Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          YUneu7KLpdC4jcU9ta7zBrJaF0feU1y7C80XuxswNCU=
Subject key identifier:   F9:EC:1E:6B:B3:05:E8:9F:BF:C0:11:53:14:1A:26:92:51:FA:13:6E
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       0416
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          0404
Signing time:             Fri 22 Aug 2025 23:23:11 +0000
Manifest this update:     Fri 22 Aug 2025 23:23:11 +0000
Manifest next update:     Fri 29 Aug 2025 23:23:11 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: ODGGp/x/Z8kt8PIItCMc0vo+t3hxh20bjMJMljBlI78=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Aug 22 23:23:11 2025 GMT
            Not After : Aug 29 23:23:11 2025 GMT
        Subject: CN=68a8fbdf-062d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:e4:33:63:0d:94:e8:cb:92:d7:af:c0:15:
                    8a:65:87:8c:99:9f:98:41:dd:38:d3:6a:07:6a:b0:
                    12:49:7d:4f:0e:ac:8c:6d:a1:7f:eb:72:f2:11:dc:
                    7c:cb:ec:45:08:51:77:0f:be:d5:2e:a6:d4:a0:c1:
                    db:49:2d:2a:3d:96:f3:03:8a:aa:af:26:da:0c:32:
                    78:d4:76:82:51:0d:a1:65:d0:2c:52:21:1e:80:da:
                    57:ff:00:af:8e:66:4d:c0:9e:0b:bd:8d:71:fb:e8:
                    64:d9:d3:d3:d1:27:c3:84:40:71:aa:0d:8c:60:52:
                    e4:e3:28:44:24:46:22:29:ab:15:41:e0:dd:c0:eb:
                    71:d1:d9:ad:8a:28:e4:7c:1c:43:b4:66:df:23:c6:
                    9d:3f:ca:82:1c:9d:46:79:f2:67:02:a6:67:61:da:
                    a5:fc:fc:54:4e:d4:07:ff:55:a2:ec:87:fc:84:97:
                    04:f4:53:f4:ee:8e:9e:1f:9a:08:23:10:31:8d:1c:
                    00:ea:db:f4:9e:44:ce:2b:1f:44:74:d6:f6:c5:5d:
                    5d:da:b2:44:e1:0a:0b:f4:a4:37:97:98:ff:9b:ca:
                    c7:a5:ab:62:32:ec:96:cc:75:2f:22:a6:02:ca:ba:
                    7a:f3:c3:62:6d:6d:cd:45:b7:98:48:a9:3c:77:cd:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EC:1E:6B:B3:05:E8:9F:BF:C0:11:53:14:1A:26:92:51:FA:13:6E
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:a6:8b:9a:6d:10:4f:53:39:6d:ab:28:b1:bb:bf:31:29:
         60:60:df:88:4f:9b:4c:ae:0c:06:0e:f3:c6:a0:7c:45:fc:ba:
         78:40:4f:bc:89:09:94:af:ce:5a:c9:c8:e1:77:2c:a2:dc:b8:
         d5:ba:da:34:55:16:9a:69:d2:11:72:36:dc:d0:de:f9:5c:c7:
         1b:e3:df:7e:f5:06:ed:2a:36:bb:f4:3e:9f:4d:9d:f9:5d:cd:
         ec:b3:27:31:87:56:1a:39:6b:7e:ba:bb:69:8d:99:fd:f0:1f:
         26:65:75:38:5b:aa:3a:0c:b2:fa:ff:cf:7a:12:e0:06:e0:95:
         c2:02:c2:cd:a3:6f:01:b1:56:14:29:6a:c9:6e:3e:95:99:4f:
         ca:27:2e:f2:7c:f1:fe:9d:0e:ce:82:2b:12:7b:42:a3:84:58:
         ae:3a:f6:33:c5:ca:62:4b:34:6e:3c:5e:a2:cc:77:c2:cf:06:
         d1:6d:82:ac:d0:43:97:b9:ca:09:30:87:ca:fd:75:f1:38:7a:
         75:03:07:11:62:ec:80:d5:ca:34:89:2b:28:17:ea:fe:e7:dc:
         98:30:d3:d5:9b:44:c5:7f:58:05:cf:22:8e:8d:f8:25:72:73:
         cf:2a:49:9e:c7:5b:62:64:93:cf:83:91:17:98:e6:9c:92:a3:
         2f:c0:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:12 2025 by rpki-client