Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          zWOsrl4l2czw3y4MEjWa2kU4A44h6UVqvm0CDLKegfk=
Subject key identifier:   43:65:94:C3:6B:FD:31:5B:C8:74:59:46:E2:D1:50:0F:56:D8:5A:DF
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       0591
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          058A
Signing time:             Fri 22 Aug 2025 22:40:59 +0000
Manifest this update:     Fri 22 Aug 2025 22:40:58 +0000
Manifest next update:     Fri 29 Aug 2025 22:40:58 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: X5mtZgCczhcFTt3/ieO78dsE7VCqo8oo4S5lgXIXoc0=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: Aug 22 22:40:58 2025 GMT
            Not After : Aug 29 22:40:58 2025 GMT
        Subject: CN=68a8f1fa-5152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:55:7d:42:49:92:8f:45:23:4b:99:e2:e7:
                    e3:4e:99:2f:7f:df:62:2c:c9:e0:33:54:c1:de:4f:
                    1d:e6:61:b7:0f:b6:f4:a2:93:6f:32:56:d3:8d:0b:
                    5a:5a:01:c4:62:84:d4:be:bf:d4:36:f9:8b:90:09:
                    19:b7:6a:ae:78:b9:fd:18:77:8b:dd:93:50:3d:ad:
                    03:f1:4d:cd:7c:bb:a0:d3:3e:eb:d4:6c:1b:83:c3:
                    84:5d:f3:42:be:b2:9a:20:1f:53:c8:44:dd:88:53:
                    7c:5a:9f:ae:cf:6f:e1:80:24:29:ae:8d:1f:96:b3:
                    d5:4f:80:be:c0:25:f5:b4:5d:1a:2a:13:27:3b:c2:
                    f0:74:26:e0:cd:a2:8f:b0:b1:13:2d:fc:cb:22:2f:
                    70:18:db:a2:56:f5:fc:dc:cd:fc:86:15:45:5d:22:
                    76:f0:57:6f:4a:a3:0e:01:14:23:e5:09:36:05:f5:
                    af:a5:4d:9f:40:39:20:2a:fa:92:d3:44:75:47:c8:
                    3c:24:f3:fb:c9:32:d5:e0:7f:34:80:6f:41:17:3c:
                    dc:94:2d:d2:53:86:50:16:50:41:1d:2a:9f:11:cb:
                    00:86:11:3a:fa:44:38:d9:8d:fb:61:0f:b6:6b:a8:
                    2a:e5:3b:a7:21:64:a1:e4:54:38:af:0d:c9:14:4c:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:94:C3:6B:FD:31:5B:C8:74:59:46:E2:D1:50:0F:56:D8:5A:DF
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:4e:40:08:79:15:17:99:9d:af:a7:bc:72:6c:ac:41:8d:
         1e:2b:e1:e9:79:15:5b:ae:83:4d:2f:88:3d:60:fc:64:b7:e4:
         63:7f:20:07:3e:f0:5a:2a:a4:7f:9a:32:1b:ff:9c:e5:a0:3a:
         01:d0:5e:a3:5c:ed:e5:e9:c1:83:e3:60:bd:49:63:f4:ef:cc:
         72:e1:82:8d:e4:81:a7:fd:9e:f1:c1:35:ae:dd:dd:bb:68:37:
         a2:05:65:08:31:cb:cd:52:0f:ae:f0:38:c8:38:b0:f3:f0:e6:
         66:44:5f:c0:73:67:8c:3c:f8:5a:bf:ba:e9:5c:54:b9:9b:7c:
         d9:a4:8f:24:31:a3:ec:9c:52:a3:9e:f9:24:45:11:ed:31:d0:
         32:46:24:05:df:84:b2:e0:f8:82:53:db:3c:e3:62:f9:0c:cd:
         da:41:45:f0:a4:4a:d3:c8:c8:88:a8:61:32:5e:72:e6:18:28:
         4d:52:11:d0:d0:39:27:2c:a2:ac:c0:bc:f3:5f:cd:87:99:44:
         4b:06:b0:fd:ee:7b:56:65:e5:76:e8:c4:ae:23:c4:86:e4:d0:
         da:c9:d4:98:be:df:fc:14:47:6e:52:cb:76:ed:12:da:b4:e2:
         6a:26:60:d1:86:81:d6:5f:4f:9b:4e:92:91:ae:62:9d:5c:e0:
         8b:7a:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:13 2025 by rpki-client