Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          p7sBf+DH1gi9r/CkXk3qW/bZmWdebzpn+H1Le7xmj6o=
Subject key identifier:   EF:D4:5A:E7:33:1D:23:CA:2E:7F:CB:E6:8D:3D:02:01:33:5F:9A:C8
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1CC5
Signing time:             Wed 02 Jul 2025 16:17:39 +0000
Manifest this update:     Wed 02 Jul 2025 16:17:38 +0000
Manifest next update:     Wed 09 Jul 2025 16:17:38 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 27rCp1qaME2ltHPLiSuTCqdCLY3NNOQh0zuVt44Z+CM=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7436 (0x1d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Jul  2 16:17:38 2025 GMT
            Not After : Jul  9 16:17:38 2025 GMT
        Subject: CN=68655ba3-36f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:fb:7a:f3:0a:2b:24:11:16:cd:e5:29:ae:
                    0b:96:99:35:3e:d5:2f:27:23:ef:49:a2:66:fd:55:
                    84:e8:1e:f4:0f:52:88:63:30:4e:6a:87:aa:7b:3c:
                    48:4f:3a:0e:59:6e:7d:72:f8:79:ab:84:26:3d:e7:
                    79:bc:34:c3:1b:0c:58:ff:1e:06:6a:9c:9c:ce:bf:
                    06:ae:90:8c:11:67:ed:c4:24:f0:02:1d:cc:51:ec:
                    61:70:71:cd:2b:c6:b7:7b:66:62:68:eb:92:00:1b:
                    2e:8e:a6:fc:5f:59:ce:8e:b7:a4:03:e6:7a:cc:75:
                    c7:7e:e0:ca:80:f8:e1:92:2d:2f:e0:2b:1f:17:48:
                    07:fb:bf:1f:b2:45:65:3a:ff:14:3b:c4:5e:9b:fe:
                    08:5f:5e:a0:db:ed:57:60:40:d8:05:03:3a:b7:58:
                    ba:10:19:36:06:dc:f3:0e:fc:03:86:9e:2b:c3:ea:
                    06:4e:c8:89:92:e5:f7:19:8d:75:c7:18:fa:03:5f:
                    41:34:10:be:fa:ea:82:41:3e:ea:24:58:3c:6a:91:
                    59:e8:5e:44:52:d1:c0:f9:e4:55:25:0a:bc:d9:9e:
                    f9:dc:53:c4:dd:e6:17:db:5d:3d:0e:28:43:17:f9:
                    c4:1f:2e:92:a2:fc:f3:bd:d8:ab:04:67:5a:47:5e:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D4:5A:E7:33:1D:23:CA:2E:7F:CB:E6:8D:3D:02:01:33:5F:9A:C8
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3a:3e:69:89:8f:b1:db:7f:4d:9d:1b:f6:4e:33:3e:d4:3b:
         e4:f9:80:a6:07:c7:a2:2c:42:14:42:d0:68:8e:4c:bf:b1:3c:
         95:57:43:57:11:f6:06:83:97:40:c4:c7:c3:81:76:16:d6:62:
         66:0f:0a:a4:99:69:45:c6:f1:8b:af:07:49:08:c4:5b:ad:1a:
         3d:bb:98:74:eb:fb:27:84:fa:e6:fe:ef:6f:3b:dc:18:e9:13:
         01:04:e0:f5:de:a9:90:8a:fe:8f:77:51:39:0d:4e:95:7a:b6:
         09:30:be:44:e6:4f:7f:2e:6d:83:fc:94:4e:e6:29:b4:b9:e3:
         48:9c:42:6a:ce:af:3b:4b:92:db:50:c9:26:c4:95:0c:64:85:
         41:c1:ba:97:ae:9f:97:2c:a9:e4:7a:09:e4:16:73:e9:19:3c:
         da:1f:30:e2:ca:79:4d:ac:36:22:59:32:5d:51:d7:24:61:01:
         64:5b:07:8f:55:e0:30:f9:85:bc:65:4d:52:35:ae:89:8e:9b:
         94:97:cc:f9:c2:b8:e5:f6:4f:3b:f1:18:1c:3b:38:d7:d5:4f:
         5d:57:dc:37:e0:d4:46:cd:0c:e1:6a:50:88:3c:25:40:fe:ea:
         be:d1:13:65:9c:0b:4f:4b:5e:8f:8c:cd:d9:3a:d6:db:44:1c:
         cf:f7:4f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:03 2025 by rpki-client