRhnhH7y1E5Y1+gsEVhMwukaR71fvdh19Gc=
Subject key identifier:   CF:78:A0:3D:A8:20:9B:2C:70:E8:74:D1:D0:BB:14:3C:17:65:F5:DF
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          96
Signing time:             Sat 09 Aug 2025 06:53:08 +0000
Manifest this update:     Sat 09 Aug 2025 06:53:07 +0000
Manifest next update:     Sat 16 Aug 2025 06:53:07 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: asopM/hbrZEKhIewj8uZsFf8HSEyQhKA82L6wX95InM=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
        Validity
            Not Before: Aug  9 06:53:07 2025 GMT
            Not After : Aug 16 06:53:07 2025 GMT
        Subject: CN=6896f053-8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:7d:0e:d9:ae:8e:aa:26:78:62:a7:d5:77:
                    e6:1a:35:63:a2:8d:ba:d6:85:9b:33:ef:93:27:68:
                    f2:05:20:6f:c0:70:a8:01:0c:dc:6c:3a:c4:52:be:
                    bb:af:a1:21:28:15:bf:f0:32:36:2d:47:e5:09:93:
                    fa:73:68:2f:71:8b:d0:76:bb:13:94:b9:bf:de:ba:
                    61:18:12:49:58:78:9c:00:79:a2:39:17:79:08:f9:
                    be:77:df:0d:35:f2:31:aa:d2:c3:fc:d1:b1:91:b7:
                    17:30:2a:d7:48:dd:5b:4a:34:2a:eb:c3:04:4e:57:
                    65:b1:0a:35:2e:32:f9:7c:84:85:08:0c:44:94:d4:
                    ba:fa:e2:92:47:c8:62:57:1b:f5:31:29:96:ef:2f:
                    fa:29:db:5c:b0:e7:3e:b2:fb:1a:2d:fc:24:84:c3:
                    43:09:f9:e1:90:c8:e0:db:74:83:1a:78:88:2a:72:
                    46:ba:ef:e5:17:ba:9c:0e:5b:8c:ba:73:c4:b6:73:
                    36:a7:df:0d:01:ac:e4:9c:d6:ac:2e:68:b6:f6:3a:
                    a6:f8:cf:98:d4:10:52:75:84:03:cd:c0:97:69:ad:
                    b5:6c:05:c4:7a:6a:ce:0e:0e:fb:0e:eb:cc:55:b4:
                    e9:d1:26:c9:78:a4:1b:30:e3:21:39:e6:98:bc:c4:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:A0:3D:A8:20:9B:2C:70:E8:74:D1:D0:BB:14:3C:17:65:F5:DF
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:df:67:9e:67:7d:4e:41:60:9d:a5:60:99:0c:54:c1:22:
         c7:70:a6:59:97:b3:ef:4e:84:49:e4:6e:d9:a7:68:c6:91:e5:
         ba:77:84:2f:bd:2c:9e:6f:21:4f:c3:c3:12:33:67:5c:d2:a4:
         5c:41:e2:72:d1:00:c1:79:01:bf:c7:96:6e:f6:ee:96:17:4a:
         89:b1:0b:2b:f1:16:0d:ac:23:f0:02:aa:99:cd:8b:56:07:3c:
         05:7a:1f:d9:39:5d:f4:94:9a:1f:82:17:22:db:8d:26:17:ec:
         38:d5:62:f0:ed:13:91:94:b6:a4:7b:a6:87:0b:1c:bf:d5:34:
         3e:33:2c:60:cf:f9:34:e4:a8:4e:4f:11:66:60:bc:05:df:8d:
         06:19:42:06:09:6e:1d:2c:96:3b:b0:93:c4:ef:18:a2:d7:4b:
         33:78:44:cb:d9:5e:e5:41:00:90:e9:25:ea:45:43:79:35:64:
         08:bc:d1:05:ed:c1:42:90:8f:99:66:14:c1:2d:a4:8a:1d:20:
         d7:04:18:69:0b:b7:dc:88:03:24:3b:5a:91:f6:43:98:88:ab:
         ff:0f:b3:1c:25:bd:66:0d:a0:f4:b3:15:1c:6b:c5:98:e3:16:
         21:55:ef:8a:76:f7:bd:79:a3:f6:58:bd:ec:4d:15:b4:8d:18:
         ec:05:d8:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1
QzFGNzIxMzkwHhcNMjUwODA5MDY1MzA3WhcNMjUwODE2MDY1MzA3WjAYMRYwFAYD
VQQDEw02ODk2ZjA1My04MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmid9DtmujqomeGKn1XfmGjVjoo261oWbM++TJ2jyBSBvwHCoAQzcbDrEUr67
r6EhKBW/8DI2LUflCZP6c2gvcYvQdrsTlLm/3rphGBJJWHicAHmiORd5CPm+d98N
NfIxqtLD/NGxkbcXMCrXSN1bSjQq68METldlsQo1LjL5fISFCAxElNS6+uKSR8hi
Vxv1MSmW7y/6KdtcsOc+svsaLfwkhMNDCfnhkMjg23SDGniIKnJGuu/lF7qcDluM
unPEtnM2p98NAazknNasLmi29jqm+M+Y1BBSdYQDzcCXaa21bAXEemrODg77DuvM
VbTp0SbJeKQbMOMhOeaYvMQpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM94oD2o
IJsscOh00dC7FDwXZfXfMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky
NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo
b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2Xt9nnmd9TkFgnaVgmQxUwSLHcKZZl7PvToRJ5G7Zp2jGkeW6d4Qv
vSyebyFPw8MSM2dc0qRcQeJy0QDBeQG/x5Zu9u6WF0qJsQsr8RYNrCPwAqqZzYtW
BzwFeh/ZOV30lJofghci240mF+w41WLw7RORlLake6aHCxy/1TQ+Myxgz/k05KhO
TxFmYLwF340GGUIGCW4dLJY7sJPE7xii10szeETL2V7lQQCQ6SXqRUN5NWQIvNEF
7cFCkI+ZZhTBLaSKHSDXBBhpC7fciAMkO1qR9kOYiKv/D7McJb1mDaD0sxUca8WY
4xYhVe+Kdve9eaP2WL3sTRW0jRjsBdhs
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:07 2025 by rpki-client