Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File:                     1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier:          R6vXD/yHdzDGIThLIidDn7ajHV9X6nNpvBNeKMrAf2s=
Subject key identifier:   BC:BE:89:02:74:ED:4E:A8:7B:A3:D9:0F:D9:0C:61:C5:C1:7D:9C:D4
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       04A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number:          049E
Signing time:             Sat 23 Aug 2025 00:12:40 +0000
Manifest this update:     Sat 23 Aug 2025 00:12:40 +0000
Manifest next update:     Sat 30 Aug 2025 00:12:40 +0000
Files and hashes:         1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: IPvAFkxbuTwQdc784tmdEShhPVnwlIDkH7dq6WMY9EI=)
                          2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Aug 23 00:12:40 2025 GMT
            Not After : Aug 30 00:12:40 2025 GMT
        Subject: CN=68a90778-5108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:c2:32:14:b2:84:8f:9e:36:f9:12:ac:18:
                    98:c5:5b:6d:5e:0b:6c:8d:9f:ba:7b:99:9f:1f:13:
                    12:3e:a9:87:53:4a:22:1a:55:79:44:c6:38:c6:80:
                    a6:60:5b:bf:6f:9a:af:ff:a8:f2:00:41:7a:e7:25:
                    36:69:56:52:7b:da:38:7d:02:71:dc:21:2e:15:c9:
                    cc:83:e4:8e:c9:68:30:f3:17:2e:e6:21:e7:64:f5:
                    fc:6f:2f:5e:61:67:88:1a:cc:23:8d:68:99:ab:f6:
                    d1:c1:e6:25:86:e6:1f:9a:2f:94:d4:88:d6:5f:67:
                    17:bc:96:51:36:d7:10:15:fd:0d:17:f8:b6:41:8a:
                    e6:60:cc:a3:d3:35:0d:33:07:74:2a:c3:59:49:d9:
                    2b:74:d9:90:23:4f:ff:2e:fd:5d:64:d3:77:b9:7b:
                    18:15:3e:9e:c7:5d:d9:9e:92:c8:75:eb:64:ee:9a:
                    d2:6a:07:82:43:60:fd:8e:78:36:bf:d1:e9:42:0c:
                    8e:18:3a:04:eb:54:41:d3:cc:a0:01:81:2e:b1:40:
                    78:34:b7:69:d6:10:63:be:94:19:22:e3:89:46:88:
                    63:c2:e6:f1:d0:87:a7:08:da:71:ec:92:9f:14:c2:
                    12:bf:f2:8b:95:23:4a:e3:de:0e:7e:82:7d:5b:88:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:89:02:74:ED:4E:A8:7B:A3:D9:0F:D9:0C:61:C5:C1:7D:9C:D4
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:74:27:34:7d:e4:19:62:00:06:99:0e:36:a2:16:6d:e3:
         c9:6a:a5:4e:ad:e8:ae:5f:42:26:7d:da:9b:d5:3e:e6:4e:f4:
         4e:1b:6f:a5:34:ad:20:c6:78:49:eb:09:de:88:f1:f8:bd:a1:
         4b:cc:1b:94:c4:e0:07:d0:52:44:3a:05:ad:6e:71:24:f6:c8:
         78:14:ef:70:a5:35:11:94:56:46:ee:0b:31:4c:00:a7:24:27:
         d5:40:1a:84:0d:2f:95:a1:5f:0d:65:28:94:58:b0:e5:f6:f3:
         10:a4:4c:86:d6:5e:a1:4e:5a:73:64:c9:8b:c8:dd:2f:da:48:
         79:9d:f3:34:f8:92:4d:ff:f6:96:f0:53:39:ff:36:53:fc:6b:
         34:9f:de:a2:7e:0e:db:a0:2c:b2:78:14:64:2f:93:10:5a:ff:
         34:2b:20:91:fe:cc:31:b3:0e:66:a6:05:fc:b8:60:d3:37:ee:
         75:97:e4:ea:99:e1:e8:bc:d0:52:ac:66:f1:05:ac:cf:f2:49:
         42:0a:42:11:0d:71:e2:5a:c6:7d:66:bc:ff:e9:c7:24:1b:19:
         b1:be:e4:3e:84:1e:0c:eb:75:b1:f8:e8:46:30:ac:53:be:01:
         ae:24:e2:b7:4c:74:47:13:50:52:9f:46:cb:85:df:93:7e:77:
         b6:68:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:26 2025 by rpki-client