Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File:                     cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier:          fDRjHuIGjRQdVlByrzfpaS4F22lKG15RnFGrr0X0tvM=
Subject key identifier:   B3:1C:28:E0:4E:49:1F:28:8D:C7:EA:93:A0:1C:26:6B:49:5B:7E:2C
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer:       /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number:          013D
Signing time:             Sat 23 Aug 2025 04:40:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:40:44 +0000
Manifest next update:     Sat 30 Aug 2025 04:40:44 +0000
Files and hashes:         1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: ofME1Jgn/S2Wxx+xUw4fJMygXg/zfJSVAD1rWedD90o=)
                          2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: 9cLUWM+lWWpZt/EGTjBbXr6teTbVNtgXpN+WMvBwXno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
                          rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
        Validity
            Not Before: Aug 23 04:40:44 2025 GMT
            Not After : Aug 30 04:40:44 2025 GMT
        Subject: CN=68a9464c-f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:cb:2e:0c:c3:47:f6:c3:d5:db:fc:af:a4:
                    d9:6b:57:eb:f3:4c:60:1b:60:5a:89:aa:a7:04:88:
                    9e:74:72:e6:cc:76:24:54:b4:8a:80:e2:83:2e:73:
                    8d:eb:87:2f:48:0a:a9:fe:6c:fa:66:a5:67:39:97:
                    48:42:98:42:25:33:3a:b6:5e:7a:63:cd:d0:c9:23:
                    ce:92:c8:09:97:a7:7f:97:f7:3f:e3:c9:7c:54:ce:
                    29:fa:84:d1:ef:74:28:79:2f:ce:2e:8b:0e:1e:08:
                    e4:9e:4b:94:2c:96:02:2d:8e:13:3b:3e:34:73:2c:
                    c8:6e:36:11:fd:50:43:ac:49:69:22:4e:72:54:16:
                    3e:ba:d0:da:9b:d3:84:eb:5c:ee:3e:34:07:cf:f5:
                    d2:97:e9:07:bb:ef:72:51:83:3e:af:fc:c1:f8:d0:
                    e1:3f:26:6a:cf:9a:c4:eb:4d:49:44:8b:33:bc:be:
                    ac:3f:75:a4:a3:35:81:e7:4d:a2:8d:50:9d:d9:34:
                    24:5a:87:73:89:e0:85:66:e0:cc:f8:cc:79:46:d7:
                    d1:1a:0f:ad:0f:2b:e4:37:c7:19:f3:64:c9:be:03:
                    1c:d9:c1:2a:b9:67:76:8d:42:b0:62:01:ed:bf:ae:
                    2e:3a:fe:f9:3b:fa:05:d8:ce:23:63:02:ef:f7:cd:
                    96:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:28:E0:4E:49:1F:28:8D:C7:EA:93:A0:1C:26:6B:49:5B:7E:2C
            X509v3 Authority Key Identifier:
                keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:9b:a1:1e:6d:09:28:87:a5:ec:7a:ec:e5:5f:22:10:e4:
         22:bd:09:37:ad:f2:7e:65:49:4e:55:5e:07:34:8d:cb:50:27:
         9f:f3:9e:23:cd:c0:1f:5d:0e:95:ae:02:0f:61:14:cc:fe:34:
         9d:ec:96:2d:41:90:42:a7:21:b6:65:49:8d:5d:93:a5:52:2b:
         f7:d6:60:83:b9:e3:53:6c:18:51:4e:70:63:7c:f2:f3:a1:02:
         bf:a7:ef:fa:4a:b9:3c:c0:85:c5:8f:30:50:ec:03:b1:68:3d:
         13:df:f9:12:06:52:e3:82:60:e9:2b:eb:e3:30:f3:76:e1:bf:
         0a:d9:b7:23:87:44:5b:47:65:4a:09:6f:c9:10:dc:b9:9b:a7:
         2f:74:35:56:7e:38:51:67:58:05:fc:15:c2:8c:b5:2e:84:01:
         0e:89:96:28:90:f5:0e:4a:c6:41:5e:38:1b:7b:84:ed:42:2c:
         9c:c8:f9:12:6d:d4:21:8d:fa:56:eb:8a:eb:8d:d8:4a:58:6d:
         5d:8f:a3:2e:b5:a7:a7:d1:a9:6e:7a:16:56:6f:e8:1c:b2:aa:
         52:cd:2e:d8:f0:a4:fd:3a:21:cc:01:cf:1f:92:56:13:23:35:
         87:28:c4:d9:5b:b0:49:b8:87:8a:ea:c7:bd:b5:c5:c4:bf:c4:
         45:a8:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:59:56 2025 by rpki-client