Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File:                     8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier:          Du9hBrmStzLQZwdpGQqdd2JXvbDXoO6EirXNWdZSSes=
Subject key identifier:   36:AD:21:3D:B3:37:9C:44:1E:A2:59:A5:C7:D3:9C:A1:B0:7B:85:E3
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number:          91
Signing time:             Sun 29 Jun 2025 05:30:30 +0000
Manifest this update:     Sun 29 Jun 2025 05:30:29 +0000
Manifest next update:     Sun 06 Jul 2025 05:30:29 +0000
Files and hashes:         1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: 4kGFki9dRrQF6z3cWg0JDk/HzUfXh3WZZW+JaRuzQeg=)
                          2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=)
                          3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Jun 29 05:30:29 2025 GMT
            Not After : Jul  6 05:30:29 2025 GMT
        Subject: CN=6860cf76-f6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e7:bb:6b:30:7c:96:a7:ee:80:6f:59:93:46:
                    15:a1:70:ba:e7:99:b5:5a:05:5b:f7:50:38:22:22:
                    d8:31:2f:92:7f:3a:6e:5c:e8:6a:ee:f0:fe:08:38:
                    a3:c5:31:1f:f1:22:93:24:26:d6:e1:ee:90:f6:40:
                    9b:a3:6d:9d:6f:77:31:1b:70:6b:ac:b2:5a:4e:fc:
                    2c:53:7f:4c:1e:6a:8b:1c:54:25:29:f3:97:a4:41:
                    42:bc:ae:ac:2b:ad:70:52:23:dd:71:78:4d:97:eb:
                    eb:f9:e7:ff:7c:b6:67:02:62:bc:87:6f:33:7c:15:
                    ba:18:3c:90:24:19:f4:a0:e8:78:8a:06:fd:f3:86:
                    61:66:d1:ed:2a:2f:74:12:73:5f:d0:d4:1d:57:b8:
                    aa:34:5f:f3:4a:41:4b:08:d2:fe:9f:6d:3a:18:25:
                    c7:9a:55:22:32:3c:a9:78:f6:61:a3:e7:a7:34:8b:
                    6f:c0:bb:0c:2d:cd:dd:14:85:1f:a4:1f:51:83:cd:
                    46:69:f6:52:ed:99:7b:d8:37:f7:b7:d1:11:ad:d5:
                    6e:fc:6a:0b:ae:9d:33:2b:b6:9d:fe:4d:b3:fc:4e:
                    92:0a:83:d5:39:f2:87:55:ed:f7:c7:d9:10:7b:f8:
                    68:7a:1c:ca:da:0c:f2:b0:11:ee:d7:05:c3:c3:c3:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AD:21:3D:B3:37:9C:44:1E:A2:59:A5:C7:D3:9C:A1:B0:7B:85:E3
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:82:38:62:60:b7:6b:1d:70:95:32:55:cd:86:41:9c:af:
         d8:e4:a0:7d:b4:10:5c:cd:63:ab:51:43:c4:ac:b4:07:78:e9:
         0e:f2:8f:36:e8:4d:02:98:00:7d:14:c7:d3:ea:46:a5:2f:fc:
         2e:5f:e4:0f:66:6e:65:d4:e1:0e:2f:8d:67:e7:39:30:f9:57:
         f4:06:86:e3:c2:44:f2:43:4b:1b:6c:54:eb:b9:7d:bd:a9:b4:
         1b:2b:3d:ed:36:16:e3:8f:a4:ce:9d:3f:5a:09:c1:41:c9:f6:
         f2:c6:fd:e0:80:64:d0:e7:94:cd:85:ca:ec:da:23:93:1f:dc:
         dc:f1:00:1c:c8:54:d3:4c:82:46:09:f3:52:73:17:c0:39:3a:
         8a:e7:d7:65:b7:b2:c0:21:83:48:bc:e8:cf:dd:7f:3c:db:4b:
         58:88:5f:b5:0a:d6:04:75:30:39:93:e5:5b:78:23:72:8d:30:
         3a:56:cb:2b:cb:69:d7:d9:1f:f1:b0:68:44:d1:8c:b6:c0:98:
         89:d6:28:86:59:4a:46:f1:6e:9a:e1:53:3f:c3:f8:98:9c:5f:
         d9:ba:f3:de:eb:9a:5b:84:cc:5e:64:fc:e9:b7:b9:06:4e:2b:
         7f:65:6d:70:bc:b6:00:13:e3:4e:b3:d5:95:62:9c:7e:28:01:
         c6:d9:5c:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF
RTc5NzVCMEIwHhcNMjUwNjI5MDUzMDI5WhcNMjUwNzA2MDUzMDI5WjAYMRYwFAYD
VQQDEw02ODYwY2Y3Ni1mNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9ee7azB8lqfugG9Zk0YVoXC655m1WgVb91A4IiLYMS+SfzpuXOhq7vD+CDij
xTEf8SKTJCbW4e6Q9kCbo22db3cxG3BrrLJaTvwsU39MHmqLHFQlKfOXpEFCvK6s
K61wUiPdcXhNl+vr+ef/fLZnAmK8h28zfBW6GDyQJBn0oOh4igb984ZhZtHtKi90
EnNf0NQdV7iqNF/zSkFLCNL+n206GCXHmlUiMjypePZho+enNItvwLsMLc3dFIUf
pB9Rg81GafZS7Zl72Df3t9ERrdVu/GoLrp0zK7ad/k2z/E6SCoPVOfKHVe33x9kQ
e/hoehzK2gzysBHu1wXDw8POzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDatIT2z
N5xEHqJZpcfTnKGwe4XjMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC
RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN
dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAodII4YmC3ax1wlTJVzYZBnK/Y5KB9tBBczWOrUUPErLQHeOkO8o82
6E0CmAB9FMfT6kalL/wuX+QPZm5l1OEOL41n5zkw+Vf0BobjwkTyQ0sbbFTruX29
qbQbKz3tNhbjj6TOnT9aCcFByfbyxv3ggGTQ55TNhcrs2iOTH9zc8QAcyFTTTIJG
CfNScxfAOTqK59dlt7LAIYNIvOjP3X8820tYiF+1CtYEdTA5k+VbeCNyjTA6Vssr
y2nX2R/xsGhE0Yy2wJiJ1iiGWUpG8W6a4VM/w/iYnF/ZuvPe65pbhMxeZPzpt7kG
Tit/ZW1wvLYAE+NOs9WVYpx+KAHG2Vyn
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:50 2025 by rpki-client