Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
File:                     edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json)
Hash identifier:          VPkYYdQdGbsNf9p3/8NGMFhnHJ5sRXFmvDHjJDoLqqM=
Subject key identifier:   6A:7A:FB:7F:B7:11:DB:D4:BA:A4:DB:A8:CD:38:0E:9B:A7:BA:8E:8A
Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
Certificate issuer:       /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
Manifest number:          0109
Signing time:             Sat 23 Aug 2025 05:08:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:08:42 +0000
Manifest next update:     Sat 30 Aug 2025 05:08:42 +0000
Files and hashes:         1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: dZsaDR+WMNtHJlMyBnZ7WHTzpCvC5v8qMMq0ZqGM6Vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
        Validity
            Not Before: Aug 23 05:08:42 2025 GMT
            Not After : Aug 30 05:08:42 2025 GMT
        Subject: CN=68a94cdb-111e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:42:8a:1f:08:3c:fd:2f:52:1b:8f:5c:63:
                    ef:3a:94:c7:1e:ad:31:7b:ff:11:26:5d:87:b9:18:
                    df:8f:4a:4a:bc:05:21:9d:86:d3:9a:d9:c7:a1:9c:
                    e1:89:e2:fb:b5:61:f1:64:c1:bc:82:36:88:80:74:
                    99:69:91:15:e1:05:d0:49:ea:a9:07:43:ed:3f:98:
                    af:2d:11:04:3a:63:dc:2b:08:58:a2:a6:e4:4e:1e:
                    c5:74:f8:d7:90:0c:8e:77:c0:8e:bb:88:91:b8:19:
                    ba:36:0c:ff:79:63:92:fe:55:f3:79:57:0f:44:01:
                    0c:21:21:c2:41:ac:e4:7f:4f:92:c6:97:26:cd:f2:
                    f1:cc:d9:b9:0b:4c:f0:43:af:ba:a8:d1:be:2a:90:
                    65:32:f5:ef:4b:62:19:2f:5e:e0:77:38:e9:a7:03:
                    6c:c3:31:67:78:6d:75:a8:0e:bd:0b:4f:9d:25:12:
                    29:1c:14:3f:2f:a8:e2:25:05:ca:2e:fe:63:1e:b4:
                    6e:4c:79:c3:3a:55:64:16:58:58:b4:08:06:23:df:
                    bd:c2:92:09:57:1c:f4:76:9d:7b:ea:2f:b9:c8:17:
                    ae:0d:d7:90:33:c4:6d:6a:2d:21:ee:47:c5:1f:66:
                    ae:71:bf:a0:05:dd:04:43:62:b2:17:69:3d:1c:1e:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:FB:7F:B7:11:DB:D4:BA:A4:DB:A8:CD:38:0E:9B:A7:BA:8E:8A
            X509v3 Authority Key Identifier:
                keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:41:ca:82:f5:74:33:6a:19:11:41:c3:1c:ac:5c:76:c8:95:
         fc:a8:85:3d:b7:ed:41:c0:43:28:d5:99:0b:a9:1f:90:ef:71:
         56:a4:e8:73:f5:96:63:fd:90:00:05:2f:8c:1b:d6:99:01:d0:
         17:62:49:fd:62:a9:ca:66:0f:63:62:4f:7a:60:4d:59:1c:7e:
         30:1d:19:07:da:39:b1:ff:8d:5e:6c:38:35:43:24:a5:f7:2d:
         7b:89:34:38:16:d7:f2:7a:c1:ae:1f:a3:c9:25:36:38:60:3f:
         24:0e:cf:e5:d9:07:06:9a:64:cf:5c:e5:7f:27:cf:3f:23:33:
         7e:5a:86:d2:84:7d:ee:d1:56:9c:7e:74:77:d7:29:27:4a:b3:
         1c:d2:48:27:41:a7:44:a3:56:ed:69:ab:7a:26:8c:94:14:46:
         08:47:e5:62:15:c1:80:8e:de:8b:d3:38:b7:fc:6a:d2:9b:7a:
         15:3f:b2:2f:7b:ef:e6:89:33:c0:b6:d9:98:a7:ca:e4:a8:39:
         c4:fb:fb:94:63:c7:d3:ce:fb:c0:87:3d:33:5c:11:fe:dc:aa:
         5e:04:db:40:d1:00:eb:33:30:73:61:c3:31:ac:39:a2:8c:90:
         8e:a4:0d:a6:15:f1:8f:ca:c8:10:af:45:81:a5:97:6b:44:0b:
         df:d1:a3:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0MUMxMTAvBgNVBAUTKDc5RDYzMDVGQTIyRkZERjdFMzUxMDY3NDk3ODYyQzY0
QTE2NTQ3MkYwHhcNMjUwODIzMDUwODQyWhcNMjUwODMwMDUwODQyWjAYMRYwFAYD
VQQDEw02OGE5NGNkYi0xMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwoJCih8IPP0vUhuPXGPvOpTHHq0xe/8RJl2HuRjfj0pKvAUhnYbTmtnHoZzh
ieL7tWHxZMG8gjaIgHSZaZEV4QXQSeqpB0PtP5ivLREEOmPcKwhYoqbkTh7FdPjX
kAyOd8COu4iRuBm6Ngz/eWOS/lXzeVcPRAEMISHCQazkf0+SxpcmzfLxzNm5C0zw
Q6+6qNG+KpBlMvXvS2IZL17gdzjppwNswzFneG11qA69C0+dJRIpHBQ/L6jiJQXK
Lv5jHrRuTHnDOlVkFlhYtAgGI9+9wpIJVxz0dp176i+5yBeuDdeQM8Rtai0h7kfF
H2aucb+gBd0EQ2KyF2k9HB4TQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp6+3+3
EdvUuqTbqM04Dpunuo6KMB8GA1UdIwQYMBaAFHnWMF+iL/3341EGdJeGLGShZUcv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81M0FBQjRFNkU3
MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi9lZFl3WDZJdl9mZmpVUVowbDRZc1pLRmxS
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2VkWXdYNkl2X2ZmalVRWjBsNFlzWktGbFJ5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTQxQy81M0FBQjRFNkU3MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi9lZFl3WDZJdl9m
ZmpVUVowbDRZc1pLRmxSeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIQcqC9XQzahkRQcMcrFx2yJX8qIU9t+1BwEMo1ZkLqR+Q73FWpOhz
9ZZj/ZAABS+MG9aZAdAXYkn9YqnKZg9jYk96YE1ZHH4wHRkH2jmx/41ebDg1QySl
9y17iTQ4FtfyesGuH6PJJTY4YD8kDs/l2QcGmmTPXOV/J88/IzN+WobShH3u0Vac
fnR31yknSrMc0kgnQadEo1btaat6JoyUFEYIR+ViFcGAjt6L0zi3/GrSm3oVP7Iv
e+/miTPAttmYp8rkqDnE+/uUY8fTzvvAhz0zXBH+3KpeBNtA0QDrMzBzYcMxrDmi
jJCOpA2mFfGPysgQr0WBpZdrRAvf0aPg
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:55 2025 by rpki-client