Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
File:                     nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json)
Hash identifier:          drdlLmwyY5OCrifc5ALV+Va8eBqna3NPYjb1HS6Oo+w=
Subject key identifier:   FA:15:36:FB:29:56:04:53:FC:D9:60:0D:62:C8:E4:7E:6C:E0:58:3B
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Certificate issuer:       /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial:       0929
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
Manifest number:          0893
Signing time:             Sat 28 Jun 2025 20:40:53 +0000
Manifest this update:     Sat 28 Jun 2025 20:40:52 +0000
Manifest next update:     Sat 05 Jul 2025 20:40:52 +0000
Files and hashes:         1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: 3NX58q/wGf09udP35BJv7DH19e9ole8KarhBkU6IRoE=)
                          2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=)
                          3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
                          rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
        Validity
            Not Before: Jun 28 20:40:52 2025 GMT
            Not After : Jul  5 20:40:52 2025 GMT
        Subject: CN=68605355-bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:a7:f7:49:db:2a:e2:d7:75:40:1b:dd:c8:
                    09:52:80:0e:c9:50:ec:32:d1:97:c5:fc:45:f1:fc:
                    2e:04:55:54:e1:ea:fd:25:2c:b0:8a:19:82:16:81:
                    a0:95:07:81:74:4a:bf:1f:4e:b5:12:f4:82:71:56:
                    e9:19:08:8e:51:78:a6:a9:8a:23:cf:3f:00:8f:71:
                    6d:83:89:df:c4:e1:d8:8d:fd:cf:16:d6:4e:c5:54:
                    3a:40:64:f2:82:6f:86:48:5a:6b:f9:cc:b5:a5:c4:
                    3d:d2:84:46:27:b9:48:d7:4b:30:28:30:8a:4f:d5:
                    6a:f0:0c:82:04:40:55:16:f7:b7:db:06:0a:a6:aa:
                    f1:81:b8:59:1a:16:06:19:9d:dc:64:9a:d7:3e:c5:
                    e2:2f:cf:83:3b:73:bf:1c:22:f9:64:d9:90:24:81:
                    09:5f:04:75:0c:de:73:c2:33:7b:ea:d7:c1:49:3e:
                    d9:9a:91:1b:5b:c7:d0:19:59:ae:a4:87:06:d2:34:
                    21:90:0b:81:af:2e:0a:fe:53:f3:0d:89:dd:ba:9e:
                    d2:53:b0:f1:3d:0b:5e:ff:b7:19:e1:5c:4e:b7:cb:
                    51:34:52:44:a2:0b:e8:fd:d7:3c:a8:4a:4a:19:86:
                    6f:cc:4c:2a:0e:f2:98:fa:4c:83:f0:ce:1f:83:bb:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:36:FB:29:56:04:53:FC:D9:60:0D:62:C8:E4:7E:6C:E0:58:3B
            X509v3 Authority Key Identifier:
                keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:6f:dc:c4:fd:2b:e7:14:4b:8b:71:f7:81:ef:d2:c8:a2:
         ff:c9:ef:65:a6:7e:23:aa:79:15:9b:b8:50:2c:e8:7c:dd:6d:
         78:34:36:32:6d:a0:29:07:61:eb:e3:d9:da:53:67:e0:0e:7a:
         0d:27:66:e1:51:e8:d6:a9:4e:87:08:06:26:99:90:5e:8f:17:
         2c:f2:dd:a0:ab:30:b0:21:c4:7f:91:b3:b8:85:e8:b7:01:e0:
         c1:17:c8:4b:f2:cd:60:9c:73:f6:89:bb:92:c2:cc:f3:cc:5f:
         0b:ea:6a:5b:95:7d:ef:60:7d:d3:07:40:2f:82:f6:65:36:22:
         ad:31:dc:7d:8a:8a:e6:02:9d:26:18:f1:8c:b9:5a:ec:99:e8:
         8d:ea:75:f3:a2:7a:e1:fd:e8:f0:83:83:d1:41:08:f7:dc:c0:
         90:f3:9d:81:3d:9d:82:e6:41:85:9c:d3:ff:d4:0e:4d:27:eb:
         17:f1:35:95:bb:30:d0:3c:14:3e:7d:33:b0:52:1a:53:d6:1a:
         3f:3e:18:83:e4:84:70:80:a0:6e:de:e4:b9:05:dd:08:26:6c:
         79:42:1d:83:2d:9a:fd:70:5f:ba:5c:f1:06:e8:d2:27:6a:15:
         08:5e:b8:bf:f7:d5:5f:1f:b8:fc:fc:4a:2d:3e:3a:8e:0a:86:
         83:75:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:58:54 2025 by rpki-client