Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          hkmDAfRUg7uuu4YLKPXnA9CvT3hayyIgUblMWSiuJdc=
Subject key identifier:   16:C2:B0:61:66:57:9B:C6:30:77:5A:8A:55:9D:C1:82:4A:C3:9A:15
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          01D2
Signing time:             Sat 23 Aug 2025 02:53:37 +0000
Manifest this update:     Sat 23 Aug 2025 02:53:36 +0000
Manifest next update:     Sat 30 Aug 2025 02:53:36 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: q/gmNRvK+JN2h/S7zW+lyWqQ2iMbw/L+jh0AU707eSg=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Aug 23 02:53:36 2025 GMT
            Not After : Aug 30 02:53:36 2025 GMT
        Subject: CN=68a92d31-e558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:dd:b0:96:3a:d8:c0:6a:06:3b:1d:3c:ef:
                    3e:7b:d3:c1:ee:df:d6:ae:24:12:e2:5f:99:a7:94:
                    00:9e:2d:79:f6:bf:8e:d0:98:24:01:71:df:f5:22:
                    e2:0b:05:3d:c5:a1:0b:99:65:b7:78:ae:1e:8a:93:
                    0b:52:48:9a:7c:22:75:6c:92:22:48:d8:cf:03:f3:
                    53:8a:49:3e:35:88:b2:76:06:8d:43:8a:08:f8:79:
                    62:25:a9:29:c9:fd:86:1d:14:36:f8:79:c4:c1:cb:
                    3b:9b:65:f9:65:31:4a:39:36:95:e6:10:ff:83:47:
                    b0:f0:1e:24:07:44:78:e5:5f:6c:a8:e2:6b:c7:e3:
                    fb:70:24:3a:5d:fa:38:b6:ae:e5:3e:a5:8a:e7:db:
                    f5:9b:80:de:f5:f1:23:af:4d:51:95:a9:eb:4c:1d:
                    24:1d:64:bc:22:04:fa:ce:9a:46:64:76:d4:80:05:
                    8d:73:93:44:4f:be:81:32:84:93:e0:d5:96:75:34:
                    c9:14:e9:5a:34:56:0b:02:f5:9a:df:57:25:72:2f:
                    91:32:dc:43:51:d3:29:75:f6:e5:80:63:11:9d:bb:
                    2a:a5:98:89:ae:eb:44:1f:3c:e8:fb:f7:f1:0a:aa:
                    bb:02:a5:94:2c:4f:2a:a3:c1:b5:46:96:dc:dc:5f:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C2:B0:61:66:57:9B:C6:30:77:5A:8A:55:9D:C1:82:4A:C3:9A:15
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:85:c3:c9:d5:35:d3:ae:45:95:fe:c9:42:a3:53:97:0f:64:
         99:ed:3d:ed:3a:b3:3e:e6:92:c2:82:03:9f:f1:ea:a6:10:13:
         ec:bf:09:aa:fe:11:0a:4c:c1:44:78:8d:fc:de:94:0d:c4:2c:
         f0:13:71:14:0a:60:13:ae:13:1e:25:af:0a:d7:67:80:32:50:
         fd:5c:bd:da:c4:8a:8b:18:47:9e:ee:2f:1f:1e:c0:37:67:e3:
         ff:57:6f:b4:ac:3f:bd:fe:e0:27:88:f6:87:b2:49:cd:3d:6b:
         8b:55:71:70:92:d4:5d:e9:c9:bb:8c:ff:46:57:1f:f8:66:12:
         88:7b:67:46:c5:15:9a:32:9c:52:1d:c8:b9:aa:26:97:21:ff:
         d4:38:d5:a6:14:9b:fa:98:23:78:01:23:d6:9e:60:2f:09:f3:
         00:2d:b0:36:a6:00:fe:4f:39:57:1a:04:e3:ef:7a:17:85:e5:
         32:45:a9:54:c1:4c:76:85:a8:84:94:4b:34:e7:09:b6:7d:8d:
         57:98:3c:f3:fc:20:4e:5c:7b:60:24:09:d1:fd:48:5d:7d:3e:
         af:e6:a6:6e:00:51:dd:9e:62:ab:3e:2c:9e:22:c1:ca:a3:15:
         8f:9e:0b:9a:32:eb:fb:f6:eb:82:93:3e:39:f5:f6:58:55:88:
         43:98:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:45 2025 by rpki-client