Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
File:                     i99RGJodvfloQ0tec2qpq_1FVhw.mft (raw, json)
Hash identifier:          BH96y4KF/bqjxBgbDqKy0KD+zaGipmVy7pqEEmKpwP0=
Subject key identifier:   AA:D4:15:C1:51:1B:26:FC:9A:91:24:AC:0F:7A:0D:EA:D6:56:79:6A
Authority key identifier: 8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C
Certificate issuer:       /CN=A9119510/serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C
Certificate serial:       1937
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
Manifest number:          192E
Signing time:             Fri 22 Aug 2025 16:31:13 +0000
Manifest this update:     Fri 22 Aug 2025 16:31:13 +0000
Manifest next update:     Fri 29 Aug 2025 16:31:13 +0000
Files and hashes:         1: i99RGJodvfloQ0tec2qpq_1FVhw.crl (hash: GtaMbcTX5Bre/cdgNabOuqHijPp54Cfq2ki/qutppOU=)
                          2: F13A6FB883D011E7948A8052C4F9AE02.roa (hash: kYdu5SvSND0wTBbIu3Tyn2sefHAK5eSHyt8KcNAu2Mw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl
                          rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6455 (0x1937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119510, serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C
        Validity
            Not Before: Aug 22 16:31:13 2025 GMT
            Not After : Aug 29 16:31:13 2025 GMT
        Subject: CN=68a89b51-5b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:4a:e8:e3:f5:ed:28:8b:f4:b8:bd:52:f6:
                    4c:57:3e:cd:8b:3a:7c:20:8a:86:16:9d:53:17:6f:
                    12:fd:10:c8:c6:d0:b2:90:76:a2:97:b2:da:df:d8:
                    8a:78:32:c5:83:89:5e:c7:54:2a:cb:7e:e6:c6:41:
                    86:a3:f0:d8:5f:d9:34:51:fd:03:a5:11:13:5b:db:
                    b6:42:e5:91:7d:0e:e9:0f:26:0d:83:91:35:66:da:
                    63:ea:4f:4d:8d:e3:f1:c1:91:2c:4d:84:ea:72:06:
                    ec:17:e5:57:47:04:d7:a5:03:f3:ca:6f:49:48:84:
                    be:ad:59:66:ae:d5:a8:cb:bf:16:33:0e:33:73:ca:
                    36:df:d3:ec:c2:4d:56:bd:e1:77:10:99:6d:d2:1e:
                    8d:cf:28:30:46:60:aa:fb:89:0a:9c:02:80:1b:78:
                    13:0f:89:11:3c:6b:72:4b:bc:30:0b:df:5a:47:d1:
                    b6:ce:e9:44:05:48:14:39:a9:32:ef:f5:cb:0b:2b:
                    25:d7:5c:95:3f:aa:00:36:0b:06:76:6a:d1:5b:cc:
                    d1:34:06:f9:b6:e4:91:3a:60:d4:5a:be:b2:5d:e6:
                    31:f9:91:c6:a0:92:c5:40:5c:4a:c0:1f:bf:a6:c0:
                    27:2c:9f:98:9b:50:2a:af:e4:5f:bd:b0:08:14:71:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:15:C1:51:1B:26:FC:9A:91:24:AC:0F:7A:0D:EA:D6:56:79:6A
            X509v3 Authority Key Identifier:
                keyid:8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:dc:4f:2f:c9:ff:98:cb:ed:61:53:eb:bb:1d:2c:6a:1f:
         55:e5:96:92:a7:d5:27:35:dc:05:84:89:16:00:ee:6a:b4:e7:
         7b:05:fa:51:2f:d0:3c:a8:8e:7e:fb:96:6f:59:7a:d6:f6:65:
         0b:7b:bc:5d:b9:7d:a1:8d:e3:99:30:a2:1d:1f:42:4b:71:16:
         d7:17:b9:b8:fb:51:39:3e:19:dc:31:26:2b:dd:d3:94:3f:99:
         8b:c7:ed:2b:71:e7:9c:29:b4:7e:e8:49:77:53:e6:3a:43:5f:
         2f:c9:34:27:ab:b1:6f:6d:ff:3a:c6:1f:0e:82:55:be:5e:ad:
         c6:1d:5c:16:3b:22:12:8b:29:a7:20:b0:59:3b:0c:b4:77:75:
         60:c7:5c:e4:fe:56:96:a0:8c:99:2a:24:09:86:59:61:bd:03:
         73:8d:9e:bc:a2:c9:bd:72:d6:db:93:d9:50:3d:e9:44:85:4a:
         87:b1:23:39:84:bc:6c:f8:13:47:9d:a3:51:6c:20:77:e8:81:
         7b:3a:4e:9b:f3:fb:69:d3:9a:37:ae:83:45:cc:c9:bd:d1:36:
         0a:0d:ce:22:7c:22:7d:29:6b:47:ed:31:7b:b0:b3:64:cf:49:
         0a:bd:27:f8:9c:be:55:41:71:8e:9f:d8:4b:fc:e0:31:9c:5e:
         f7:43:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:53 2025 by rpki-client