Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          F1Lx4BaBu27ZQHaiN3FOkeLhhIjXUIMVGl2dYx+/8bs=
Subject key identifier:   A6:6F:47:CA:57:A9:21:EE:0E:5E:49:2B:C9:DF:9D:A1:53:4F:37:66
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F0F
Signing time:             Fri 22 Aug 2025 17:44:30 +0000
Manifest this update:     Fri 22 Aug 2025 17:44:29 +0000
Manifest next update:     Fri 29 Aug 2025 17:44:29 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: +nLFvHkGnsxtnnRLCF6OGspTob4gOKZlOjS2ti+u30Q=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3864 (0xf18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Aug 22 17:44:29 2025 GMT
            Not After : Aug 29 17:44:29 2025 GMT
        Subject: CN=68a8ac7d-70be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:6b:f3:f2:6c:6d:21:10:8b:0a:ae:4c:9d:
                    c3:5e:c0:22:fc:2d:d2:e3:89:26:a9:fd:09:d8:93:
                    fc:a9:24:d0:5f:19:82:22:f4:07:92:31:28:50:7c:
                    79:f5:5d:70:be:aa:e8:21:2f:ea:6b:af:97:7b:f2:
                    2a:e0:69:db:a9:8d:5b:fd:8f:a4:05:8e:29:e6:d0:
                    74:c2:1e:fe:2b:6e:f2:19:e1:d3:ff:00:5b:1d:d1:
                    c7:76:d2:f1:f8:ac:66:52:35:e4:3f:0f:7f:96:6f:
                    1e:b8:cc:bf:29:0d:e5:fd:85:c4:5f:b9:38:98:56:
                    28:3d:ef:9e:4f:a6:ae:65:8f:5c:e7:6c:73:d0:46:
                    83:1e:cc:38:cd:92:98:f3:dc:da:00:02:a1:fa:68:
                    43:b1:89:7d:c3:c3:9c:e3:82:c0:b4:79:e2:7f:1c:
                    68:c3:18:d5:98:f2:74:97:bb:21:7b:0b:12:5c:23:
                    d4:8a:22:a7:fd:3c:00:6e:4f:ed:1d:cb:8e:dc:c1:
                    34:22:7d:d3:83:02:fb:25:19:ee:7a:f9:bb:ba:b1:
                    df:b1:8c:84:b4:2b:c5:f5:c0:fa:c9:84:af:38:cc:
                    d9:90:bb:42:09:a9:dc:17:31:ea:21:35:d9:fa:47:
                    86:d6:ca:69:7a:d0:aa:70:99:08:19:af:ab:52:ce:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:47:CA:57:A9:21:EE:0E:5E:49:2B:C9:DF:9D:A1:53:4F:37:66
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:55:d0:a7:37:f6:1e:99:36:02:66:6c:85:06:7e:c8:69:
         dc:28:f0:d9:1a:6e:e7:d1:b2:53:31:61:07:26:a3:f6:51:a7:
         ef:02:c9:c7:e3:bf:ab:d1:85:ce:e1:4e:22:57:5b:36:a1:a6:
         77:30:33:f8:65:ef:9c:4a:9d:c9:25:99:15:ba:6d:a1:87:9e:
         ea:ec:72:12:f9:78:c5:0d:27:ae:7c:2e:44:76:ec:03:95:a4:
         52:72:3e:27:23:c6:ca:59:c4:2a:d9:7b:d8:32:12:0e:4a:38:
         59:4e:36:c5:db:17:df:f0:f8:56:db:01:22:e4:22:c2:12:51:
         9a:4c:55:c0:c2:a6:47:36:39:71:ab:2b:65:c1:1c:7c:e8:bf:
         16:b6:10:d3:cf:2c:17:90:85:8e:04:00:89:f4:4b:4f:6a:2d:
         c0:e0:80:d2:9a:7d:8e:a9:55:dc:a9:cf:87:8b:03:44:47:1d:
         dd:96:70:bf:cb:c7:89:5d:64:64:73:79:74:81:e9:60:3e:73:
         8c:78:55:1f:11:41:e6:a7:ad:26:9e:60:1a:7c:a7:51:8e:a0:
         6c:9e:06:c9:15:2f:f3:54:62:25:69:9e:47:b4:b0:8e:e8:09:
         7f:92:bf:2f:84:0a:93:93:3f:9f:de:f5:aa:fd:84:27:65:d8:
         05:55:b8:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5
NDY5NTU0MzMwHhcNMjUwODIyMTc0NDI5WhcNMjUwODI5MTc0NDI5WjAYMRYwFAYD
VQQDEw02OGE4YWM3ZC03MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzJr8/JsbSEQiwquTJ3DXsAi/C3S44kmqf0J2JP8qSTQXxmCIvQHkjEoUHx5
9V1wvqroIS/qa6+Xe/Iq4GnbqY1b/Y+kBY4p5tB0wh7+K27yGeHT/wBbHdHHdtLx
+KxmUjXkPw9/lm8euMy/KQ3l/YXEX7k4mFYoPe+eT6auZY9c52xz0EaDHsw4zZKY
89zaAAKh+mhDsYl9w8Oc44LAtHnifxxowxjVmPJ0l7shewsSXCPUiiKn/TwAbk/t
HcuO3ME0In3TgwL7JRnuevm7urHfsYyEtCvF9cD6yYSvOMzZkLtCCancFzHqITXZ
+keG1sppetCqcJkIGa+rUs5XDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZvR8pX
qSHuDl5JK8nfnaFTTzdmMB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw
NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr
UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQPlXQpzf2Hpk2AmZshQZ+yGncKPDZGm7n0bJTMWEHJqP2UafvAsnH
47+r0YXO4U4iV1s2oaZ3MDP4Ze+cSp3JJZkVum2hh57q7HIS+XjFDSeufC5EduwD
laRScj4nI8bKWcQq2XvYMhIOSjhZTjbF2xff8PhW2wEi5CLCElGaTFXAwqZHNjlx
qytlwRx86L8WthDTzywXkIWOBACJ9EtPai3A4IDSmn2OqVXcqc+HiwNERx3dlnC/
y8eJXWRkc3l0gelgPnOMeFUfEUHmp60mnmAafKdRjqBsngbJFS/zVGIlaZ5HtLCO
6Al/kr8vhAqTkz+f3vWq/YQnZdgFVbgC
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:39:52 2025 by rpki-client