Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File:                     X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier:          Edz5KS1/Ct6JKq6VyTpPb2Tj2OMC5Txq/1NYYJb2TP0=
Subject key identifier:   C3:30:B8:98:67:73:1D:1D:E9:5D:6D:19:95:BF:2A:79:A7:94:24:FB
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number:          0187
Signing time:             Sat 23 Aug 2025 03:51:19 +0000
Manifest this update:     Sat 23 Aug 2025 03:51:18 +0000
Manifest next update:     Sat 30 Aug 2025 03:51:18 +0000
Files and hashes:         1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: r4FwN2mJxk8xJ0WjO/2WVmN6ACgdweFHi2kz0tS7r0A=)
                          2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: RH2tA+pDkL65URt1jd9V89/t/7TTanl0u6hNZrCKG3I=)
                          3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=)
                          4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: mR/q70Jk2CRrQySn0SCNQ9Ok1ptByPEBAf3/SOp/6zs=)
                          5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Aug 23 03:51:18 2025 GMT
            Not After : Aug 30 03:51:18 2025 GMT
        Subject: CN=68a93ab6-6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:38:9e:bb:4e:e2:da:c1:88:1b:b1:cf:6e:
                    03:81:65:8d:b3:c3:de:a8:ec:70:c8:9d:70:c4:e4:
                    32:2b:76:20:27:4b:5b:49:66:e2:d5:86:fc:40:81:
                    6f:2d:2f:3b:7a:77:1c:93:8a:24:13:8c:4f:c1:c8:
                    d4:17:32:32:8f:92:23:b9:9d:b0:f0:cb:d8:58:d2:
                    27:8e:fb:9f:3c:31:e7:12:d2:a9:c7:30:58:f8:aa:
                    d4:49:7e:47:c2:2f:53:88:5a:4c:b3:51:e3:95:ca:
                    b8:05:7b:41:a6:32:38:d4:0c:f2:16:1f:18:65:06:
                    eb:28:35:8c:a0:65:d5:9c:f7:9c:4e:b0:ab:4d:5e:
                    1a:9d:4c:c4:22:90:f2:aa:3d:0c:90:98:17:25:3b:
                    32:49:80:53:f5:c2:ab:3c:d4:4e:08:9f:b3:c8:19:
                    83:cc:1e:09:ce:38:ac:f4:ec:65:e8:e1:86:a3:21:
                    0e:d5:9c:6f:f6:b5:dc:8a:8e:db:5a:7b:44:ab:2d:
                    ed:ec:3d:70:24:ef:25:0d:ed:fe:f0:05:02:4e:76:
                    ee:de:69:49:33:e3:fc:e2:d0:29:55:17:f7:df:be:
                    0d:d7:e0:82:68:53:37:9b:ba:49:70:16:00:00:21:
                    30:8e:3f:d7:cd:36:93:ca:17:74:c8:4d:dc:dd:9b:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:B8:98:67:73:1D:1D:E9:5D:6D:19:95:BF:2A:79:A7:94:24:FB
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:be:c0:06:cb:9c:77:b5:e4:bc:a4:80:49:e4:ef:ca:ce:
         22:3a:11:f4:d4:c0:bc:6d:d7:3a:69:02:94:64:65:1a:3d:c6:
         40:46:6d:e9:d1:96:35:45:86:ba:34:86:cd:35:61:e7:19:c2:
         57:14:51:4c:6f:72:83:28:d7:e5:ab:f9:3a:ae:c0:0a:5c:21:
         db:44:eb:41:ae:c1:5e:c3:0a:c3:e3:a7:00:59:97:dc:f9:40:
         c6:e6:0b:4b:9c:6c:89:e6:aa:6e:55:d8:f9:3b:d7:99:bc:24:
         67:dc:00:e8:d0:3a:e4:4c:dc:97:b8:c5:58:29:96:ee:ba:0c:
         7c:e1:d6:5e:17:63:37:0b:5f:1c:07:03:4f:45:1e:d1:09:04:
         6e:1b:c3:19:eb:8d:c7:15:ba:c2:dc:a5:43:fb:de:0e:60:01:
         60:98:92:4a:84:6b:f1:2e:36:a1:69:ba:00:f4:26:82:1d:37:
         2c:f3:3e:25:69:49:de:0b:a6:9c:1c:d0:19:ff:52:37:03:e5:
         23:95:5c:ce:ae:f3:8f:06:f3:09:a3:18:5c:b9:e9:f5:71:5f:
         59:c5:9c:85:8f:71:a6:d6:ec:cc:90:b0:e2:18:c3:94:86:96:
         ac:f8:e2:be:7e:fb:b7:32:0a:37:2f:5b:16:0f:5b:b5:d0:54:
         21:88:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:27 2025 by rpki-client