Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          mFhMZHyje2kC6TCjIFL+ZAIZlVRruulYCugfUI546D8=
Subject key identifier:   00:F1:84:1C:2B:EB:36:52:C1:E4:AA:92:F0:87:1F:06:04:5D:C9:CF
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          E2
Signing time:             Sat 23 Aug 2025 05:40:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:40:09 +0000
Manifest next update:     Sat 30 Aug 2025 05:40:09 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: VbRVkzb+xt5qT2x9VQ0O0c4Bta+Skd6gVoC+TM6MbSY=)
                          2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: P0FQ/rDPxBxW0N49mlyIUTIsbbWW9GdBoZ8CUQrpKBI=)
                          3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: Rwtcq7TNaC85U2yt/YqUytqea4zChegNWV5VsMH2T6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Aug 23 05:40:09 2025 GMT
            Not After : Aug 30 05:40:09 2025 GMT
        Subject: CN=68a95439-18ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:fe:21:31:e7:d9:ce:5c:8d:36:06:c6:d8:
                    38:f3:8b:84:94:e4:ee:89:9c:0e:49:c6:40:5b:f9:
                    71:05:4b:e9:3e:15:3c:03:fd:c8:82:41:1b:08:01:
                    63:c6:2e:78:85:b3:c2:39:bb:e6:da:c2:b6:ba:18:
                    09:22:5a:d4:2d:a6:10:f4:db:d1:01:7e:36:0e:ef:
                    b7:97:d0:ef:6d:67:5a:b9:dd:1e:81:99:b1:03:dc:
                    55:a7:ae:c9:d9:ba:da:99:5e:ce:b2:66:ca:51:75:
                    8f:dd:df:6e:2e:88:63:4a:80:34:21:21:9d:0e:99:
                    ba:19:4a:2c:ac:00:47:0d:74:ca:04:a4:63:01:6d:
                    39:4e:ce:f1:b4:ba:d4:9f:68:2b:d2:98:f2:88:a8:
                    a4:0b:77:47:1a:15:f3:32:a7:f8:74:59:de:41:89:
                    d4:e7:2a:56:62:4c:80:ef:62:96:57:aa:bb:de:9c:
                    9c:54:6f:e1:98:f4:7a:32:7d:c2:fc:7b:42:f9:9c:
                    51:79:f9:b1:74:65:29:5a:61:4c:68:9f:05:fb:24:
                    b2:22:47:b5:4b:88:78:a9:0b:a0:a8:67:01:86:87:
                    db:7f:5b:a5:45:b5:16:8f:40:37:d8:d5:79:89:c5:
                    ff:e1:8e:a7:e5:f1:42:d4:93:43:1a:8c:fb:c4:ce:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:84:1C:2B:EB:36:52:C1:E4:AA:92:F0:87:1F:06:04:5D:C9:CF
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:96:a4:1c:16:8a:2a:c4:68:df:c6:a9:57:05:2c:3e:d4:
         49:88:ee:97:35:df:ce:c1:c4:e3:e6:60:0e:0c:57:76:ec:86:
         0b:4b:26:9f:ed:c5:90:fc:05:03:75:60:78:cd:f1:68:a4:01:
         52:bb:4a:12:36:90:db:e8:fa:28:65:96:30:a8:01:72:c6:38:
         92:d6:8e:4b:8e:da:fc:f7:1c:b5:1f:51:e2:a2:4f:52:ef:ce:
         95:0b:ec:e0:f7:55:c2:cf:77:a2:d6:b6:42:41:22:3e:53:65:
         54:9e:f9:0a:40:29:35:08:f7:60:5e:4a:e1:0d:8c:26:6e:d6:
         4a:f5:1c:fd:ee:95:3b:7d:a8:46:54:25:4d:09:e0:8d:d7:a2:
         fb:e9:2f:4f:51:8b:07:68:59:a0:51:56:d2:23:72:08:71:92:
         cc:cf:a4:af:ab:82:33:b1:e4:e9:37:37:43:b5:43:d0:13:6d:
         c8:9a:e1:c4:b5:78:ca:33:d2:24:12:44:1e:14:0f:f4:3b:2d:
         2f:49:c3:2c:75:52:25:94:ac:56:9d:5d:af:ce:82:06:fc:e7:
         0e:ab:24:b3:19:1f:6f:bb:ab:81:4f:18:94:e2:c3:e5:3d:94:
         aa:36:0a:00:09:b5:38:e1:3b:28:f5:df:e1:53:e7:d4:86:f3:
         fe:72:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:25 2025 by rpki-client