Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
File:                     4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json)
Hash identifier:          y4VyiPHGJMM7mICMO3zLM8PyEf5cEFpmOaTOjZpg+1Y=
Subject key identifier:   9D:DD:28:B3:16:67:4B:89:37:4D:15:41:7F:1A:C3:A5:6A:C5:33:C2
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
Manifest number:          358B
Signing time:             Fri 22 Aug 2025 14:28:52 +0000
Manifest this update:     Fri 22 Aug 2025 14:28:52 +0000
Manifest next update:     Fri 29 Aug 2025 14:28:52 +0000
Files and hashes:         1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: CVNgzViSV1W21spjTDFCYltf48ZahTHAimjdwr0n80Y=)
                          2: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=)
                          3: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=)
                          4: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=)
                          5: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=)
                          6: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=)
                          7: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=)
                          8: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=)
                          9: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=)
                          10: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=)
                          11: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=)
                          12: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=)
                          13: 766AE05E614611F09CC5B85AC4F9AE02.roa (hash: VxDk7PIGlg4d7UuqFMx0UW7gDN4AF2vfbs5hldjyXwM=)
                          14: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=)
                          15: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=)
                          16: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=)
                          17: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=)
                          18: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=)
                          19: 8FA30C8436FA11F087F24B11C4F9AE02.roa (hash: CIOWM46A7OrehJJzF5o6WcXQACQL/brTWBmCYOJEPrI=)
                          20: 0B28C4E63DA611F0BE531A20C4F9AE02.roa (hash: bCf2+Kf1Gx3ylLxT2UrIXzeFtJkNdW2hW/PFUSCAXGA=)
                          21: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=)
                          22: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=)
                          23: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=)
                          24: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=)
                          25: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=)
                          26: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=)
                          27: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (hash: j7V2cLxBPJmgE9BS61lbh9dr46zqgDVKwuwWKKEatjA=)
                          28: 4AE8C5D45B6211F097761A3EC4F9AE02.roa (hash: AXMZPAxxDRwcgBxBo+cJ6EaXUVogXGNqmcItWPjK+ac=)
                          29: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=)
                          30: 747C7164462C11ED90035452C4F9AE02.roa (hash: ysgxI/G91R+a/iojor3l2n28shR0MhG5qk8DtBNdJ8I=)
                          31: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=)
                          32: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=)
                          33: 6A7CCD6278F111F098F20460C4F9AE02.roa (hash: ZezcbaqgaqgEWZTU1YTp4DsGMcY2Dp73FcoAM6S+LpE=)
                          34: E8FBE58C6E4D11F09E60AF15C4F9AE02.roa (hash: F3Nkvr8Ot+/Vj1pN7iXz4hhR7XsF6oalV5YpZrBcH1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13953 (0x3681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Aug 22 14:28:52 2025 GMT
            Not After : Aug 29 14:28:52 2025 GMT
        Subject: CN=68a87ea4-e9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:65:97:ba:39:00:b1:b2:c6:4b:f0:5a:c4:
                    f7:02:89:ae:ad:99:3f:2d:4f:b3:c1:af:2c:36:62:
                    8d:9f:db:d5:6d:b7:ee:aa:16:d9:d8:a9:c8:85:7a:
                    39:7f:54:e5:55:45:8d:35:93:03:2d:a6:9d:14:37:
                    16:f6:de:76:b3:e6:a1:ba:0d:c4:8b:c8:6d:49:67:
                    c7:fb:0f:ae:28:0b:36:db:1e:a3:a4:16:d5:e9:14:
                    8c:e6:ec:87:b0:de:f7:2a:64:41:99:b3:e1:fc:6a:
                    d1:73:72:c9:51:6d:b0:e8:f9:53:ee:f9:2e:4d:e4:
                    b3:92:d2:4c:b8:98:75:ac:46:64:dd:8c:6c:33:00:
                    75:a7:22:15:03:54:64:60:38:09:2b:89:5f:64:63:
                    0d:0e:bf:ac:a5:6c:6a:cf:79:b8:79:2b:3c:aa:94:
                    2a:c9:28:ac:85:5a:07:78:b3:b8:33:a3:3e:84:d2:
                    c3:fb:be:10:88:56:94:73:45:cc:27:ac:76:74:8a:
                    a5:aa:44:51:53:2b:0b:d0:90:68:6c:47:87:41:b2:
                    5b:ef:a3:62:e4:91:86:f1:dc:6f:88:53:c0:26:cd:
                    71:46:bb:be:18:f1:5f:81:64:d7:3d:1f:b6:40:a7:
                    e1:d0:ea:4a:9c:d4:77:f3:6e:8c:be:19:f6:9c:b4:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DD:28:B3:16:67:4B:89:37:4D:15:41:7F:1A:C3:A5:6A:C5:33:C2
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:56:e9:a5:26:d7:04:77:14:c2:89:f3:c7:c8:3b:25:0c:
         3b:d3:33:6c:ba:59:e6:ca:f2:e1:0d:be:90:b3:05:44:46:da:
         95:d8:64:78:d5:8b:63:0f:89:76:46:2a:3e:7e:dc:ed:73:9f:
         59:d3:45:d9:06:ca:9d:9a:c8:83:4f:4a:f1:70:61:57:7f:63:
         72:1c:2a:d3:29:16:99:a4:bd:77:57:57:1a:4d:bf:69:8e:79:
         ee:42:5e:ab:16:7d:2e:b9:e6:61:b5:3b:b8:d8:ff:d2:e0:ea:
         d9:7c:52:b6:7a:f7:37:53:58:44:26:a7:35:5d:7a:11:37:57:
         d8:02:40:8f:47:50:a9:30:a6:78:e7:9c:25:e4:b7:60:75:e4:
         c6:df:1e:17:22:6e:b7:9f:e2:5b:29:d6:45:01:68:85:ed:ad:
         8a:30:54:09:0d:d0:d3:fc:7b:c0:2b:ca:84:d4:fb:14:4c:6e:
         81:ff:ce:e3:71:d6:87:db:0d:7b:3c:03:ec:6f:c4:c7:44:91:
         64:14:19:fd:54:e0:48:87:17:e5:a8:b5:a5:60:a6:25:54:b9:
         d7:6c:b4:b7:9a:72:b4:74:9f:92:93:9d:0a:a8:b3:fa:51:0a:
         64:1b:df:e9:ff:e2:39:65:8b:1b:52:48:df:3b:e9:cc:bd:5b:
         46:74:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:27 2025 by rpki-client