Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File:                     XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier:          Qz5q/iWUNaXPfrT+szf7m1+8/R9UqQp8PqVQA6GVdRw=
Subject key identifier:   E7:3F:47:64:C4:40:BB:1D:15:A0:8F:7E:E4:91:2C:61:EA:6C:09:B9
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer:       /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number:          0691
Signing time:             Fri 22 Aug 2025 22:27:07 +0000
Manifest this update:     Fri 22 Aug 2025 22:27:06 +0000
Manifest next update:     Fri 29 Aug 2025 22:27:06 +0000
Files and hashes:         1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: jiwOH+wrAWbE0GzU4fdTuxHwq8RXe7hKOtrcsgBK1Os=)
                          2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=)
                          3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
                          rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
        Validity
            Not Before: Aug 22 22:27:06 2025 GMT
            Not After : Aug 29 22:27:06 2025 GMT
        Subject: CN=68a8eeba-d33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:d9:72:5e:cd:3b:85:8a:1e:b6:25:a6:3c:
                    0f:a2:99:82:1c:d3:88:50:8b:62:ab:09:b4:61:23:
                    fa:00:69:1a:03:41:b7:1b:ae:33:2c:fe:4c:a6:11:
                    5f:c7:59:66:84:0a:8c:36:5a:9a:83:e0:9c:3a:d8:
                    2a:44:0c:a9:08:52:f9:ba:4a:16:90:c3:0a:5c:51:
                    f6:a5:ed:db:22:6a:0b:a2:0a:07:fe:24:d2:13:e2:
                    55:18:1e:ea:99:39:5a:39:f7:f5:01:90:9f:c1:7c:
                    c1:bf:49:c4:51:f8:7d:31:3c:c1:04:08:df:aa:28:
                    b9:ae:38:0c:5f:40:ee:d9:ff:07:f9:10:b3:b4:f8:
                    61:f1:77:12:a0:a1:9b:30:7e:85:18:56:36:34:c2:
                    d4:3d:64:62:f9:80:f2:0a:e7:8f:ad:91:d9:6b:15:
                    06:0b:fc:5f:08:52:24:79:88:94:95:73:79:19:3b:
                    76:fa:9d:56:54:df:57:e4:74:0b:8f:e4:13:32:c3:
                    ef:aa:d4:ab:b7:6b:ce:c0:33:3c:22:5d:2a:79:ef:
                    c9:80:6d:03:90:6e:3b:6a:47:a7:53:53:05:e4:a2:
                    6f:ea:f1:78:94:95:3d:35:91:10:69:92:8a:a0:0a:
                    0f:47:84:d3:7a:9b:a8:6b:c7:ca:6f:0e:2f:83:5a:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:47:64:C4:40:BB:1D:15:A0:8F:7E:E4:91:2C:61:EA:6C:09:B9
            X509v3 Authority Key Identifier:
                keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:8f:df:83:78:b3:66:19:77:87:2f:cf:5c:33:b1:c9:bf:
         5b:f1:7c:f3:03:f9:22:42:1b:14:64:4a:e3:c0:00:98:1c:8f:
         1c:0d:64:ac:71:1d:72:a7:b1:ee:7e:27:8d:52:bb:c1:97:62:
         66:d8:8a:33:d4:82:6f:65:85:e7:07:e8:bc:70:db:6c:af:ff:
         20:7a:e8:52:83:e4:8c:ea:ee:c0:86:d0:d9:66:30:21:ce:84:
         e5:4a:55:26:00:22:44:66:b4:61:1a:05:f6:ee:ab:2a:8c:41:
         a2:1a:fa:38:b4:9a:86:7f:6b:16:14:92:af:63:87:aa:e2:af:
         5b:90:e0:88:82:57:d9:50:e4:b3:d7:62:ea:b5:5e:16:46:2f:
         59:1f:a0:89:8b:8b:e3:ec:45:60:2c:4b:dc:e5:fa:b5:41:60:
         07:1f:94:01:aa:97:65:7c:aa:d6:34:8c:9f:54:aa:70:46:99:
         09:ef:a9:06:39:9c:d3:4b:2a:a5:57:1c:65:c4:59:bd:2c:62:
         67:97:63:5b:30:eb:3b:00:bd:64:81:9c:0b:cd:83:b6:4d:ae:
         0b:77:b8:18:eb:8b:fa:9b:38:79:7f:92:35:2a:82:83:18:86:
         72:f3:83:ba:09:c7:bc:b1:4e:21:d8:bb:96:79:ee:71:99:a6:
         24:1c:9b:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjUwODIyMjIyNzA2WhcNMjUwODI5MjIyNzA2WjAYMRYwFAYD
VQQDEw02OGE4ZWViYS1kMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJ3Zcl7NO4WKHrYlpjwPopmCHNOIUItiqwm0YSP6AGkaA0G3G64zLP5MphFf
x1lmhAqMNlqag+CcOtgqRAypCFL5ukoWkMMKXFH2pe3bImoLogoH/iTSE+JVGB7q
mTlaOff1AZCfwXzBv0nEUfh9MTzBBAjfqii5rjgMX0Du2f8H+RCztPhh8XcSoKGb
MH6FGFY2NMLUPWRi+YDyCuePrZHZaxUGC/xfCFIkeYiUlXN5GTt2+p1WVN9X5HQL
j+QTMsPvqtSrt2vOwDM8Il0qee/JgG0DkG47akenU1MF5KJv6vF4lJU9NZEQaZKK
oAoPR4TTepuoa8fKbw4vg1phKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc/R2TE
QLsdFaCPfuSRLGHqbAm5MB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL
Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDrY/fg3izZhl3hy/PXDOxyb9b8XzzA/kiQhsUZErjwACYHI8cDWSs
cR1yp7HufieNUrvBl2Jm2Ioz1IJvZYXnB+i8cNtsr/8geuhSg+SM6u7AhtDZZjAh
zoTlSlUmACJEZrRhGgX27qsqjEGiGvo4tJqGf2sWFJKvY4eq4q9bkOCIglfZUOSz
12LqtV4WRi9ZH6CJi4vj7EVgLEvc5fq1QWAHH5QBqpdlfKrWNIyfVKpwRpkJ76kG
OZzTSyqlVxxlxFm9LGJnl2NbMOs7AL1kgZwLzYO2Ta4Ld7gY64v6mzh5f5I1KoKD
GIZy84O6Cce8sU4h2LuWee5xmaYkHJt8
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:58 2025 by rpki-client