Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          p/ODqxt5lVVz8d8n1osXvLGMv37wHWuSoq1nlaAh3OY=
Subject key identifier:   96:3A:4B:60:B3:E3:50:17:75:4F:53:20:8F:2F:E2:C1:CE:B1:AB:3B
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          F8
Signing time:             Thu 03 Jul 2025 01:42:16 +0000
Manifest this update:     Thu 03 Jul 2025 01:42:16 +0000
Manifest next update:     Thu 10 Jul 2025 01:42:16 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: BB0corfRMj5g1L/4keYs3LOWX0muFW056ZClK3iURMM=)
                          2: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: XJ7QEpy838CSAu3M8dENQwDC26GEepMny717MK6FTrY=)
                          3: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 4hfIidy+VeJThkZpOZWe1fPPKpgeMeUB9YIh+jyw3QU=)
                          4: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: YHWhKcoRyjB0P2neEplhATghOZqZeBUWkCt9dgbhrVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Jul  3 01:42:16 2025 GMT
            Not After : Jul 10 01:42:16 2025 GMT
        Subject: CN=6865dff8-1e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:57:73:78:9e:bd:dd:e0:5a:e1:ce:25:e7:
                    e1:09:1c:7d:79:27:9d:9f:e4:e1:f0:8b:c0:1a:d7:
                    56:db:7b:05:f4:f0:30:9e:85:32:a5:dd:e7:e8:05:
                    ee:06:e3:d1:80:20:93:2d:c6:a8:a7:d7:62:fb:39:
                    02:da:1c:33:b7:04:73:68:64:b3:6b:be:83:35:f6:
                    87:7f:9b:e5:8a:bd:ca:d7:8f:1b:57:0f:64:09:68:
                    7d:ac:42:9c:20:c4:0c:ed:69:44:7f:1e:aa:97:5f:
                    08:70:3f:b8:ba:cc:58:23:e8:1a:14:0f:01:89:14:
                    df:37:4f:34:35:ed:cc:8d:2c:f2:e0:84:52:73:75:
                    ec:b2:a3:45:19:b7:64:03:df:75:d2:a8:a4:a6:3a:
                    01:bd:7b:3d:a7:4d:72:59:fd:24:a5:a3:3a:74:5c:
                    6c:75:ee:af:fa:db:d9:b6:c4:f2:db:ea:e7:b5:39:
                    97:9e:1f:a6:ca:1c:82:52:1f:9c:2a:22:27:f3:ba:
                    be:10:16:69:1d:e5:48:c3:12:03:5b:2b:e1:38:1a:
                    6a:eb:ca:32:15:87:ed:99:12:81:dd:c0:fe:e2:ed:
                    00:18:2e:08:34:da:72:93:26:11:d6:c0:d3:d0:7b:
                    b1:d6:51:34:d7:c0:a3:cd:6f:a8:f0:94:50:d2:0d:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:4B:60:B3:E3:50:17:75:4F:53:20:8F:2F:E2:C1:CE:B1:AB:3B
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:1b:6a:c2:a4:30:ca:41:43:9c:08:c4:50:e8:78:24:a3:
         ab:a4:10:01:02:30:15:3d:27:26:90:7a:e4:87:39:2d:fd:48:
         9e:21:f8:70:15:41:22:07:a4:98:74:4e:e5:37:ec:ae:fb:bc:
         42:09:61:c8:2a:f6:60:df:fe:05:c1:e6:fc:6f:d0:5b:14:d1:
         84:24:3c:32:38:23:6c:3d:19:8a:f1:b9:ec:00:27:88:52:cf:
         17:74:2a:c7:a5:36:ac:8d:1e:8f:33:f0:b0:cc:91:f6:a7:8d:
         f4:37:eb:98:04:35:e1:d7:3f:14:bf:21:db:98:87:1f:28:c0:
         e0:cc:1e:31:73:b0:28:71:e3:f0:a0:99:f1:5b:0a:f2:49:4b:
         99:e2:ba:c7:ad:18:72:86:2b:56:4b:b5:75:1e:ca:07:84:b7:
         68:0a:9f:dd:84:e1:d2:77:2a:b2:67:37:1e:5b:ee:93:40:36:
         b2:83:99:6d:c6:53:f3:0d:cc:ae:52:a0:5c:af:ae:7d:5c:bc:
         b0:05:4d:63:a3:a1:08:79:a2:68:3a:b1:88:94:bb:22:b0:26:
         45:4c:14:3d:bf:90:f4:53:5b:56:b7:0e:89:61:bb:d7:72:d6:
         27:b2:d3:0e:b5:2c:9a:0d:ee:3e:4f:6e:de:9c:29:bc:6d:d3:
         26:c3:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:43:32 2025 by rpki-client