Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          BmpSoDZsQpWRwMhhk3+FlbX23Zdqvyjw6TuPyhb8fTc=
Subject key identifier:   85:4D:8D:DE:9A:1F:FE:D9:BC:74:BE:33:5E:20:53:A8:5F:FA:8C:03
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0E6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0E5C
Signing time:             Fri 22 Aug 2025 17:52:01 +0000
Manifest this update:     Fri 22 Aug 2025 17:52:01 +0000
Manifest next update:     Fri 29 Aug 2025 17:52:01 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: xHIMleB7sliI5sy/HjaCj+sU9/udftspjI0fq+Nt/kM=)
                          2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: hSdBAGkC3NdMrHlNO891FMpZkgcopmoPEPx2e0kU7og=)
                          3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: jJLLdhgsMFr0SXlBPDR7D/j4Grn7XSvqbioW2zzeEek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3691 (0xe6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: Aug 22 17:52:01 2025 GMT
            Not After : Aug 29 17:52:01 2025 GMT
        Subject: CN=68a8ae41-b106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:ac:65:ac:15:90:2f:ad:bf:4c:bc:86:31:
                    10:73:9a:d5:e1:f6:ca:74:d9:f2:fc:13:8b:31:28:
                    5b:55:2f:26:62:91:d7:ba:f8:b9:6c:2b:f5:7f:99:
                    e6:43:70:dc:06:7c:0b:1d:fa:df:57:94:85:cd:04:
                    a1:6a:da:7b:90:a7:2f:c3:19:f8:82:fc:b2:f3:18:
                    79:53:8c:96:f1:8b:f7:61:6b:8e:d6:e4:0a:50:d8:
                    af:09:d9:8d:89:3a:11:5c:84:a6:51:a1:fc:9b:50:
                    76:4b:44:9b:a5:57:8a:5f:ea:c6:7e:32:ae:b8:f7:
                    96:c3:6b:52:8f:2d:14:e2:27:76:f4:dd:9e:e8:14:
                    46:14:ba:6d:b0:7a:3d:95:b6:7f:79:98:c0:82:99:
                    a9:ac:9d:ee:34:3d:5e:62:75:72:a9:73:1d:3a:24:
                    31:ef:27:6a:b8:5a:de:85:7a:64:35:b0:ba:63:7c:
                    a6:3a:3b:ef:e2:e5:61:5c:1f:7f:27:bf:6f:7e:8a:
                    31:84:cf:6f:1f:7e:70:48:ef:3c:ab:54:24:d6:23:
                    4a:1a:6b:99:b2:b0:13:b1:8e:f9:fd:47:07:6d:72:
                    8c:46:48:00:0d:b2:e1:50:1d:1d:4e:14:43:5a:77:
                    27:2b:9b:e0:eb:4f:9a:12:52:fc:3c:40:b9:a8:fa:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:8D:DE:9A:1F:FE:D9:BC:74:BE:33:5E:20:53:A8:5F:FA:8C:03
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:70:56:36:40:96:cc:72:ee:b6:95:8b:69:aa:ec:46:b4:56:
         1f:58:80:77:3f:db:82:5e:f8:b3:37:dd:a4:cc:cd:cf:10:05:
         ea:e0:f5:19:a4:a4:a0:17:a1:81:e8:e5:c4:55:48:75:71:ec:
         75:ba:50:94:3d:07:29:52:cb:a2:d2:25:92:a7:1e:1f:cb:87:
         63:17:65:2f:29:79:a9:3d:1e:c1:82:4c:06:ff:76:e5:18:55:
         fb:51:a0:bc:64:8b:b8:ac:18:34:ef:4f:41:8a:9b:20:44:14:
         d0:80:4f:64:fb:6e:7e:e7:ad:f7:e5:62:6d:7f:fd:c4:49:00:
         4e:0e:da:3b:f9:a5:a2:e1:fd:07:7d:c1:25:55:28:aa:28:13:
         9e:b5:f5:36:b9:b3:78:b9:8f:24:48:ad:19:d0:f5:c0:e0:c2:
         1d:32:fb:e6:21:c5:5e:82:4d:e8:07:80:d2:c3:61:11:ff:b2:
         77:d7:6d:a0:af:30:8e:53:9c:5e:b0:70:0a:ff:fc:eb:67:53:
         fb:06:7c:15:b8:a2:c6:51:2d:d0:ed:6b:2d:f5:e4:01:6c:0d:
         e7:2a:bf:11:da:0a:0d:6b:76:37:fc:ec:74:24:25:2b:36:09:
         9c:69:57:a8:cf:0a:60:16:54:4e:55:a6:16:d4:27:b6:c2:76:
         0c:cc:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:20 2025 by rpki-client