Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          LNmUJ29Xuju5ReTNko6ZYNfWva28fIT7Q7ule9NJly4=
Subject key identifier:   32:1B:18:57:E1:38:63:4A:5D:79:4B:06:2F:6C:6F:9F:3A:1B:5D:B2
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0B3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0B33
Signing time:             Wed 02 Jul 2025 19:25:15 +0000
Manifest this update:     Wed 02 Jul 2025 19:25:14 +0000
Manifest next update:     Wed 09 Jul 2025 19:25:14 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: ZpB+cBW0o/ecNx1Typr0/eFYgI385d7lauk9cjMZ5sg=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: Jul  2 19:25:14 2025 GMT
            Not After : Jul  9 19:25:14 2025 GMT
        Subject: CN=6865879a-82f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:a3:49:91:19:cd:27:29:9b:f8:0e:74:4a:
                    a7:a4:82:a3:93:e2:56:32:fa:d0:52:9c:17:74:85:
                    7a:a7:c2:a2:1b:98:22:71:3d:03:cd:30:10:51:d4:
                    57:43:b6:c9:cf:0c:be:96:2a:cc:92:24:5a:86:5b:
                    54:c9:81:96:47:f9:46:47:72:a1:f6:67:3f:1b:0e:
                    1c:39:b4:d0:82:b7:bd:1b:8e:79:e8:27:5f:af:d2:
                    47:0b:1c:25:03:b9:2f:f7:33:79:ed:f5:35:9f:a1:
                    52:3b:79:5e:15:6d:50:e6:76:36:66:23:28:86:b2:
                    04:aa:b6:84:97:11:5b:47:f1:e9:a3:a4:9a:66:56:
                    83:2e:0e:46:bb:fb:fd:67:05:49:93:ec:83:2c:4e:
                    6a:98:0f:8d:5b:f9:a1:a1:29:d8:98:82:c8:fa:5e:
                    7d:17:70:dd:e1:65:d9:df:e2:84:e8:7d:0d:f7:39:
                    eb:ae:51:de:eb:c0:29:0f:93:98:fc:c2:0c:1e:5b:
                    57:46:36:9b:5d:89:82:01:f0:70:5d:85:67:ff:af:
                    8c:1a:0b:a2:1f:9f:b9:99:be:42:6e:f6:4c:47:87:
                    37:3f:71:0f:fa:6f:4b:78:86:28:a7:1f:ac:ba:cd:
                    6c:96:92:15:b0:8d:25:be:e6:26:f7:a6:b8:78:ea:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:18:57:E1:38:63:4A:5D:79:4B:06:2F:6C:6F:9F:3A:1B:5D:B2
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:d3:a7:33:ec:04:f3:b2:62:b3:e0:8c:0d:0b:5e:5e:0d:
         4d:cf:fa:b0:47:17:9a:df:4d:d0:73:c5:15:f9:91:c1:8a:06:
         14:ce:0b:e6:98:a4:5c:bd:c2:00:7c:13:ee:e6:4f:bc:9e:29:
         0b:ac:88:aa:b6:87:7a:73:23:6a:e4:69:89:2b:21:89:5c:19:
         88:4e:5a:30:57:82:08:80:d4:6b:d6:0b:eb:65:00:70:bb:f7:
         76:1c:9e:ac:d6:8b:32:a5:38:34:12:3a:dd:04:2c:a2:6b:4d:
         22:db:ed:67:f5:14:ae:de:4f:e2:0a:f6:15:9f:6c:b6:b8:e7:
         37:d2:66:e6:44:fa:a5:18:72:19:f9:f7:6a:13:17:4c:fd:f3:
         0f:5d:9d:c2:64:7f:db:46:95:e1:7f:e9:0b:c4:07:ac:22:eb:
         6b:09:ee:ef:e2:b0:25:b8:3f:6c:f8:28:9f:14:76:6c:57:ef:
         d1:24:94:a2:aa:29:0c:65:be:30:fd:9f:e7:b7:7d:ad:48:83:
         61:c4:4d:bb:9f:5f:58:6b:55:91:ab:37:e3:f3:33:c3:9f:97:
         0b:43:61:20:d7:67:f0:76:38:6c:cc:a4:00:26:9a:9b:69:f5:
         e0:d4:df:78:07:48:8f:82:2e:ef:b0:83:e9:0c:0b:26:9b:94:
         cd:09:64:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM0MTUxMTAvBgNVBAUTKEYwQ0IzNUYxNDVFNjFCMUMyMDQzQUZEMUJBNEUzNTQx
NDdDNEI1NUUwHhcNMjUwNzAyMTkyNTE0WhcNMjUwNzA5MTkyNTE0WjAYMRYwFAYD
VQQDEw02ODY1ODc5YS04MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzzOjSZEZzScpm/gOdEqnpIKjk+JWMvrQUpwXdIV6p8KiG5gicT0DzTAQUdRX
Q7bJzwy+lirMkiRahltUyYGWR/lGR3Kh9mc/Gw4cObTQgre9G4556Cdfr9JHCxwl
A7kv9zN57fU1n6FSO3leFW1Q5nY2ZiMohrIEqraElxFbR/Hpo6SaZlaDLg5Gu/v9
ZwVJk+yDLE5qmA+NW/mhoSnYmILI+l59F3Dd4WXZ3+KE6H0N9znrrlHe68ApD5OY
/MIMHltXRjabXYmCAfBwXYVn/6+MGguiH5+5mb5CbvZMR4c3P3EP+m9LeIYopx+s
us1slpIVsI0lvuYm96a4eOrWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIbGFfh
OGNKXXlLBi9sb586G12yMB8GA1UdIwQYMBaAFPDLNfFF5hscIEOv0bpONUFHxLVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzQxNS8xMDcyMDk0ODNE
RkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4d2dRNl9SdWs0MVFVZkV0
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhNczE4VVhtR3h3Z1E2X1J1azQxUVVmRXRWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzQxNS8xMDcyMDk0ODNERkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4
d2dRNl9SdWs0MVFVZkV0VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLWNOnM+wE87Jis+CMDQteXg1Nz/qwRxea303Qc8UV+ZHBigYUzgvm
mKRcvcIAfBPu5k+8nikLrIiqtod6cyNq5GmJKyGJXBmITlowV4IIgNRr1gvrZQBw
u/d2HJ6s1osypTg0EjrdBCyia00i2+1n9RSu3k/iCvYVn2y2uOc30mbmRPqlGHIZ
+fdqExdM/fMPXZ3CZH/bRpXhf+kLxAesIutrCe7v4rAluD9s+CifFHZsV+/RJJSi
qikMZb4w/Z/nt32tSINhxE27n19Ya1WRqzfj8zPDn5cLQ2Eg12fwdjhszKQAJpqb
afXg1N94B0iPgi7vsIPpDAsmm5TNCWQI
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:47:49 2025 by rpki-client