Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File:                     KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier:          7PtpGNZyE7VRmvWd+taJX7KWImm2SQTVNJp4FkDH0mw=
Subject key identifier:   9A:4E:B6:46:D7:26:64:CA:EF:EE:25:9B:E8:12:EB:42:00:15:6B:5C
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer:       /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number:          078F
Signing time:             Fri 22 Aug 2025 21:36:45 +0000
Manifest this update:     Fri 22 Aug 2025 21:36:45 +0000
Manifest next update:     Fri 29 Aug 2025 21:36:45 +0000
Files and hashes:         1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: K3pxDaWVxcfUWmXIlkaXbE7uh9kGzsbBgEgSnLUWvXQ=)
                          2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=)
                          3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=)
                          4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
                          rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
        Validity
            Not Before: Aug 22 21:36:45 2025 GMT
            Not After : Aug 29 21:36:45 2025 GMT
        Subject: CN=68a8e2ed-d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:68:76:91:6e:61:06:b5:bb:94:df:9c:cf:
                    6f:9c:4f:00:98:20:4c:c0:8d:64:c2:91:ac:04:d0:
                    77:d5:04:f6:91:26:e6:4a:74:ff:32:d4:c0:ae:72:
                    64:f1:2e:44:45:07:7b:88:36:b8:eb:3c:ce:20:35:
                    58:51:77:1a:a4:05:47:74:d2:a3:90:1c:b0:42:5d:
                    b9:fc:e3:bb:55:3a:81:93:62:e8:09:70:93:3b:9e:
                    d5:83:b4:01:ac:4f:bc:6f:8e:3d:52:ce:31:95:fc:
                    de:c0:03:e7:22:a2:e8:80:cc:86:1a:a2:08:ee:4f:
                    b6:52:5f:e9:18:c4:db:fe:7f:51:a7:c4:e6:99:58:
                    0a:9e:f1:00:cf:99:4b:e9:1a:2c:d0:f4:79:0d:83:
                    f7:a0:12:1b:ab:2c:e2:30:51:22:df:4d:0d:f3:35:
                    5b:67:e7:94:57:ff:39:d3:7b:25:29:f8:d5:50:4c:
                    f3:c0:f5:5c:83:72:8f:26:15:fb:0a:5e:d4:46:aa:
                    5e:5d:7e:d8:bc:11:d6:f6:e3:8a:05:eb:64:10:55:
                    f1:64:9b:52:da:64:9d:50:80:8d:60:d1:a2:8f:a7:
                    ae:1d:2a:cf:09:9e:96:97:8d:03:6e:23:30:c9:02:
                    09:e2:89:53:63:1b:62:b5:59:41:ba:28:13:ae:44:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:B6:46:D7:26:64:CA:EF:EE:25:9B:E8:12:EB:42:00:15:6B:5C
            X509v3 Authority Key Identifier:
                keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:19:aa:19:ce:ae:25:fd:01:cc:a0:6a:1b:a5:4b:29:82:
         2d:2e:2c:42:bb:ae:3c:6f:64:67:a3:a0:2e:dc:f9:ed:7c:e0:
         35:a6:bc:27:51:b1:30:c9:4f:62:a8:23:e2:4a:de:9a:8a:70:
         6d:a9:b1:58:0b:9f:78:b7:3e:d3:86:4c:6d:6b:f5:9e:99:f4:
         f3:4f:29:d2:83:37:36:4a:c1:b7:6f:d3:5e:6d:e0:7c:42:c8:
         4b:86:53:25:48:c3:d6:dd:94:0c:f0:25:8b:86:13:d1:e0:77:
         d2:40:c0:85:99:23:63:8e:07:e8:84:de:0c:49:87:bf:0c:07:
         93:d5:52:6d:24:06:30:f6:fa:54:0f:b1:0d:98:0f:0d:c6:31:
         74:40:2d:6a:65:c8:e0:74:dd:20:15:4d:8e:df:cf:e4:bb:18:
         dc:66:c6:3d:88:c8:12:08:fd:d5:ff:74:5b:c4:f9:59:01:d8:
         52:c0:79:69:b6:91:28:ce:69:ce:1a:ac:e0:d8:59:f3:5b:f5:
         a2:6d:b2:87:d8:2e:7e:17:4e:03:30:f3:27:01:a9:14:54:8a:
         cf:0b:72:c5:41:f0:5a:25:af:21:f8:06:f1:91:b6:da:a8:08:
         0f:6b:d4:61:40:e3:ae:1e:41:26:91:65:9a:96:b3:6e:1a:43:
         cb:23:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:36:48 2025 by rpki-client