Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
File:                     GHJyN_a30WUlK_m9s4a24ergVXQ.mft (raw, json)
Hash identifier:          dpYnwNglgC7C1OclDb2TAP8JBLUqImL7b8FYcje0SP4=
Subject key identifier:   2C:99:3C:E0:2B:2C:2D:A2:9E:B4:DB:A2:A7:90:43:EF:4B:DD:A4:2E
Authority key identifier: 18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74
Certificate issuer:       /CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
Manifest number:          030B
Signing time:             Sat 23 Aug 2025 01:27:15 +0000
Manifest this update:     Sat 23 Aug 2025 01:27:15 +0000
Manifest next update:     Sat 30 Aug 2025 01:27:15 +0000
Files and hashes:         1: GHJyN_a30WUlK_m9s4a24ergVXQ.crl (hash: t+Xnd+F4cin7hQ2EyD4PUwuylT/RJqrlnOMl+O6UzIs=)
                          2: FCA92EAAE4AD11EC839CED77C4F9AE02.roa (hash: wW4HCqhcoyo/dCvusJDIhbj+A+f9Rh4hUlMCJe2c3dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl
                          rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917418A, serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
        Validity
            Not Before: Aug 23 01:27:15 2025 GMT
            Not After : Aug 30 01:27:15 2025 GMT
        Subject: CN=68a918f3-23dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:e8:95:fd:72:e9:28:d9:ee:20:b4:09:3f:
                    f3:c4:36:42:67:0c:4f:b7:5a:7f:d7:21:26:88:d6:
                    9f:18:66:b0:7d:6a:3e:a0:c3:9b:50:c6:b2:68:c2:
                    02:3f:54:c3:99:17:15:00:f2:24:0c:59:ae:94:bb:
                    ac:dd:4d:f9:84:43:08:4c:ba:a1:6d:34:09:2c:0c:
                    67:ae:e1:26:a2:08:b2:c4:8f:61:7f:bd:de:4f:8d:
                    05:e2:08:e1:2e:dd:78:10:bc:b5:69:92:64:e0:a1:
                    1a:fa:3e:db:53:02:2f:04:90:66:44:d2:ce:e5:1a:
                    0a:bd:b0:93:41:13:e2:f7:31:fa:09:3a:91:bb:8f:
                    3b:b6:24:56:96:ba:52:70:ad:f1:2a:8b:2d:9c:44:
                    fa:41:a6:f1:bc:4f:d4:3b:da:b4:7d:b2:7b:70:4d:
                    c5:63:23:58:b3:d1:aa:7e:b5:cf:1a:69:69:25:ae:
                    65:fc:23:7f:d9:2e:8c:0f:21:49:f2:40:c2:2c:7a:
                    ce:79:de:f9:b4:f4:a6:dc:af:76:ae:28:79:0c:8a:
                    e0:8b:75:bf:91:37:d0:77:67:48:ec:69:ea:9a:1f:
                    eb:3d:5d:54:1c:3c:3b:8c:0d:10:37:de:72:3b:30:
                    21:d4:ff:2f:35:3b:06:94:1e:94:a3:a3:d3:ec:c0:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:3C:E0:2B:2C:2D:A2:9E:B4:DB:A2:A7:90:43:EF:4B:DD:A4:2E
            X509v3 Authority Key Identifier:
                keyid:18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:25:eb:9b:37:18:0a:47:0f:6a:2c:af:80:5d:d7:b8:62:41:
         cb:cc:d0:9f:f9:b3:19:39:a0:f7:f9:43:ff:bb:6e:f2:18:35:
         84:39:18:1d:8b:bc:d6:58:ff:f9:7f:e5:b3:40:13:57:4c:cf:
         a0:e4:3f:ed:c2:d9:7f:ff:28:9b:9b:8a:96:8b:ad:17:20:46:
         12:40:f6:05:7a:3a:db:49:5c:a1:70:00:9d:f3:de:fb:90:c8:
         76:45:b5:d7:c0:ad:b9:1a:20:b6:85:d1:f0:ea:61:6a:d1:d7:
         fd:df:67:1f:dd:ec:9b:b1:44:5b:81:ce:25:b6:68:af:a3:4f:
         91:f9:78:fc:3c:40:55:a6:82:a9:b9:cc:2f:03:fd:af:cc:8f:
         d3:92:35:19:bb:d8:53:22:cf:d4:9f:ed:97:76:5b:c5:af:af:
         da:39:06:0b:8d:2f:b5:34:d7:ed:11:cb:ac:40:15:63:78:d5:
         77:33:b1:df:af:67:da:3d:17:b5:78:aa:17:01:5c:f2:88:49:
         10:c0:7e:44:37:67:d5:a0:e2:cc:47:58:4a:87:ae:6d:9d:82:
         de:1f:db:30:26:a6:f1:97:1e:81:99:ba:7e:73:11:24:fe:00:
         69:14:4a:cc:41:60:50:b2:9c:63:a4:11:76:fc:b4:1b:c0:dd:
         a7:cf:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:01:43 2025 by rpki-client