Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier:          O216defIuNltra6R/0ALJqhxy6hNZ0lE0/6NyLe2CEk=
Subject key identifier:   95:44:4A:80:2D:2F:F9:CD:F2:E5:8A:B8:28:1E:9F:65:56:07:6F:7F
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number:          19F9
Signing time:             Fri 22 Aug 2025 16:28:14 +0000
Manifest this update:     Fri 22 Aug 2025 16:28:13 +0000
Manifest next update:     Fri 29 Aug 2025 16:28:13 +0000
Files and hashes:         1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: /jHPhNjEDEvC/DDSXIfku/6QeLPTPzLsqjMtbBrq5Kk=)
                          2: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (hash: OyLQ+Oe7TKMDzLYNaYKVwb7JYXn+SADf8IpDxucp7XM=)
                          3: 1AC872EC2C9611EF84447F23C4F9AE02.roa (hash: 8vP78yz7Gdq/cMm0DibfnzyJKPtLE3SNx9Zurp6T4Tw=)
                          4: CDD1E222775711EF95F9762FC4F9AE02.roa (hash: Aoh8CUhINnfnEgUDz3yDlYTd3FWs346Lf8sfNhEQYQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6674 (0x1a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Aug 22 16:28:13 2025 GMT
            Not After : Aug 29 16:28:13 2025 GMT
        Subject: CN=68a89a9e-85e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:b3:14:73:6c:7e:58:50:ea:1d:f8:2d:d0:
                    d9:da:2f:2a:26:16:1e:97:b8:61:88:77:83:2d:13:
                    2a:79:fe:cc:3a:21:ba:92:17:b3:49:1d:a9:3e:f0:
                    17:9d:2d:50:87:c6:b9:3e:2c:7a:75:52:53:04:53:
                    95:19:0e:19:41:f9:8a:92:2e:4f:17:87:bc:33:7b:
                    98:d2:2d:62:d0:fa:ab:44:2d:e9:4e:47:6c:f7:66:
                    35:30:9c:5d:78:3b:62:91:2a:f8:be:ab:b1:d6:bd:
                    5c:2a:bf:ed:eb:e5:82:5a:d3:dc:af:2d:f1:5d:23:
                    b2:69:10:fa:f7:dc:7b:16:b0:2f:d8:1b:9b:16:64:
                    75:d7:7c:49:bf:c3:29:e4:e6:9c:19:34:23:c5:5e:
                    51:9a:f3:24:0a:7b:e6:60:35:b1:22:96:b0:ee:63:
                    a7:bc:64:22:41:a8:a0:01:c3:25:3b:aa:fe:1e:d1:
                    e5:c2:b1:39:63:f7:fa:a0:1e:7e:84:cc:5c:a2:b1:
                    32:94:0d:1b:c8:7d:d5:d8:a6:f4:6e:74:0a:36:71:
                    68:6d:17:cb:74:45:9e:f3:e9:50:0b:d6:40:2b:38:
                    02:97:9f:7f:f2:14:ba:d8:fe:ac:38:23:a6:db:eb:
                    93:69:2f:82:20:43:aa:7a:22:58:7e:28:f8:cb:00:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:4A:80:2D:2F:F9:CD:F2:E5:8A:B8:28:1E:9F:65:56:07:6F:7F
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:39:67:6d:11:e8:f9:55:3d:4a:79:af:da:7c:3f:e6:ca:66:
         0f:2b:d3:e5:b2:c0:09:6c:20:79:ef:3f:b3:24:9e:b1:5c:93:
         12:39:eb:1b:c2:64:55:86:8f:82:fa:fe:4c:e2:3f:ee:8d:32:
         ac:38:61:cf:f4:28:e4:8d:1d:48:8a:fb:94:52:f9:cc:27:a4:
         ba:33:38:8f:66:de:0f:ac:f6:26:49:b6:38:f5:ed:3e:c9:35:
         20:08:37:49:1c:a7:9c:1e:ce:6a:0a:82:f6:e0:83:b2:3a:8e:
         c3:7b:45:53:26:6d:18:ba:b0:8f:4f:dd:ba:9d:35:ad:1a:fc:
         9d:72:28:f9:a3:5b:84:78:37:7a:d3:4f:4b:0c:12:dd:39:c3:
         41:e3:69:d7:85:d0:09:8f:e5:1c:26:ee:ab:e5:61:ab:af:ee:
         79:8e:53:7b:46:d5:c6:cf:5c:14:e6:9a:e9:97:8d:f1:e4:81:
         4e:4f:cd:60:81:39:5f:95:64:0c:ee:c4:38:96:6c:f1:94:38:
         61:d7:49:fb:03:ee:26:56:63:98:e0:e9:6f:77:a9:1b:2b:d2:
         cf:41:90:57:48:86:ee:86:14:d5:6f:85:69:da:eb:85:e7:21:
         15:72:e9:bc:2c:95:0e:cd:70:5d:e8:a0:cc:df:9f:a7:50:9c:
         85:ab:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:57 2025 by rpki-client