Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
File:                     -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json)
Hash identifier:          /2NhvKZnpiks7B7UEOJ9NSD4RET6Mm5natyXdNXtWYY=
Subject key identifier:   EC:60:96:3C:57:39:69:AA:60:8D:DF:A2:E3:9B:E1:D2:28:62:AE:0B
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Certificate issuer:       /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
Manifest number:          0108
Signing time:             Thu 03 Jul 2025 05:13:36 +0000
Manifest this update:     Thu 03 Jul 2025 05:13:36 +0000
Manifest next update:     Thu 10 Jul 2025 05:13:36 +0000
Files and hashes:         1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: wE/aM25+8ctlccVUeYI5nVnK7ZhynCOjSS4uSshzdxk=)
                          2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
                          rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
        Validity
            Not Before: Jul  3 05:13:36 2025 GMT
            Not After : Jul 10 05:13:36 2025 GMT
        Subject: CN=68661180-10cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:24:ce:bd:1f:70:0e:51:4a:26:91:38:c2:
                    7b:9d:75:4a:6b:89:93:d8:9b:07:47:14:34:e4:78:
                    84:0c:d1:a6:f1:52:1c:35:ff:d3:21:49:87:bd:be:
                    29:a4:17:a9:4e:59:6a:12:75:43:07:27:27:76:1e:
                    40:9d:26:a7:a2:87:ea:2c:dc:d8:49:32:ec:55:8d:
                    2f:f1:cc:29:34:68:27:d1:e5:df:ed:e9:46:b2:66:
                    57:51:26:a5:31:9a:3e:5a:6a:f1:99:7b:ae:58:5d:
                    b9:91:2e:ef:5a:e4:94:cf:52:00:97:64:cc:10:50:
                    0e:7c:f1:80:7c:f9:ac:a5:47:28:ff:cd:9f:0c:c2:
                    80:ed:75:08:48:24:4c:e5:fb:0f:e8:d0:28:fa:9e:
                    26:05:54:14:de:65:b2:2a:eb:bf:b8:54:3d:ff:ec:
                    69:f9:a8:69:1b:63:31:b3:96:cc:3d:50:bf:dd:89:
                    77:87:de:f9:85:f2:83:7d:4e:70:bc:09:65:6f:77:
                    39:2b:9d:49:85:e5:76:c2:ee:b8:67:4f:3f:d4:da:
                    a0:97:f3:e1:a8:d8:41:d0:ac:ba:c0:0d:16:2d:30:
                    a7:dd:4b:a4:7a:7f:85:74:d6:89:75:c6:7a:c0:a1:
                    84:85:33:4b:e6:0a:61:b9:3d:e9:9a:c8:37:49:30:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:60:96:3C:57:39:69:AA:60:8D:DF:A2:E3:9B:E1:D2:28:62:AE:0B
            X509v3 Authority Key Identifier:
                keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:44:35:31:4e:31:28:29:64:9e:57:5d:62:00:75:1d:48:
         6c:cc:37:e3:9d:ed:ff:e3:9d:4c:ac:3e:aa:f9:5e:af:c7:82:
         7d:55:74:da:fe:82:aa:ab:2f:0e:ec:0d:d5:fd:74:4d:b9:dd:
         15:f2:75:bb:e5:0b:da:95:de:58:20:5b:c9:37:af:3e:67:1a:
         48:10:86:98:8f:38:cd:7b:11:ca:98:54:c7:e4:1b:92:5e:81:
         c2:fe:1f:96:28:18:c5:fa:f0:a5:f3:de:34:28:6f:67:ea:69:
         5a:d3:07:ed:65:51:63:bf:16:0b:f1:d0:ff:51:2f:17:e8:14:
         f8:76:bd:78:c9:fb:25:2c:39:99:87:7f:2d:bf:c6:0e:37:8b:
         58:ff:10:95:71:1d:20:a8:b9:44:ef:e3:dc:09:42:2b:ca:de:
         08:8f:95:b4:99:6c:17:9c:e1:5b:72:b4:cb:39:fa:d7:60:e1:
         48:94:10:b5:95:35:77:f1:c9:81:fe:c0:35:fb:49:88:dd:46:
         77:8f:cb:8c:83:9e:22:96:e2:2d:72:86:66:6b:c5:a9:45:3d:
         c8:d8:15:dc:40:80:61:96:94:5f:db:f5:7b:e4:33:0f:19:52:
         84:14:16:19:a7:62:97:12:37:49:4c:9a:ab:1a:ef:e5:ea:0e:
         69:06:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:17:09 2025 by rpki-client