Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          kkmNexK3iVVolAzp13JBrR0sa98sI0TFSKY+LjtWyWQ=
Subject key identifier:   87:D0:BB:96:71:05:38:93:AB:2E:02:E6:CE:75:EA:84:37:61:02:3D
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       08BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          08AF
Signing time:             Wed 02 Jul 2025 20:46:42 +0000
Manifest this update:     Wed 02 Jul 2025 20:46:41 +0000
Manifest next update:     Wed 09 Jul 2025 20:46:41 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: 4l7oo6IhZryjSPnv9HY6JYEtFWORMEoQ+SZ4spGihMs=)
                          2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=)
                          3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Jul  2 20:46:41 2025 GMT
            Not After : Jul  9 20:46:41 2025 GMT
        Subject: CN=68659ab2-fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:21:22:be:1d:a4:9c:ec:45:ee:89:00:30:
                    91:45:56:5e:8f:52:58:bd:c7:c3:3f:6a:d0:0f:bb:
                    42:5f:11:7f:f2:86:70:15:b9:08:7c:16:30:e1:38:
                    41:8b:c2:54:c3:6f:3d:2e:f2:f5:45:a9:60:db:1a:
                    af:fa:65:12:2e:bc:f2:51:9f:49:ea:e7:4a:37:b6:
                    2c:e5:2c:c7:2c:1c:f5:1e:1a:b7:e9:9c:ad:f9:91:
                    60:ae:49:e4:38:89:72:a4:dd:4d:46:e2:a3:a0:da:
                    db:83:6a:b9:2b:03:2f:df:c2:c1:88:2f:19:5e:d4:
                    e4:c3:d8:3a:2a:d7:f4:b7:7f:ab:97:06:73:df:c6:
                    b6:3c:10:e6:0c:2d:9b:ad:c0:67:97:b7:c2:98:4d:
                    dc:ab:e0:4e:aa:1c:c8:54:13:e2:81:57:69:bf:9d:
                    e2:d0:eb:fc:ef:6f:2c:3b:5a:aa:1e:6b:bc:5b:27:
                    33:95:e7:f1:c3:9d:2a:50:96:e9:b8:ff:a1:96:31:
                    f0:65:a7:c0:9e:64:3d:d2:ec:e6:fc:16:07:43:77:
                    da:b1:84:2c:45:67:e4:cc:ae:bc:de:c9:3e:b2:d0:
                    3e:67:52:d5:c2:f9:64:49:ac:cd:cc:10:11:3e:ce:
                    6d:b9:e5:1b:37:31:8a:90:1a:62:fb:9d:e1:63:63:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D0:BB:96:71:05:38:93:AB:2E:02:E6:CE:75:EA:84:37:61:02:3D
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:4b:d8:81:f9:bf:0f:66:48:bd:dd:67:d8:3c:3b:de:03:
         0f:7f:63:0f:54:05:cb:a9:13:66:a3:bd:6c:e6:f6:07:d3:d2:
         05:9f:ca:b6:e8:3a:68:43:75:b9:11:65:91:5e:24:4f:71:38:
         7c:ae:62:82:58:01:d8:60:bb:ac:05:73:ce:43:04:c9:b5:a5:
         de:b4:e9:3a:1c:e7:53:85:fa:e1:ff:73:f2:f7:5e:64:d5:94:
         d5:1e:41:9f:3e:fa:1c:72:49:08:97:6f:81:a6:1b:f4:b1:48:
         7a:a1:37:fe:35:f4:3c:3f:7f:9f:ac:8f:ff:a7:92:32:be:6c:
         9e:ff:5f:c4:ab:08:6b:42:49:62:ee:68:f0:00:16:d2:da:a5:
         5c:4f:c8:bc:ba:ac:11:79:a0:7e:15:b6:92:67:31:e5:97:2c:
         46:73:5f:05:fa:7c:c1:c3:0c:5a:34:75:33:19:d0:6e:6a:02:
         89:61:2a:a4:4e:f8:cd:fb:eb:fb:00:0d:34:74:89:72:2b:3c:
         07:ea:cc:1f:4f:1c:e6:a0:58:03:ed:b5:7e:9c:eb:83:a2:26:
         6d:11:eb:19:04:ff:eb:1a:55:14:fb:91:c4:85:b7:0c:48:f3:
         34:29:05:19:fc:ad:9a:02:0e:fa:9a:10:5d:0c:7f:08:46:35:
         c9:a9:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:57:40 2025 by rpki-client