Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File:                     K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier:          ldMbTAA5HPUyTiGx+nxUl4in7jOwrOKg1+XellnrW1E=
Subject key identifier:   50:01:95:47:A3:B0:8A:B9:AC:60:F3:C3:A0:4D:15:3F:0B:BC:36:2B
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer:       /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial:       0E13
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number:          0E06
Signing time:             Fri 22 Aug 2025 15:40:15 +0000
Manifest this update:     Fri 22 Aug 2025 15:40:14 +0000
Manifest next update:     Fri 29 Aug 2025 15:40:14 +0000
Files and hashes:         1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: F3IFfHWxPn3BtTKvyLhaDecfS9WLg5fY7cQ4T9G1Hw0=)
                          2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Validity
            Not Before: Aug 22 15:40:14 2025 GMT
            Not After : Aug 29 15:40:14 2025 GMT
        Subject: CN=68a88f5f-36d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:25:3a:b3:60:81:22:fc:5d:51:7f:5d:19:
                    21:d2:cc:46:15:42:cb:5a:4c:f8:39:a5:ae:d6:1a:
                    63:b0:22:10:61:90:19:2e:27:b4:55:7b:c0:f9:1e:
                    ef:67:5c:05:4b:16:aa:fb:3c:4b:d8:68:ac:a2:fa:
                    e1:61:5b:f4:1e:b5:46:36:61:68:83:79:df:01:1c:
                    80:1c:f7:5e:91:37:2e:35:44:5d:24:86:20:f7:af:
                    f5:90:c0:52:6f:7e:2e:af:46:c7:60:46:93:db:e8:
                    b6:51:9e:51:0a:2c:35:9c:97:f7:6d:87:da:d3:ff:
                    aa:91:72:f4:4f:ef:31:54:7f:18:84:06:95:b5:7e:
                    0d:d2:28:b4:bb:07:39:30:b2:85:c4:c3:de:6d:b6:
                    e8:47:32:45:d2:12:da:13:d3:b0:dc:b6:bf:94:60:
                    ab:83:fa:2e:d7:24:33:b3:d1:19:cf:83:30:f3:af:
                    f1:41:16:7b:ab:81:44:79:22:e8:f1:0d:dd:63:de:
                    2d:44:b5:50:f2:86:4e:25:67:22:11:4a:3a:61:14:
                    ce:a1:92:61:21:84:44:43:d5:ce:92:ad:b8:16:91:
                    7a:9d:45:48:b2:a0:5e:4c:de:a4:d5:ec:db:8f:f2:
                    2a:c2:f4:ee:1b:e4:c3:8c:b2:80:6c:f1:d7:25:22:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:95:47:A3:B0:8A:B9:AC:60:F3:C3:A0:4D:15:3F:0B:BC:36:2B
            X509v3 Authority Key Identifier:
                keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:93:18:11:b5:a1:db:aa:bf:6f:c3:6d:44:40:da:64:53:f2:
         27:18:0e:53:cd:0c:7c:15:96:7a:ab:03:5a:d7:b0:3b:9f:8c:
         d1:57:78:7c:61:87:87:a2:00:d1:ef:02:ac:80:a7:e2:cd:bd:
         08:00:53:53:43:99:34:73:79:9c:e9:3f:99:a1:73:b2:cc:5b:
         43:7a:c2:48:fc:39:15:6b:ea:a2:e5:aa:e3:2c:72:98:7b:a9:
         62:17:6a:67:63:87:af:3b:85:c0:e3:c3:d8:93:8a:fe:e0:56:
         01:8d:40:be:08:c1:aa:3c:3b:e7:ce:96:d5:c7:1f:c0:d7:79:
         c3:51:4e:d2:3a:d6:00:e1:90:17:2e:d1:81:73:d3:69:b2:29:
         0a:b3:67:d8:69:80:82:6f:c0:12:02:ee:3f:00:75:f4:db:d1:
         e0:aa:6a:d9:64:63:1c:e3:d8:ba:99:fb:b5:01:c8:81:22:72:
         db:d6:3f:cc:d5:4f:1e:14:a7:83:52:d3:e5:27:0d:05:e6:e7:
         6d:e6:c4:75:a3:00:92:8e:79:ef:de:e3:8c:38:71:df:b6:c3:
         e2:1c:be:2f:15:5e:03:c3:b2:7a:cb:ff:91:c6:d0:f0:68:53:
         1b:75:11:89:22:d4:23:b5:1b:97:63:d2:87:28:9f:cf:b7:8d:
         ae:aa:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:32:19 2025 by rpki-client