Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          ynqYLJXE3IkPwhovYGX5tpRp5ihPNMlwglCa8PUMMQ0=
Subject key identifier:   6D:E5:53:04:00:45:1F:BD:5C:DC:23:84:EC:51:10:40:04:31:8F:D8
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          9B
Signing time:             Thu 03 Jul 2025 06:36:59 +0000
Manifest this update:     Thu 03 Jul 2025 06:36:59 +0000
Manifest next update:     Thu 10 Jul 2025 06:36:59 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: OXkl+Txh531jSFwwDS3I6wlPum6n0MXH3HQBCqbnnhw=)
                          2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=)
                          3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Jul  3 06:36:59 2025 GMT
            Not After : Jul 10 06:36:59 2025 GMT
        Subject: CN=6866250b-f7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:dd:80:e1:3d:55:3e:c8:75:94:67:2a:b7:
                    2c:be:56:ca:a0:50:11:7f:4c:89:8c:7b:ae:94:36:
                    4b:ed:d9:94:2e:40:90:4b:18:43:b1:70:89:aa:57:
                    7e:4b:c9:2b:a6:70:13:67:37:fa:f6:b6:7c:d3:6a:
                    03:8d:09:47:b1:7c:d1:1c:fd:76:f5:73:13:bd:b2:
                    6b:dd:1e:c0:37:33:30:79:ce:1e:57:c7:7d:62:4e:
                    5b:62:3c:4b:18:aa:2e:8e:8e:44:8f:46:9c:86:5e:
                    27:b4:e7:dc:d0:91:7f:51:87:e4:02:99:77:08:26:
                    fb:11:0a:c8:33:1c:f2:a0:68:f4:cd:2e:e8:8b:76:
                    fd:e9:44:c4:88:bd:92:47:3f:fc:47:96:30:2a:c9:
                    3b:10:72:48:9c:5f:5c:3c:f8:f9:78:9f:ec:fd:f0:
                    0a:0a:22:a5:f7:03:d3:16:13:ce:95:16:cf:34:2c:
                    74:f8:d5:4d:6c:56:ea:08:69:77:76:b6:f5:34:51:
                    56:25:f1:0f:3c:5d:aa:ae:29:ec:ac:9d:a1:e1:3a:
                    1f:6e:67:36:a3:e9:2c:a4:19:9c:84:3f:62:af:3c:
                    96:1d:81:39:91:42:5a:f9:1b:73:8c:47:c9:1c:5b:
                    b5:67:05:7c:8d:b8:92:af:6f:bf:d3:66:43:ac:a1:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:53:04:00:45:1F:BD:5C:DC:23:84:EC:51:10:40:04:31:8F:D8
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3a:5a:89:05:0d:5e:03:4f:09:c9:59:2a:8f:ad:9a:fc:07:
         1b:f4:8f:f8:77:2e:d5:c3:6a:2b:d9:e9:fd:a1:c8:1a:fc:c9:
         8e:67:ae:4f:30:9b:dc:0c:83:de:d6:72:b5:3a:62:50:51:06:
         5f:af:a7:c3:d7:f3:cf:52:8b:38:bc:60:88:9f:d2:24:83:2b:
         4c:1f:8c:95:55:ee:cb:7f:b6:9e:ce:e0:68:d1:18:72:45:c0:
         67:70:45:33:88:f1:7c:1a:36:cb:14:a2:4b:6d:dd:7b:26:4a:
         be:5f:24:4b:e3:4a:b7:59:4d:a7:99:41:76:ac:8c:08:49:1d:
         d2:5c:d3:79:b6:24:f2:8b:17:02:14:e1:46:02:30:79:50:95:
         c5:86:95:bf:38:fe:67:25:66:0a:c8:a6:e1:73:65:83:0e:cb:
         50:d9:39:04:d8:01:1e:dd:10:8c:ba:79:e6:d0:0c:63:e9:9b:
         50:6b:7d:03:8e:cb:6e:bd:ee:fc:6b:76:0b:43:cb:c4:30:45:
         91:8d:a1:67:ba:56:a3:a0:cd:af:95:eb:00:d3:5f:30:e4:78:
         21:8a:67:d1:6a:dd:f3:95:e9:fd:2e:16:8e:b7:82:56:d8:52:
         c2:23:0b:eb:e9:17:ed:70:f8:8b:69:02:cd:a5:ee:00:14:50:
         80:c4:5b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:29:00 2025 by rpki-client