Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          orNCouFAaXv42BWcdmkjHyGm5OMYS4sFxdIS+NUcNZ0=
Subject key identifier:   21:4A:DC:13:F1:FE:5B:A4:ED:7A:B5:21:9C:5E:47:95:62:7C:CB:6D
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          06AA
Signing time:             Fri 22 Aug 2025 22:46:52 +0000
Manifest this update:     Fri 22 Aug 2025 22:46:51 +0000
Manifest next update:     Fri 29 Aug 2025 22:46:51 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: hYmqxedndvvBus3maa9ulBifkjBHEOTwVl1rNhx4tjY=)
                          2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: y4GtwygNXHOsgApCazrA1K5LMWjkg33ysXo8KtVSOnk=)
                          3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: UwSCk8PiXVxxp/HUKiEsKMP9QLxahaMhhaVASnsqLPY=)
                          4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: hnWVknRQew6riXrDV6o/QKEoLHQAkbKL/CwDo4+cF4U=)
                          5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: 8z6xDKhwld/+PqMlkxmQW4jjFgb0KSjTx84Nej4v1h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Aug 22 22:46:51 2025 GMT
            Not After : Aug 29 22:46:51 2025 GMT
        Subject: CN=68a8f35c-52c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:79:4b:8b:ca:dd:e6:56:0c:03:99:2e:b7:
                    e9:6c:17:27:1b:cf:cb:1f:8d:e3:ab:d9:87:d6:17:
                    8d:46:1c:73:cd:29:0d:ad:60:d3:72:17:42:e6:49:
                    96:d4:bc:eb:f5:b6:d7:71:e9:1b:98:23:d9:37:b1:
                    88:62:ab:fd:34:3d:c7:65:06:e0:9f:86:36:f8:10:
                    bb:c9:69:a2:8e:0d:d3:9c:38:16:5f:91:0e:e8:73:
                    78:5a:28:a0:7d:82:4b:cc:ea:99:51:a1:8c:05:47:
                    1c:63:c2:b4:31:90:62:07:45:05:4e:25:f2:92:9c:
                    9e:70:77:e5:e8:86:0a:63:70:40:b1:79:ae:17:be:
                    50:bc:a2:94:eb:8d:0c:2e:56:be:82:b4:d9:5a:2c:
                    f0:67:e2:e0:ce:49:a2:58:a3:d2:f9:af:85:c2:4b:
                    1b:d0:9c:ad:96:29:b3:db:00:ab:2d:e9:49:d1:13:
                    ae:74:52:67:c5:17:d8:31:eb:70:f1:f4:70:1b:96:
                    85:d6:04:f3:71:50:43:0f:6c:e7:1a:13:94:a1:e0:
                    92:ba:ac:22:e4:f1:1e:06:ed:66:2e:cc:c3:29:2a:
                    85:78:4e:2b:f4:45:9a:62:28:7d:23:be:bb:48:2c:
                    e4:e7:6d:c5:9a:88:e8:3f:99:4b:46:20:12:a4:aa:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4A:DC:13:F1:FE:5B:A4:ED:7A:B5:21:9C:5E:47:95:62:7C:CB:6D
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:6d:8b:98:29:ed:0d:08:e3:18:cc:df:b1:f0:f1:42:99:
         1e:ad:6d:cb:0e:d6:4d:7d:53:b5:9e:d4:63:45:ff:c9:98:e2:
         6e:46:e0:c8:61:90:ee:99:29:9b:c5:73:e7:f3:56:b8:39:7c:
         18:17:8b:ff:d2:85:16:03:45:1e:07:3d:a9:03:3e:73:2c:9e:
         d2:f6:c3:da:58:4d:1a:75:a1:28:46:eb:32:cd:f2:78:45:79:
         bf:1c:8e:7d:47:bc:ba:4e:4a:91:f4:b5:07:89:ad:55:d6:03:
         99:4c:44:3c:c9:92:e3:5e:8b:00:f1:80:76:38:6a:f3:b7:b0:
         60:4c:21:96:96:47:e2:49:44:43:3c:04:6c:74:dc:9e:4a:3e:
         0c:86:f7:5e:97:53:b6:05:89:a3:22:ea:91:f1:60:dc:5a:0f:
         42:b6:81:57:fa:50:4e:28:8f:2d:0c:06:44:c9:e0:a6:2e:76:
         41:4a:80:9e:6e:8a:a5:03:77:d1:c6:b5:14:1d:c6:24:ac:8b:
         86:6f:0f:48:4e:f3:98:e8:8b:29:50:65:51:cd:a3:79:86:1e:
         48:15:1c:1b:9a:1f:96:db:4d:01:f5:d9:0a:3c:0e:e8:8e:4c:
         82:87:87:08:e6:23:48:ce:43:59:39:81:01:cb:a7:1e:6c:5c:
         26:a9:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:54 2025 by rpki-client