Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
File:                     j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json)
Hash identifier:          PkdB1d8JKP90OzQ3JSZ6cqp/Y6G5+9o/wXS/oPULxGs=
Subject key identifier:   6F:90:04:3F:B8:7B:80:F7:65:B6:DA:4A:98:EE:8A:E5:E7:B6:48:00
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
Manifest number:          07CE
Signing time:             Fri 22 Aug 2025 21:18:22 +0000
Manifest this update:     Fri 22 Aug 2025 21:18:22 +0000
Manifest next update:     Fri 29 Aug 2025 21:18:22 +0000
Files and hashes:         1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: 7cMIwtcBdkVUa57oDgosQkiYnnu0reHm2fbo00YhrHI=)
                          2: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: kz68xtzJ9y0s90fbiNDjg+Qqa/ttWC3I+nb0qBsOygg=)
                          3: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: cnF49uFGlBMcP7cAW0jvKCj1KnT9PcQRWPzmGKf6pzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Aug 22 21:18:22 2025 GMT
            Not After : Aug 29 21:18:22 2025 GMT
        Subject: CN=68a8de9e-5b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:4e:d8:3a:5a:f1:b2:94:19:54:3e:6b:9c:
                    ae:5a:af:76:b2:32:c3:a5:a5:82:18:8a:76:6e:30:
                    2d:7e:2b:f4:38:6a:c3:2c:2c:d8:ed:3e:0d:c8:87:
                    b5:01:35:17:9e:0d:f7:35:69:86:15:cb:51:19:11:
                    e2:00:7b:dc:9b:60:2f:bc:22:25:ff:f3:ed:75:f8:
                    ab:4c:50:9a:eb:dc:21:4a:7c:09:cc:41:20:62:65:
                    11:b0:5e:da:84:56:c7:5c:5d:32:47:64:6c:43:c5:
                    a7:4c:9a:87:32:15:e8:00:83:cc:b5:ca:fa:f1:9c:
                    ab:fd:d6:4a:c2:47:cf:99:3d:8e:37:5c:83:b0:69:
                    c5:18:67:eb:ba:54:ae:a1:b3:76:ca:87:bf:8d:ca:
                    77:7c:25:88:68:0a:fa:ba:82:17:96:e2:e7:59:e0:
                    4a:b7:cd:37:5c:a7:38:c2:89:fc:51:48:cd:24:12:
                    72:7a:a5:81:6f:7e:73:a7:2b:21:89:87:49:2f:03:
                    31:bc:fa:68:44:ba:28:19:84:88:38:dd:7e:1f:89:
                    da:41:f8:7a:c9:64:d8:27:65:e5:d3:a4:6d:93:a9:
                    ab:8f:c8:1f:95:57:58:64:09:e0:1b:28:b9:8e:5a:
                    a2:7e:0b:e1:6d:d9:11:71:35:64:e5:a4:9d:e4:0c:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:90:04:3F:B8:7B:80:F7:65:B6:DA:4A:98:EE:8A:E5:E7:B6:48:00
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:be:f6:d5:ea:aa:7b:8a:9c:71:52:bd:44:08:55:77:9f:ef:
         bb:3f:ed:4d:4f:c4:07:00:91:1e:16:93:d2:a1:02:f7:ab:64:
         ba:91:69:64:e7:e5:5a:93:c6:44:56:4f:34:0b:c3:21:d4:73:
         ec:c2:58:85:d4:7f:f6:e1:ff:f6:c9:bd:f6:b1:12:fd:7c:d4:
         56:f1:75:7b:f1:1b:60:d3:f7:1d:d7:28:9a:3e:07:9f:bd:ce:
         cd:a5:af:2c:1b:f8:5f:38:1a:6e:e1:e2:f3:47:37:80:f2:df:
         1e:91:ee:18:26:40:bb:9e:00:02:a5:44:20:f4:03:4c:93:b2:
         c9:8a:ab:1f:d1:82:3d:d8:fa:2f:09:c8:78:68:47:3b:32:ad:
         c6:a9:fd:23:9e:27:ee:7a:bd:05:96:6d:98:da:a8:06:07:b1:
         bd:62:52:9e:b3:6b:18:78:ac:62:83:ac:88:e0:7e:d4:89:14:
         1b:e9:bc:ac:a8:83:fd:94:e1:42:68:fe:cf:40:1a:1d:7c:89:
         b2:ba:55:ae:01:2c:c0:6b:01:9f:9b:45:a0:5c:59:a7:b3:b2:
         65:37:2c:f0:0b:96:36:ae:17:ab:37:7a:99:4b:1c:b6:f3:be:
         42:34:a2:79:f4:4b:cb:e6:6b:47:a0:a9:a2:88:06:89:e5:dc:
         d1:6b:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:05 2025 by rpki-client