Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
File:                     7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json)
Hash identifier:          81lGbnJBC7Bfmr8RAi7OoXPPyC7+QjCOnQnYkLogws8=
Subject key identifier:   5F:28:D8:96:36:1C:00:7A:0A:E0:D9:D1:2E:B0:B5:92:77:6A:3B:7F
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
Manifest number:          04D8
Signing time:             Sat 23 Aug 2025 00:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 00:02:23 +0000
Manifest next update:     Sat 30 Aug 2025 00:02:23 +0000
Files and hashes:         1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: wXcF5/2XEEuT+7Kmz6l3p18+i8I4hWi+XJjN5bndc7s=)
                          2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: cSrUt2G/tEmmUKbZC5/Pm5YhvWlNLqv+tgp4iMBLALI=)
                          3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: ZPiCvq3lESydzyK7TM6Odg7jqOS7MmH5XUW63L9LNfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Aug 23 00:02:23 2025 GMT
            Not After : Aug 30 00:02:23 2025 GMT
        Subject: CN=68a9050f-4403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:1b:b2:a8:83:08:8c:3c:47:2b:09:eb:ce:
                    6d:ed:da:8a:60:12:9b:f1:ff:94:7a:90:0f:7c:e7:
                    e3:11:5c:74:65:2a:52:db:19:f2:df:36:18:95:41:
                    e3:83:93:bc:33:74:64:36:14:fb:a5:71:b5:9d:97:
                    86:78:6a:82:53:6a:e6:73:9b:d2:de:3c:cf:37:2e:
                    75:7f:0a:ab:86:6d:39:31:44:a5:18:e7:f8:37:0b:
                    ed:87:c1:2e:3a:f7:7a:5d:02:62:bd:51:7b:b9:92:
                    f8:ed:0f:66:67:e6:60:6f:40:49:64:a0:89:32:57:
                    2c:98:d6:23:51:f6:5a:b6:0c:ea:27:b2:f2:75:7b:
                    e4:ab:eb:4c:82:c6:36:09:65:c2:bb:2a:f4:8c:f0:
                    bf:91:c2:ac:94:54:ab:cb:14:ec:b6:31:21:2b:7e:
                    41:22:50:f1:be:89:4e:c2:db:ee:2d:44:21:e5:44:
                    9b:fa:d1:ff:47:07:4c:13:22:7b:dd:90:72:89:0b:
                    03:51:36:92:22:c8:58:b8:ee:74:81:30:c5:d1:28:
                    6c:b4:17:38:a2:54:3e:d0:c6:a2:0b:73:c0:87:13:
                    69:a7:16:8e:53:ea:6a:92:55:6d:b6:59:80:36:a8:
                    df:9a:b1:52:02:ed:5d:15:ef:d1:3d:a2:5f:d1:56:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:28:D8:96:36:1C:00:7A:0A:E0:D9:D1:2E:B0:B5:92:77:6A:3B:7F
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:23:80:6d:0c:f1:89:e1:60:48:fc:37:48:cb:7d:b9:80:
         c1:91:f1:7b:98:61:d8:85:0a:36:7f:cb:0d:e6:3c:34:43:1e:
         da:fc:64:fa:3b:73:02:b5:4d:9c:7d:53:b5:a7:fb:76:d3:c4:
         3f:3c:f1:5f:ea:2e:fe:aa:f3:16:64:f6:2b:da:66:61:ad:b9:
         82:2c:65:01:5d:18:dd:e7:41:7d:e4:31:18:64:9a:ad:05:c3:
         cf:1f:79:de:c8:32:9c:af:de:22:18:0a:7b:50:3f:ae:38:aa:
         21:b8:09:76:f4:20:01:95:ad:0c:79:b3:2e:1c:06:07:4d:5f:
         4f:cf:35:50:1e:b3:2d:36:ae:71:ad:53:27:e0:b3:63:ef:c2:
         29:8b:69:83:f5:3a:c3:9a:fa:29:9c:e0:3d:c0:c4:50:94:a8:
         72:15:25:81:7b:3d:42:30:b4:7f:aa:7a:9c:04:8d:f6:a7:b0:
         68:19:f1:2c:06:e2:a5:68:7d:b7:3e:85:b9:7e:ac:49:cd:b3:
         7e:29:2f:3a:71:bf:f3:c6:ed:6e:b1:01:fb:60:7e:88:61:82:
         e3:67:01:ef:d1:05:0a:0e:bf:40:bb:b0:cc:23:10:cb:6e:9a:
         c3:47:c5:bb:b1:28:82:e5:3e:a9:b2:51:6d:c6:79:b2:d0:5d:
         47:35:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:09 2025 by rpki-client