Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          sVnV10TjteYMZjl+UPi4fMVqxdrJxWM0QMB5315Y9q4=
Subject key identifier:   07:A8:DC:F2:36:F5:D6:97:6A:BC:60:00:22:99:05:CF:84:9D:0E:75
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       0772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          076C
Signing time:             Fri 22 Aug 2025 21:43:22 +0000
Manifest this update:     Fri 22 Aug 2025 21:43:21 +0000
Manifest next update:     Fri 29 Aug 2025 21:43:21 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: mtaMipmRKtWfLoCzogba4FRW0AmXW3sE0q96kQpH5vU=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Aug 22 21:43:21 2025 GMT
            Not After : Aug 29 21:43:21 2025 GMT
        Subject: CN=68a8e47a-31eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:1c:8a:72:4d:7d:27:44:b1:36:b9:42:37:
                    d8:19:d1:f7:ed:bc:49:9a:a1:60:62:09:48:81:be:
                    87:46:1d:2d:56:9f:11:b7:1e:4b:a4:37:30:a9:83:
                    da:d5:39:c9:6b:fa:33:04:02:2d:75:fb:ad:7a:e8:
                    df:7c:99:2c:48:59:13:81:9c:66:a1:f4:2e:d2:8b:
                    f9:be:73:43:03:09:1e:f0:6b:5d:f2:fa:6f:81:6f:
                    78:bd:ed:f5:d0:77:64:14:33:8c:ca:8a:76:c3:8f:
                    ff:38:ef:13:43:e0:9c:30:2f:31:c3:d1:e8:e6:3a:
                    d5:36:c1:df:f4:6e:ad:fd:d7:50:53:4a:ca:07:50:
                    43:8d:20:68:61:e0:d8:5c:d6:e6:cc:71:02:68:76:
                    ad:8e:6b:57:b1:d2:78:e1:3c:ae:47:34:f4:dd:f8:
                    10:0e:d2:1b:a2:5a:68:e4:73:3e:0c:55:f3:e8:7a:
                    f8:b3:80:b0:da:81:c8:b0:97:23:8e:0e:42:62:a4:
                    8d:cc:65:41:2e:25:28:66:87:04:67:2a:e9:2b:83:
                    0e:ae:68:d5:ec:3c:d3:71:1e:bf:17:f6:08:cf:ae:
                    82:ef:01:bc:4a:99:bc:2a:af:15:97:df:07:6a:d9:
                    8c:77:71:02:42:d6:b2:c6:92:5f:96:2c:73:c2:cf:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:DC:F2:36:F5:D6:97:6A:BC:60:00:22:99:05:CF:84:9D:0E:75
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:e4:cc:92:ab:82:3e:40:96:35:2c:7b:93:53:5c:52:97:
         41:ea:6e:57:8c:5e:47:d4:2b:5f:77:cb:67:ef:24:b1:37:c7:
         3a:12:78:c4:b7:5e:f0:0d:3a:7c:15:b0:2b:19:48:06:64:2d:
         c7:83:58:15:6b:dd:74:0a:d6:29:99:0d:af:db:7e:d7:1b:d6:
         5d:ae:51:02:4e:a3:cb:b2:c6:6d:15:0f:2e:f0:10:0e:42:ae:
         40:97:df:45:49:0d:9b:d7:ce:1e:d5:84:42:d9:ec:c8:4e:1e:
         f7:3e:19:ea:c2:fa:33:6c:ec:d7:00:3c:92:62:af:c1:c3:22:
         ba:99:ee:9e:60:b2:aa:3f:36:ae:ce:19:b4:84:d4:04:81:ba:
         b2:42:36:77:5a:0e:6d:c2:79:8e:3c:10:f0:be:38:f8:37:05:
         29:27:9d:5f:5a:49:3b:da:c1:95:8d:b1:c0:33:b5:41:ba:4c:
         d5:86:a6:71:8d:8a:13:1d:66:c4:4c:fb:2b:45:32:2a:26:1c:
         f7:66:83:68:3e:37:d8:a1:00:3f:62:fc:cd:85:14:3e:fe:64:
         08:d2:55:90:78:75:e3:64:fc:a4:83:20:8b:69:41:88:a0:79:
         b9:ee:50:74:8b:d9:9c:39:c9:1f:c1:62:aa:58:c7:af:f0:3d:
         3d:22:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:28:56 2025 by rpki-client