Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File:                     AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier:          +JB7ekVSRgeCXPxXyni9Mz18S+0m4i1gPxlAz2nIz38=
Subject key identifier:   EB:E3:92:E1:F6:5F:07:67:E1:2E:6A:C8:55:25:B7:46:E8:5D:D9:2A
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer:       /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial:       0B7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number:          0B73
Signing time:             Fri 22 Aug 2025 19:10:47 +0000
Manifest this update:     Fri 22 Aug 2025 19:10:47 +0000
Manifest next update:     Fri 29 Aug 2025 19:10:47 +0000
Files and hashes:         1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: BBbrJmJ/K/B3BPN8GJs0Mqh/EJxpqQM1aoXaO1xBI9s=)
                          2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
                          rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
        Validity
            Not Before: Aug 22 19:10:47 2025 GMT
            Not After : Aug 29 19:10:47 2025 GMT
        Subject: CN=68a8c0b7-2354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:3c:01:75:96:0e:49:40:54:01:bf:a6:9c:
                    35:2d:f8:29:80:f9:d8:78:3a:9f:34:09:65:06:d2:
                    30:cc:7e:1d:69:9b:8f:6e:87:f9:f9:d5:31:6c:f3:
                    c2:f0:bf:11:be:5e:96:85:fd:5b:c8:23:25:ba:d6:
                    8c:2e:75:52:db:88:c7:08:1d:49:79:42:59:0e:4c:
                    7a:d2:dd:65:03:bd:97:79:6e:f3:3b:8d:04:cc:24:
                    2b:bb:a4:0b:66:46:cf:5f:4f:24:d4:13:2f:8a:6b:
                    94:7f:16:ea:a6:a3:d2:2b:23:d5:16:30:b9:3c:71:
                    e0:e2:73:e5:1a:84:63:4b:34:b9:78:8e:d3:d0:6c:
                    85:7e:0b:f3:82:50:f4:3a:b9:02:68:6c:ae:b9:24:
                    f0:65:4c:7b:30:98:12:7d:47:cd:3c:2c:37:22:65:
                    a1:62:dd:fc:85:e0:87:b6:cf:ae:90:b6:80:64:51:
                    71:4c:09:9c:00:71:8b:5a:e4:ba:7e:ad:a7:46:bb:
                    40:5e:fe:57:fd:27:0a:b5:37:36:14:19:ad:04:ea:
                    97:3b:45:e7:83:52:fd:de:de:61:36:0e:d8:ea:97:
                    f1:51:30:68:6e:05:2e:2c:37:ce:71:fd:fc:3c:38:
                    23:8a:e6:6a:ed:c7:76:50:33:9e:be:89:63:02:07:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E3:92:E1:F6:5F:07:67:E1:2E:6A:C8:55:25:B7:46:E8:5D:D9:2A
            X509v3 Authority Key Identifier:
                keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:00:1c:16:89:dd:42:33:80:10:6e:49:65:f2:0a:49:0b:bc:
         62:71:55:5a:e5:62:2e:c0:12:b5:ca:48:45:c1:7e:09:c8:50:
         77:43:f6:95:fc:75:2a:53:41:a5:c2:c7:de:e2:82:e6:a4:a4:
         fa:16:de:ef:3d:67:e5:2a:99:f9:19:20:28:b3:a8:b9:c3:91:
         5e:f6:83:36:c4:61:bb:87:eb:b2:49:8b:7e:cd:ec:71:80:b6:
         bb:10:bf:38:f0:57:51:bc:56:91:5a:2c:af:ae:1e:13:ae:44:
         79:96:12:4e:6b:d7:da:ca:67:72:ae:bc:f2:29:77:c6:2d:3a:
         00:6a:4b:94:68:00:d6:94:e8:94:57:b5:10:c6:b2:f6:99:ca:
         e5:52:9b:f4:36:6b:f8:59:d1:cc:03:cc:cf:27:63:93:79:86:
         25:60:a5:43:2d:43:ae:dd:35:da:85:03:bd:75:8c:b0:15:58:
         a7:88:6a:57:15:92:19:2e:97:95:5e:e9:38:61:26:3e:2c:ae:
         6a:80:24:c1:d7:f1:0b:b4:a0:41:4a:e6:56:5c:2b:51:bb:73:
         cb:a0:93:a0:d4:01:04:99:26:32:9c:0c:23:9d:41:e3:96:76:
         92:f7:4e:52:0a:43:62:8b:fd:b7:fc:0f:e3:89:55:fc:aa:98:
         dd:e2:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:25 2025 by rpki-client