Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          jtHMUouHEV5TEFX045tY1lfIbjTlUfSQ9CbKS/VAT3c=
Subject key identifier:   CA:A4:19:17:C0:3E:91:CA:D3:C3:39:2C:FE:CE:3D:D1:D5:73:1F:B4
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       0ACD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          0AC7
Signing time:             Wed 02 Jul 2025 19:40:36 +0000
Manifest this update:     Wed 02 Jul 2025 19:40:36 +0000
Manifest next update:     Wed 09 Jul 2025 19:40:36 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: WbssmOYzgOZiXHteGVeb6BbGqJV82Kj2qkYaJab73Y4=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: mXaDebpxI+8jgolliV5kV+yxtxKp5QcapX21gE2juPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765 (0xacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: Jul  2 19:40:36 2025 GMT
            Not After : Jul  9 19:40:36 2025 GMT
        Subject: CN=68658b34-111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:0c:05:2d:ff:bb:53:93:50:e3:19:6b:48:
                    3b:b8:ff:98:b8:aa:6e:e3:d9:bd:90:13:25:3a:07:
                    48:03:94:e5:2e:f4:70:da:ad:a4:76:45:84:c3:16:
                    9d:ba:7e:28:d7:b1:f2:27:79:44:a1:2b:01:b5:c4:
                    58:af:07:ca:78:70:8f:ac:8d:a2:ac:47:b7:f3:f8:
                    01:c7:1b:61:ff:03:7e:46:86:70:28:79:24:57:67:
                    5b:7a:dc:66:3b:db:0d:55:68:13:a5:db:83:ca:9f:
                    8c:f4:eb:5b:6a:6c:90:32:fc:41:dd:c0:de:8c:b3:
                    d1:1f:d4:20:52:e4:2c:8a:85:ef:5c:e0:a8:46:ee:
                    ad:d4:20:6e:d0:5b:1f:88:30:fa:fc:5b:e0:4b:05:
                    1c:8c:b3:73:18:c8:9b:78:3d:6c:88:da:c5:8e:e8:
                    2f:9e:62:c3:12:2d:52:c1:a4:40:f7:74:02:4c:a7:
                    73:e1:fa:cc:7f:05:c4:87:4d:3d:39:ae:3f:b6:a3:
                    a6:2c:e4:76:53:60:bc:88:5c:e0:05:5d:1b:a4:37:
                    1e:42:6b:93:46:ac:0f:3e:3a:77:bd:b4:7e:3e:4a:
                    74:42:df:38:df:86:23:05:ec:29:6b:dd:4d:2d:d1:
                    a1:a9:a0:f3:3a:24:8a:e4:a6:39:ff:39:99:60:6e:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:19:17:C0:3E:91:CA:D3:C3:39:2C:FE:CE:3D:D1:D5:73:1F:B4
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:75:1b:0a:eb:35:33:f4:7c:92:20:6d:47:6b:cf:2e:81:8d:
         3a:a8:3a:65:23:1a:b0:c8:4b:07:a6:59:d1:8d:00:3d:b2:2d:
         b0:fa:e6:76:a6:21:c0:cd:6e:14:49:d5:a8:89:47:89:5c:01:
         99:9b:ca:b2:d2:bd:ad:72:03:67:ac:8f:41:9e:f8:80:ed:f8:
         2c:23:bf:51:3a:a7:7f:5b:f8:49:9c:ee:fe:2d:f6:8b:f9:65:
         1d:3c:7c:ad:06:4a:83:60:a8:e6:12:33:c8:e5:26:bd:c6:cd:
         06:31:19:51:ca:db:5a:f4:57:db:b6:43:32:ba:e3:0c:0f:11:
         98:0a:e4:a5:ca:6b:54:29:df:c9:c5:dc:73:60:f6:cc:20:ec:
         c0:8a:34:5d:ad:12:69:1e:99:fa:0d:04:c9:92:be:cd:d9:dd:
         f1:2f:fc:24:4b:02:01:7f:d3:c4:ed:0f:61:56:d9:2e:ac:83:
         9c:fa:63:0b:63:ac:df:7f:7b:d1:6d:36:70:37:b1:48:5a:71:
         ca:91:a7:ec:b3:d4:c0:f0:81:4a:c1:2f:77:4e:9e:87:20:4e:
         00:7c:d1:19:9b:35:bf:31:6f:9d:0d:87:42:da:f0:89:ee:1f:
         df:a9:89:e9:b9:32:d6:df:31:b2:17:30:28:60:b1:3a:b4:95:
         e9:35:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:10:16 2025 by rpki-client