Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File:                     8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier:          SPgZELCOH8WneemXp8MvCW4KiaVHzJYaF/d0V7mXsi0=
Subject key identifier:   CA:9B:FC:08:27:C6:BD:80:6B:48:5F:FE:F6:CF:00:7B:28:49:6B:1F
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       0471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number:          045E
Signing time:             Sat 23 Aug 2025 00:26:19 +0000
Manifest this update:     Sat 23 Aug 2025 00:26:18 +0000
Manifest next update:     Sat 30 Aug 2025 00:26:18 +0000
Files and hashes:         1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: +nf8Rx2+ghO0ng87yejTvcS2uYRt32gouXULtsN9PgQ=)
                          2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=)
                          3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=)
                          4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=)
                          5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Aug 23 00:26:18 2025 GMT
            Not After : Aug 30 00:26:18 2025 GMT
        Subject: CN=68a90aaa-312b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:0f:52:c1:63:4c:1d:bf:d2:c2:9f:24:81:
                    cf:92:b4:a1:cf:30:e2:93:45:62:88:0d:9d:c9:e9:
                    4e:2e:1d:dd:27:f7:5c:c4:7f:1d:e3:77:ad:82:bc:
                    48:58:df:0b:00:26:5c:5c:ca:72:bb:5a:4a:3d:c1:
                    46:b4:ea:37:2e:2d:77:86:f8:f6:18:ae:43:12:33:
                    55:ce:13:f1:d5:f6:16:25:a0:03:48:fd:5c:af:5d:
                    3e:84:24:6c:59:26:79:65:8a:b2:40:45:a7:c3:af:
                    c8:ca:de:87:c8:b8:d9:9d:63:e7:bc:d7:7d:9e:90:
                    9e:ef:57:d0:5e:eb:5b:eb:38:f0:44:8e:d5:26:4c:
                    ef:d1:ed:d9:e6:22:94:21:0d:6f:67:89:4b:e4:8a:
                    c2:5a:79:b2:48:65:22:36:bf:36:7b:84:31:5e:59:
                    f4:17:cc:f8:72:08:f3:24:da:0a:08:20:07:68:b1:
                    03:e8:c3:cc:fe:4f:20:40:aa:84:9f:cf:67:de:c0:
                    ae:1c:60:2e:80:16:a1:a9:98:3e:04:fa:0f:6d:50:
                    5f:21:14:b4:1f:99:da:cb:52:f1:56:39:9f:d7:78:
                    f4:ff:31:2b:c6:b1:39:0e:64:15:08:e6:9d:63:eb:
                    b2:87:fd:cd:b9:6c:cd:ad:c2:db:d3:f7:90:15:1d:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:FC:08:27:C6:BD:80:6B:48:5F:FE:F6:CF:00:7B:28:49:6B:1F
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:f8:b2:ce:25:ef:80:96:69:e6:31:9b:9d:56:00:70:2c:
         80:99:c2:83:a0:48:6d:0a:80:4f:cd:e6:02:d0:ab:ef:53:fa:
         7d:65:17:b0:4e:eb:eb:58:2a:8c:13:0c:fa:a2:f1:39:e4:78:
         39:d5:2c:07:90:7d:c7:90:c9:5d:a8:6e:bb:77:fa:e6:85:5c:
         09:bd:56:5b:80:9d:bd:6a:b5:b2:7f:07:06:81:5e:7d:7f:33:
         5a:20:95:1f:21:32:64:51:d4:78:07:b7:32:c8:a1:a6:38:af:
         f8:81:6b:dd:19:9d:9e:96:1e:8b:ac:79:da:7d:5b:f8:37:0b:
         e5:87:de:73:e4:47:7d:8d:64:c8:09:94:0e:c6:65:41:b2:31:
         d2:e2:27:f6:07:26:de:3b:08:98:49:e9:df:33:cd:b5:46:e2:
         81:76:44:5f:4a:30:1d:6b:89:ce:d2:6e:33:e3:0d:30:c1:26:
         c1:f2:e0:79:c0:27:63:da:c2:51:2c:72:9c:e0:a4:81:7d:8b:
         70:28:49:eb:12:7c:7c:ca:be:e9:60:3f:f9:fc:fc:74:19:05:
         a7:e8:18:54:17:83:a1:08:6f:7c:b3:39:7c:08:d2:d6:d0:9c:
         49:ba:2c:3e:b5:b1:e4:d6:57:9b:12:80:d2:c5:ad:15:82:d9:
         4e:cb:6d:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD
QUZDMEI4QjEwHhcNMjUwODIzMDAyNjE4WhcNMjUwODMwMDAyNjE4WjAYMRYwFAYD
VQQDEw02OGE5MGFhYS0zMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLQPUsFjTB2/0sKfJIHPkrShzzDik0ViiA2dyelOLh3dJ/dcxH8d43etgrxI
WN8LACZcXMpyu1pKPcFGtOo3Li13hvj2GK5DEjNVzhPx1fYWJaADSP1cr10+hCRs
WSZ5ZYqyQEWnw6/Iyt6HyLjZnWPnvNd9npCe71fQXutb6zjwRI7VJkzv0e3Z5iKU
IQ1vZ4lL5IrCWnmySGUiNr82e4QxXln0F8z4cgjzJNoKCCAHaLED6MPM/k8gQKqE
n89n3sCuHGAugBahqZg+BPoPbVBfIRS0H5nay1LxVjmf13j0/zErxrE5DmQVCOad
Y+uyh/3NuWzNrcLb0/eQFR3UCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqb/Agn
xr2Aa0hf/vbPAHsoSWsfMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx
MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ
RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4uviyziXvgJZp5jGbnVYAcCyAmcKDoEhtCoBPzeYC0KvvU/p9ZRew
TuvrWCqMEwz6ovE55Hg51SwHkH3HkMldqG67d/rmhVwJvVZbgJ29arWyfwcGgV59
fzNaIJUfITJkUdR4B7cyyKGmOK/4gWvdGZ2elh6LrHnafVv4Nwvlh95z5Ed9jWTI
CZQOxmVBsjHS4if2BybeOwiYSenfM821RuKBdkRfSjAda4nO0m4z4w0wwSbB8uB5
wCdj2sJRLHKc4KSBfYtwKEnrEnx8yr7pYD/5/Px0GQWn6BhUF4OhCG98szl8CNLW
0JxJuiw+tbHk1lebEoDSxa0VgtlOy23B
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:36 2025 by rpki-client