Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          3F6ec9fmfNoVS5AkS80MG+opq/0KUX4X9YWVZwLlm7U=
Subject key identifier:   31:38:2A:B5:5D:CD:93:8D:77:2A:82:E6:8A:97:BE:9B:6A:89:3A:24
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       03D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          03CC
Signing time:             Sat 23 Aug 2025 00:52:42 +0000
Manifest this update:     Sat 23 Aug 2025 00:52:41 +0000
Manifest next update:     Sat 30 Aug 2025 00:52:41 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: tCoJGKkPz97W7+1s8w+YD80r0AB6Jtfn86aDpEnMeMY=)
                          2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: BrxJSBI7Q6Tw0excD7qGChxBI2yuS7vr/0+QLL4MRIg=)
                          3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0=)
                          4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY=)
                          5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: qYKHA79o/QNNLBRngvTLprJN4A1dHBhKA8ix5QbqNOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
                          rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
        Validity
            Not Before: Aug 23 00:52:41 2025 GMT
            Not After : Aug 30 00:52:41 2025 GMT
        Subject: CN=68a910da-4748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:79:39:02:30:9a:f6:e8:42:c3:ef:1f:b3:
                    5e:d6:75:5b:bc:fc:3d:ae:c5:dd:ab:34:b5:9d:d7:
                    1e:42:c5:01:89:f1:39:c3:48:11:38:a1:7f:0f:3f:
                    00:75:06:e2:29:7b:68:26:9e:db:dc:21:d1:7a:b9:
                    53:88:9f:11:08:aa:5a:b0:b5:91:ab:16:8e:06:01:
                    ab:ee:fc:3e:8d:33:0f:72:e2:af:44:83:0e:17:9f:
                    03:0f:f4:85:1d:0e:db:b4:5d:ab:8d:41:7d:a9:03:
                    01:6c:21:df:b1:31:ad:29:2b:1a:f4:23:62:db:f9:
                    42:0e:e5:e9:5d:28:c7:b7:45:6e:55:8c:77:01:28:
                    a5:1f:ab:72:24:51:88:81:31:3d:30:ff:fb:f1:ca:
                    c9:3e:5a:78:0d:7e:e8:04:cf:c3:93:94:a0:ca:e5:
                    54:c6:c6:21:2d:e1:1b:e5:7a:8b:2b:95:58:94:ec:
                    15:90:35:7a:1c:48:cf:b2:61:42:f1:35:09:76:fa:
                    15:a1:1a:df:01:8d:a7:94:cf:d4:25:d3:4b:04:36:
                    0b:d9:38:25:2c:35:69:92:cb:e8:c1:c0:c5:d7:f7:
                    b8:a8:cc:58:84:9d:1b:70:e0:ce:fa:e8:93:55:47:
                    64:1c:be:28:63:08:3e:52:58:5c:0b:b3:c3:30:b3:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:2A:B5:5D:CD:93:8D:77:2A:82:E6:8A:97:BE:9B:6A:89:3A:24
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:be:99:78:15:bd:31:aa:80:76:db:fc:23:5b:8e:58:6c:
         b2:89:86:d8:68:b5:06:36:36:0e:07:2e:b3:28:66:5f:58:91:
         e3:bf:7c:39:47:19:93:8e:de:e9:41:16:33:06:5a:36:08:8e:
         b6:2a:07:12:ae:66:5c:83:eb:90:aa:89:51:93:ab:22:4a:ad:
         4e:0c:5b:b5:86:52:de:82:43:71:7c:83:32:7a:6a:06:49:6d:
         fa:6b:07:af:77:1a:84:23:fa:10:a3:4e:06:8f:19:aa:c4:e2:
         cc:3b:71:01:4c:0e:57:0d:c3:da:0a:9d:c1:40:f5:62:02:a0:
         8f:10:db:ea:2f:0d:a2:c9:2a:b6:d6:b9:93:3f:6f:b3:fd:b5:
         ee:fa:49:b1:12:04:f7:2c:bc:0a:1f:50:81:b3:65:fe:82:c9:
         b9:16:21:ad:ce:63:49:99:8c:73:0c:74:26:cd:78:e5:25:0e:
         91:74:03:b9:3b:c9:29:79:ac:9e:26:68:91:3a:d1:8c:90:5a:
         97:ac:ce:1c:1d:7a:ea:75:5a:45:46:8b:b6:6e:8e:0b:13:e2:
         e9:7d:38:4a:8e:a4:f4:d2:72:c6:2a:1a:c6:2d:4e:b2:d3:2d:
         d5:ed:45:bf:fe:2b:a4:ba:d0:8b:29:78:75:6b:3d:97:07:65:
         cd:2f:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:19 2025 by rpki-client