Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File:                     v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier:          zw+3zkmUjq5JpRiqJ8SdMBgNsEQHm9a1Vy3wzDVDNA0=
Subject key identifier:   24:12:46:A7:03:EA:E1:EB:55:34:B0:51:5A:0D:42:FB:A9:A5:DB:81
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       34E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number:          34CC
Signing time:             Fri 22 Aug 2025 14:28:15 +0000
Manifest this update:     Fri 22 Aug 2025 14:28:14 +0000
Manifest next update:     Fri 29 Aug 2025 14:28:14 +0000
Files and hashes:         1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: EmPVS3bPuw6WKR3u3Slu46i7fjFvBHTaQNAzn6zDS94=)
                          2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=)
                          3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=)
                          4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=)
                          5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=)
                          6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13541 (0x34e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Aug 22 14:28:14 2025 GMT
            Not After : Aug 29 14:28:14 2025 GMT
        Subject: CN=68a87e7e-b8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:24:18:e0:55:20:5c:5a:ff:9e:4c:de:08:
                    3c:9d:dc:00:34:59:52:30:7d:8c:c5:c2:98:e7:85:
                    cc:64:fd:3b:44:08:d6:81:19:c5:bb:f8:c6:c3:50:
                    a1:56:31:85:85:e7:25:f3:99:98:67:1a:09:01:dd:
                    24:a4:97:dc:7d:f1:64:5f:1e:7d:47:95:0c:00:8d:
                    4e:7b:cd:8e:56:52:17:57:f0:df:31:af:75:d6:0b:
                    ed:63:10:71:f8:d1:35:e0:45:3a:2a:00:f0:6c:43:
                    1c:79:23:8e:6b:f1:63:40:b0:25:9d:e5:e6:db:d3:
                    66:c0:56:a2:71:02:ca:23:e6:3f:5b:32:ba:9f:78:
                    32:7a:35:78:9f:1e:3f:e7:ed:9a:04:6e:78:c7:55:
                    a5:19:6f:f2:9a:91:bf:51:04:39:8c:3f:76:a1:13:
                    c9:bf:5a:5c:aa:84:2a:af:77:42:45:01:1d:3b:26:
                    b2:3c:c3:ca:02:0d:ed:81:82:ba:98:0d:83:3c:32:
                    8a:f6:22:69:74:46:60:ea:9f:c6:45:7a:ed:32:4c:
                    25:c6:c3:c6:81:2a:fb:66:74:20:8c:ca:bc:fc:eb:
                    33:49:57:b6:4c:7c:53:d8:d1:71:da:62:a6:28:a0:
                    5f:a7:ff:10:a7:0b:b1:aa:4e:ff:54:95:20:81:6f:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:46:A7:03:EA:E1:EB:55:34:B0:51:5A:0D:42:FB:A9:A5:DB:81
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:2a:53:cf:eb:d9:20:2e:0f:db:4d:9a:97:b3:32:0e:9c:
         e1:4b:ed:b2:43:c7:37:33:7e:f4:3a:a6:32:96:5c:e8:c0:53:
         4d:59:ae:0f:47:d6:0a:de:55:32:c9:e6:c4:cf:36:56:d3:e3:
         74:47:0f:17:34:31:5f:4a:00:35:d6:8e:cf:b3:32:2d:f4:cc:
         54:e8:28:5f:58:bb:d0:7f:01:b6:b6:fc:1b:c5:56:ee:cf:0d:
         3c:32:08:10:c4:6b:19:2d:58:7e:2b:b8:aa:ba:df:a9:b6:d0:
         4c:57:dd:a5:39:38:13:96:5b:09:d5:d6:c6:3a:5d:53:9b:71:
         5a:c4:79:ef:f4:8f:fb:0a:04:fc:4e:d1:91:86:24:e6:98:aa:
         00:eb:fb:e9:11:13:ab:1f:31:62:50:2a:d2:36:34:d7:a3:56:
         90:3f:31:30:04:62:75:55:03:31:9c:fd:b5:b3:fe:d4:89:5f:
         3a:d6:ba:9f:7a:28:10:aa:60:43:72:bb:d3:11:eb:c0:99:fc:
         df:7f:95:34:ef:8c:1e:c0:69:24:6c:3d:43:b6:02:9b:6f:87:
         db:91:74:41:fa:ce:1d:42:bb:62:44:af:73:05:a5:24:1b:56:
         e6:d5:87:14:4d:1a:dc:2d:9d:3f:14:18:80:29:77:f1:e7:87:
         38:1f:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:11 2025 by rpki-client