Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          4/QS1vCctBN7HsLGv4ef6Vfp15VqtWpCD4iRyMjQuQQ=
Subject key identifier:   25:62:0A:C8:1A:C5:ED:29:34:BF:61:3C:45:50:29:01:55:6A:7C:2E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          374C
Signing time:             Fri 22 Aug 2025 14:22:11 +0000
Manifest this update:     Fri 22 Aug 2025 14:22:11 +0000
Manifest next update:     Fri 29 Aug 2025 14:22:11 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: IjAJl5Ap3paQNKbvg3NtmTInjTNZDedK8qPwvJtFQkc=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: 7Qy9qXoaY9x4VuN4EZ0lO0nUdpYSzQD6Nyrn1uaVEq8=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: z9HaUp/F2Eb09B4FeQi8go7G2DS9o12Zg3mvwv3IbtM=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: ChYD+dNYyCInKmhyHsi0B1wkTq6FHjT+KDylhmMIQaU=)
                          5: FFB4329A5B9011F0A3ECA351C4F9AE02.roa (hash: ngLPWJnAOp37+VU9f3DQJVToWiTF9NgeRaLixJCdqgM=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: Fum9wynbW46bBWpLsLIRjpqgESZ0wYgIRM9aD5ujlCc=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: C8anzo3wIrPEk1GE8PbP/ejOtinKtiNErIk39oiNvt0=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 2UAmCqv65l0EyrJ8vogZ6XvweSD9Dk8E2FEP81jdWxE=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: evSbADlKi6Aoc1pxAc2NrEs9X2WBgu7ILOt35lu9gm4=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: Xwu2cFcPAEo+elSKxorX+Sf443v4LqtlzkSNNtTquMc=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: mg1teoBc7Boh3ZoLd+5gvaGJaFd/PWcUnxH/SupEHww=)
                          12: 97DE828061E211F0A89DA027C4F9AE02.roa (hash: ZE7ZukYBgBvNYyPPJAzJ612eGNB9AKUYhTrRQDE3DEk=)
                          13: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: MdnVi1OIFkoo0dm/yCy+3NB6G2QdHBGCAwYC8bNp0Zg=)
                          14: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: XeOavvZiR3sFlQ/5myU2/vsanQb5X0EfvxEaH+f2fdc=)
                          15: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kfvn38ixprZNvoP8sdkWRE4Y87QEhE7Cfyn7D4FPsf4=)
                          16: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: DcHlNA8XpoMoa8j+kjrzppHmEvQSR+3K0O1rUE7HneA=)
                          17: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Ffh0Llbu+aifsZ/PhUzKVAABbwr/NW6qzAkEIXJ6/7A=)
                          18: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: 09tGhGYy1EBd0MGX/GluMy6ke+NPb5M4XAtBFpqIk9Y=)
                          19: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: y/ZcKXvRId0MU2jWP2qiUlc9klsFtiDYeSjklRbVi0k=)
                          20: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: LcpUVsxOJi3t+CPRAWzqjfdnmFogw8cF+SJQm5U5O4I=)
                          21: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: qUMKMRxZ99VhDadcacr3UtNm3iVgxflvwhxpIHuV3Uc=)
                          22: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: R3NOwHRvbG4Sj9UJHqKDj+q85wrGI2+UCl4SulBfUw8=)
                          23: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: YitENFm9BCdA92I41DJxpRQ7XMmhtSEQKT0EzpScV8g=)
                          24: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: vFBJDYKINsG7qNbm5o+Za+m+zPuBlKRNX+X12lKjHMw=)
                          25: 52850542A60811EF91FB1113C4F9AE02.roa (hash: M6YB2rmwwkNibJ4OogBvzsryRcCd0Ftm7HHimXMezmg=)
                          26: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: VhA+Hs+q7s+bBv48I0pk72FnDH5rcT3DytwZJAE63fk=)
                          27: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: PlEnsEP21PJC16O7WpqiMN6BCHLW/59u/YvhE9nkz+Y=)
                          28: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: qHE4CVNPl2hfbb1z0WR6L0xNSdCigOSFLS7QO+iIYEU=)
                          29: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: DzJjX26F/6q2iCnJ1sWD2xCr+N10vleN++lLSBNm8a0=)
                          30: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: /SphmDOXIGkmk4Dx70JMdSpOBjmQfa6XPTmojFUioL8=)
                          31: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: rowBvIqawxIBDAjrerBCpZz930ir2eOmQUO5U3LzEmQ=)
                          32: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: Cen6H7O/9BMGQfEMnjJkwMjjekXxF8vODlzBKhy+TQU=)
                          33: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: l8Dw0ddBvCAgKUHsutMECKNj1UHJE2k/V9PmgyyUJds=)
                          34: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: GvJakzzk6/d7G+Vxt5rr4xnMS4OHrqYd4CORSpkPBhM=)
                          35: 813979825BB011F0AC78A45BC4F9AE02.roa (hash: y253tv6qx5tZsbZ2c5EC5vtkvkECQA5aV06Pji+pbOE=)
                          36: 5E775F6644CE11F09A370919C4F9AE02.roa (hash: CV0j95RqvFk5vdn0PU1qSmljoaTpS4bQLUN+bT3PTXI=)
                          37: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: rRWG0qYGlcMnQzzd2jOwyjp0JRek+hed3twRZmd9Rfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14696 (0x3968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug 22 14:22:11 2025 GMT
            Not After : Aug 29 14:22:11 2025 GMT
        Subject: CN=68a87d13-eade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:75:4c:08:7e:82:3c:5b:71:b7:94:7b:a7:
                    32:8d:5d:69:c6:c1:a5:ed:b2:62:4a:ff:3b:8a:71:
                    a9:0b:26:5b:d3:8a:94:7f:93:73:67:8d:63:b1:10:
                    bc:d0:5a:ba:1e:29:d6:b8:83:6c:0c:55:ed:5c:b5:
                    12:d8:24:08:67:da:c9:af:e1:5d:e8:d7:48:c8:3c:
                    bb:eb:65:f3:3b:06:bb:8d:04:b9:60:60:5c:07:9b:
                    a6:d4:af:86:92:15:1b:15:34:aa:3e:8f:0a:b0:49:
                    ee:ba:0e:1f:d6:b4:e9:78:ba:47:3d:d7:a9:1e:91:
                    65:1e:dc:bc:dd:41:cb:38:c9:a7:27:8b:58:ee:d8:
                    b8:69:58:74:10:bb:a6:fe:12:fb:8f:72:1d:ce:8f:
                    95:aa:c5:f1:fb:bb:8a:a5:aa:d1:e9:e2:82:d8:40:
                    61:4b:5c:a3:69:0b:f3:5b:b7:d7:d3:73:d0:b7:82:
                    0e:56:e3:84:1e:a8:56:85:4e:bd:eb:88:4b:1c:f6:
                    4d:02:fd:fd:f1:13:5e:3a:9e:93:ea:af:7c:ce:8f:
                    be:ca:2c:9c:d1:9f:96:c2:a1:4b:aa:ae:81:2e:d6:
                    53:19:96:ac:9c:ae:4f:b9:25:22:52:51:b0:07:fb:
                    ee:45:13:9a:1f:00:5f:d5:fd:c8:20:cb:85:de:aa:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:0A:C8:1A:C5:ED:29:34:BF:61:3C:45:50:29:01:55:6A:7C:2E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ba:ed:2e:f4:6b:05:cc:27:95:62:00:db:89:83:26:84:4d:
         69:4e:f6:11:af:c0:0e:4b:c8:5f:b9:31:51:88:28:f7:9b:b4:
         21:d5:6d:80:fb:28:89:2f:9d:40:08:b1:2b:41:88:e2:56:58:
         9b:ed:50:a8:9e:8e:d9:45:81:bb:92:fc:81:55:39:28:04:7e:
         43:f9:94:bd:b8:2f:6d:0a:af:23:01:81:67:2c:c8:e1:f9:b8:
         50:33:98:44:fa:f9:be:b6:be:3e:58:d1:03:92:c1:1b:40:05:
         d4:49:3f:d4:8b:e0:45:2e:cf:8f:e1:5c:56:75:6f:da:a7:d0:
         6d:1f:6e:9b:dd:89:e4:a6:65:3d:e9:bc:6c:ae:58:2f:30:7e:
         0f:5e:4e:96:fe:d3:a2:ac:94:ca:50:f5:aa:a6:77:35:a6:b1:
         e5:be:20:0a:27:40:5f:20:52:b1:6a:b4:cc:d8:1e:b4:66:b3:
         2c:b7:89:03:48:70:fb:42:53:ab:4f:68:5d:3f:92:97:3c:29:
         8d:35:38:94:f6:fc:93:36:f1:c4:88:d7:35:89:5b:55:84:e3:
         d2:4d:30:18:84:3d:c8:1d:e0:fc:2f:f5:2f:12:59:cc:f8:dc:
         8b:88:7c:1d:ba:8d:4d:57:3c:14:b7:bf:d0:2d:90:fc:25:b7:
         05:76:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:48 2025 by rpki-client