Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
File:                     6IBLfhBNZXbwyNxIKlG142eqH3c.mft (raw, json)
Hash identifier:          yc9t318VRJ2ZtlANcY2G8OGfPcMt4869vYojmzNrM0k=
Subject key identifier:   C5:82:AD:13:E7:09:7C:AD:61:44:B0:17:BD:CB:AD:7E:AB:32:2D:9A
Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
Certificate issuer:       /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
Manifest number:          C7
Signing time:             Sat 23 Aug 2025 05:55:59 +0000
Manifest this update:     Sat 23 Aug 2025 05:55:58 +0000
Manifest next update:     Sat 30 Aug 2025 05:55:58 +0000
Files and hashes:         1: 6IBLfhBNZXbwyNxIKlG142eqH3c.crl (hash: DdXPWYmhnF1XqSo9EwLL30L/6xnAw1Oo7qV5LczsP7M=)
                          2: 2920764254CC11EF84CA4F17C4F9AE02.roa (hash: IrFxxAlGnVb5beRabO7QO6Z5Pnh09uDax8gaWrx9WwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
                          rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915392C, serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
        Validity
            Not Before: Aug 23 05:55:58 2025 GMT
            Not After : Aug 30 05:55:58 2025 GMT
        Subject: CN=68a957ef-28de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:bb:e7:81:36:89:df:6b:f3:a5:54:91:37:
                    0a:d6:da:70:cd:16:35:3e:21:b2:bd:3f:86:c2:69:
                    45:35:cd:29:0a:23:ef:19:8f:a0:ba:a3:2e:31:d5:
                    3b:0b:f3:22:5d:30:35:b9:45:fb:dd:f3:1e:0a:22:
                    7b:c8:76:7c:8a:14:bc:06:a2:7b:e3:9f:6b:ef:83:
                    2d:84:6c:6e:37:8e:a9:2c:8a:f6:84:98:b7:6c:63:
                    a1:4d:ab:9e:1c:38:6f:ae:20:f6:3e:50:bd:ff:1b:
                    83:2c:dd:29:5d:cf:85:92:8f:cc:1b:f4:ad:69:d0:
                    ed:1e:bc:3c:bc:cc:ed:bc:a8:7d:1a:54:25:54:6b:
                    9c:99:4e:d7:46:6e:eb:2a:3f:48:4f:7e:64:8a:8e:
                    62:16:8e:b3:7b:76:db:eb:8c:6d:2b:71:a7:53:55:
                    f1:0c:ed:0c:cd:a5:12:ec:37:28:01:33:02:88:52:
                    ac:40:f6:08:19:7d:ab:aa:53:30:97:8c:73:aa:89:
                    99:e4:45:1a:32:cd:f7:58:9a:9a:ab:26:2b:ad:fb:
                    c9:bd:13:2d:e6:6d:e4:37:5f:39:4c:42:fe:3a:4a:
                    74:25:ba:4f:5d:f2:f4:95:16:cf:4e:50:62:ac:e0:
                    24:98:0e:b9:68:80:a8:3b:e6:1b:91:18:82:ca:7b:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:82:AD:13:E7:09:7C:AD:61:44:B0:17:BD:CB:AD:7E:AB:32:2D:9A
            X509v3 Authority Key Identifier:
                keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:41:0a:95:4d:ab:3a:9e:d3:60:43:3a:8b:ef:05:ed:5f:37:
         21:d5:0a:fa:68:25:d5:d6:76:46:1a:d3:70:5b:5f:ec:d4:f9:
         f0:5e:98:79:62:8d:9e:64:58:4a:d0:ea:ed:b7:3b:54:81:53:
         d1:f6:06:88:4d:d5:d2:c9:23:d0:9f:cf:3b:33:a9:f4:54:c0:
         4f:fb:38:a5:6d:dc:f0:d5:48:19:91:33:a9:e1:5a:5a:32:d4:
         ce:eb:ab:b2:e1:97:7e:86:40:49:72:06:7a:d8:e1:35:f5:6c:
         2e:a8:90:21:3d:50:a2:09:63:5d:bd:94:c0:a4:90:a8:85:c3:
         8c:4b:53:72:91:43:c0:b1:46:6d:b4:ab:f1:d4:39:ec:48:e1:
         4f:02:4f:1b:66:e8:4d:a6:35:11:20:71:64:d4:88:b2:41:e8:
         18:8a:e8:66:69:37:91:fb:fe:98:bb:c4:e8:6a:aa:d1:58:67:
         6a:7f:91:82:c6:ee:60:55:0a:42:e5:b9:dc:fb:f2:ed:f4:2d:
         24:db:0d:84:44:eb:a5:0d:53:5b:e4:27:28:ab:8c:81:e3:a7:
         de:e4:e8:d1:82:98:c8:48:71:0a:0c:c7:9e:48:60:a5:49:ee:
         d9:e4:82:de:68:bf:d9:76:49:80:8c:f1:6a:05:e8:50:18:bf:
         eb:65:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:03 2025 by rpki-client