Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File:                     bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier:          rtLQU/UiFsMNmnJWpuBr4laLKFPD93taLB9UXHCqHSs=
Subject key identifier:   A7:A7:44:AB:9A:96:9C:63:8D:3E:0D:A4:DA:AB:5C:C7:08:C0:CD:67
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       1317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number:          1310
Signing time:             Fri 22 Aug 2025 17:09:53 +0000
Manifest this update:     Fri 22 Aug 2025 17:09:52 +0000
Manifest next update:     Fri 29 Aug 2025 17:09:52 +0000
Files and hashes:         1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: PgJn3yr3H1Rz22icQq0/50iqbGfHQ9CypI+9kz69AUo=)
                          2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4887 (0x1317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Aug 22 17:09:52 2025 GMT
            Not After : Aug 29 17:09:52 2025 GMT
        Subject: CN=68a8a461-8b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:67:f2:69:31:43:80:0d:3f:85:21:77:f3:
                    9f:12:cc:cf:50:60:58:ed:fd:ef:41:65:0a:b3:9b:
                    7b:1c:ac:ce:d5:04:e5:f3:b5:0d:3f:10:96:e4:db:
                    66:b9:45:98:64:4e:b5:fa:d3:30:bc:3b:a5:fd:d2:
                    3f:8a:ab:79:f5:a5:01:c6:f4:57:c7:81:f3:d5:93:
                    6c:11:e4:22:fb:b3:ac:50:05:43:b1:66:03:eb:8c:
                    e0:81:af:49:ff:14:97:aa:4c:7e:7e:29:dc:f2:a3:
                    7b:7c:f9:c9:dc:b6:9a:e0:bd:6b:17:29:b9:c3:ae:
                    e7:73:98:90:25:c0:46:e0:a4:52:8a:8e:75:e0:d4:
                    25:65:5e:54:fe:49:dc:c2:54:23:d2:ae:db:3e:e8:
                    38:9e:b2:64:7f:88:8b:41:df:fb:08:55:fd:c1:e0:
                    f5:9c:25:ba:b2:db:68:1d:53:ba:aa:f1:a8:27:33:
                    00:bc:b9:7c:4d:b6:4f:6e:2a:d2:fb:3c:d5:e1:c3:
                    ed:03:5f:fa:85:fd:f0:15:b8:46:29:6b:96:d1:01:
                    2b:0b:8f:68:08:ce:d1:d4:c2:53:f5:3c:fb:88:51:
                    fc:a7:be:a4:23:dc:48:1c:41:c8:ab:0f:8a:59:c6:
                    12:e8:ba:ba:48:05:c3:7a:f4:2a:92:11:c3:a6:30:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:44:AB:9A:96:9C:63:8D:3E:0D:A4:DA:AB:5C:C7:08:C0:CD:67
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:23:87:f7:10:f5:2f:b0:1c:08:38:13:1d:d4:30:0e:1a:ed:
         44:a8:46:cb:48:61:a2:42:bb:d0:92:d8:ee:65:60:a0:10:7e:
         dd:40:f9:77:69:0f:ab:7c:24:e1:c3:3a:bd:37:28:e4:dd:e9:
         e3:7e:fd:d4:40:08:ff:b2:29:79:7e:1d:95:86:bc:5d:16:9f:
         69:3c:3f:58:60:85:2b:23:f2:18:17:ee:78:95:92:b7:fc:92:
         96:01:f1:aa:4f:5f:7c:8b:c3:1d:c7:98:df:84:25:3a:bb:77:
         54:ce:5b:38:98:52:c2:fc:c8:e8:84:88:23:8d:05:11:55:78:
         d0:e0:e3:5e:b0:05:0b:2f:bd:81:36:a2:a3:80:c1:0a:da:ba:
         57:f9:b3:b0:c7:d9:67:8c:b3:9c:b9:be:75:fc:a7:d8:e0:ba:
         f9:89:6c:23:1c:3b:c1:66:f5:e6:e9:0d:b5:b3:90:80:f9:3f:
         e7:5e:fa:dd:c4:46:24:dd:78:3f:bd:27:8a:1a:5d:60:1b:fd:
         be:0a:57:1f:cb:95:fa:6e:00:11:bb:4c:20:99:dc:09:fa:f5:
         4d:b7:89:8d:0c:fe:15:fd:7e:eb:0e:11:16:c2:95:60:6e:4e:
         6c:e0:1f:99:22:dc:5f:c5:9a:8a:07:51:b4:15:8c:27:23:49:
         e0:6e:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:40:17 2025 by rpki-client