Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File:                     rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier:          TfBAyXQvEU4mQmAhogj1EhDhS2Ch1RWFbi2zA3Ys5gE=
Subject key identifier:   2E:43:6E:58:CB:C9:D3:7B:9C:E3:3C:D7:4D:BE:78:07:6A:49:C0:CE
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number:          0C31
Signing time:             Sun 10 Aug 2025 19:19:32 +0000
Manifest this update:     Sun 10 Aug 2025 19:19:32 +0000
Manifest next update:     Sun 17 Aug 2025 19:19:32 +0000
Files and hashes:         1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: bzk6orYJZchO6w+Q5C2n+IYsUES5nJyvmBzdXneq5aU=)
                          2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=)
                          3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=)
                          4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Aug 10 19:19:32 2025 GMT
            Not After : Aug 17 19:19:32 2025 GMT
        Subject: CN=6898f0c4-f4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:29:cc:e4:a1:7f:1f:47:24:8c:44:3c:6b:
                    ec:2d:7e:5a:10:6b:f9:0f:1b:5c:9b:68:78:63:47:
                    d9:6b:68:cf:5c:fd:ba:7e:b7:42:bb:a8:74:76:05:
                    c1:57:48:9a:b7:4a:1a:5a:e8:6c:ab:16:b9:0d:69:
                    95:ae:35:28:36:5d:fe:53:ea:09:43:e9:f6:dd:78:
                    4a:f3:92:54:fa:84:43:96:53:23:aa:d7:20:56:37:
                    d8:a5:28:c8:62:4b:a4:e0:f7:b9:dc:9a:a2:20:c0:
                    9c:c8:07:a9:2b:52:92:fd:01:1e:ee:6e:c3:71:94:
                    34:92:74:ec:38:9c:c9:bd:a5:53:72:4d:01:e0:9d:
                    5e:80:79:cd:63:a8:ee:eb:d2:f5:b5:2a:ea:84:e9:
                    bf:c1:7a:3e:6a:fd:73:35:c3:ba:55:78:86:41:e5:
                    68:b7:b4:e5:ff:6e:3f:93:b0:26:d0:30:e0:41:2d:
                    6a:20:13:07:d3:d6:d4:44:c1:3e:b8:74:02:3f:b4:
                    44:7e:02:cd:c7:be:cd:16:13:80:69:52:d6:a2:ae:
                    b9:d9:7b:60:36:fb:7e:9e:f0:18:cf:25:9c:ad:a7:
                    72:c9:8f:a1:e4:99:32:35:79:e3:28:5c:74:32:ea:
                    ab:80:c4:8a:f8:21:77:ff:29:a2:f1:75:9b:1a:5e:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:6E:58:CB:C9:D3:7B:9C:E3:3C:D7:4D:BE:78:07:6A:49:C0:CE
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:56:c9:f0:17:a1:4a:94:e4:b2:d6:59:52:b7:4e:e1:f1:
         ca:c1:fc:75:16:50:2f:7d:7e:4d:c8:db:00:11:88:be:42:ce:
         df:6f:1d:1d:b0:75:b8:87:ad:ce:d7:d0:68:18:b9:9d:9b:50:
         36:2f:af:10:a4:70:56:aa:01:64:31:95:00:d8:07:4f:47:ff:
         a6:0f:37:44:8f:e9:28:69:d8:61:aa:e1:e6:e3:71:d9:fe:47:
         90:eb:f0:ae:27:8c:43:20:2a:da:ba:e7:6c:39:b4:0a:03:64:
         ba:f4:56:3c:9f:07:08:b4:8b:16:e8:e8:d9:a6:83:66:77:91:
         84:1c:a8:ee:c5:a4:2d:2a:19:17:7f:94:56:03:fd:6f:5d:48:
         87:63:ba:39:d8:d3:7e:4c:29:d2:62:21:3f:a9:53:1a:60:cd:
         41:cb:b8:4c:cf:1f:3e:6f:f6:eb:c2:f3:e3:5c:9c:d7:08:6b:
         e7:58:f4:d8:82:69:fd:c7:ff:e8:21:cf:10:37:4c:16:14:aa:
         e6:2d:37:d1:83:7e:15:63:f8:3a:cc:df:31:04:3e:78:7e:7a:
         4f:fb:d8:67:41:8d:5b:69:e6:f6:2f:e0:66:1a:f2:7a:00:21:
         d5:13:26:e2:11:42:a2:24:24:ff:41:3c:a4:27:85:58:ef:b4:
         c6:7e:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:53 2025 by rpki-client