Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
File:                     4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json)
Hash identifier:          1OfEU3J9bOVjJE5T1jgx5OM7oyxwZfSI7KHrqaJdR/E=
Subject key identifier:   83:87:DE:81:C6:75:CF:FC:E3:68:56:64:49:F6:97:F4:AB:4E:BA:57
Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E
Certificate issuer:       /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
Certificate serial:       1945
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
Manifest number:          1936
Signing time:             Wed 02 Jul 2025 16:32:54 +0000
Manifest this update:     Wed 02 Jul 2025 16:32:54 +0000
Manifest next update:     Wed 09 Jul 2025 16:32:54 +0000
Files and hashes:         1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: x7aLlBAbfherpaMiPgGsP3ENa45MYkAmaMYNildz7ik=)
                          2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6469 (0x1945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
        Validity
            Not Before: Jul  2 16:32:54 2025 GMT
            Not After : Jul  9 16:32:54 2025 GMT
        Subject: CN=68655f36-df3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:1a:1e:ab:22:ab:9a:6b:ad:5b:1f:ee:15:
                    3f:ec:e4:45:1a:50:66:cd:42:9e:53:aa:21:75:c7:
                    2f:7f:e3:eb:28:3e:5b:0a:60:a7:85:af:6b:27:18:
                    cc:b9:a8:8d:1d:42:6f:88:67:16:19:59:3e:3a:51:
                    5d:c6:1f:95:24:79:a0:85:76:b9:c9:0e:d9:72:2c:
                    be:80:67:3f:95:84:2e:56:fe:c4:b4:93:e3:8f:fa:
                    5e:02:60:ed:36:6d:6b:4f:bf:85:f6:01:c8:09:f0:
                    21:28:35:37:c6:7c:a0:d3:1f:c9:b7:24:25:7f:10:
                    5c:85:9a:bd:5d:af:ca:c3:42:83:89:e3:70:b9:82:
                    24:5d:04:90:e0:bd:41:33:b9:05:9a:be:41:b4:ce:
                    e9:b6:f5:5d:c3:38:28:2a:7f:fb:2e:22:bd:d7:3d:
                    17:99:0f:ab:43:f7:4d:1d:f7:7e:e6:63:fa:ee:57:
                    3e:11:74:bb:c1:77:6a:57:60:36:48:71:30:60:c7:
                    0f:e3:36:e6:3c:1a:d2:05:17:e6:be:de:82:e8:cf:
                    98:f1:09:3a:49:69:8e:75:84:70:c8:85:a3:6e:92:
                    82:5b:27:cf:1f:f4:52:f7:0e:e4:6f:dc:13:00:81:
                    e8:ac:d0:20:17:6e:5d:1b:06:c2:5c:14:1a:d6:95:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:DE:81:C6:75:CF:FC:E3:68:56:64:49:F6:97:F4:AB:4E:BA:57
            X509v3 Authority Key Identifier:
                keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0a:b8:2b:b6:81:27:b2:46:22:c3:eb:58:d5:9a:fe:05:bb:
         8b:35:d9:75:ac:11:53:fd:74:48:c1:f0:47:48:ee:13:5b:ce:
         9e:6c:45:4b:8a:72:60:a2:19:5c:d2:56:a4:0b:c7:a1:6a:82:
         c6:97:f2:ea:87:a9:7d:42:0c:e7:b8:29:24:dd:fa:fa:c4:cc:
         2e:cc:3f:33:06:10:ed:ba:5d:83:f4:e3:fd:f4:12:ca:b7:ca:
         cc:e4:be:1f:9d:0b:62:85:76:ca:57:c1:db:de:eb:8b:59:82:
         e8:7c:cc:51:c4:11:07:32:cf:55:c1:1c:cc:09:9e:e7:df:50:
         ae:52:6f:ec:0a:7e:c3:14:1d:84:72:ef:3f:6d:c2:77:79:7b:
         71:22:39:ee:2e:fc:d1:40:88:61:84:53:02:94:ce:60:f1:ed:
         c3:ce:37:ec:bf:1f:54:24:3b:25:cd:86:e6:87:f9:a7:40:c7:
         18:fc:c1:f3:9f:d3:bd:4b:c3:c0:af:13:8a:8c:27:9f:bd:d4:
         92:e7:d2:5d:03:5d:08:76:aa:c0:ce:89:8d:d9:67:6e:e7:f8:
         43:24:16:27:8e:7b:8a:d9:1e:8e:db:3c:b8:9b:fa:2f:1f:f7:
         3e:4d:08:93:ab:e5:51:01:18:9b:75:b4:0a:b1:ad:dd:3c:95:
         3b:02:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:02:04 2025 by rpki-client