Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          PFQjBSO7yESc8eISqk8v4e1o3DSCdx4G21nq1rKKYKE=
Subject key identifier:   90:66:A1:98:CA:B2:0B:75:5A:54:BA:21:08:9C:51:23:22:A1:7D:49
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          75
Signing time:             Thu 03 Jul 2025 07:03:54 +0000
Manifest this update:     Thu 03 Jul 2025 07:03:53 +0000
Manifest next update:     Thu 10 Jul 2025 07:03:53 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: 6UGrNyr09p9L0sb2smM4E8RsUCR5dKucSXSr+ndozzM=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: RrU3CkYFdXPh/xjxUTbpuTN6rb1MmkQpXUXbfG9JUVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: Jul  3 07:03:53 2025 GMT
            Not After : Jul 10 07:03:53 2025 GMT
        Subject: CN=68662b59-1395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:38:93:06:24:a8:ff:bd:ba:3a:36:cd:f0:
                    06:e8:46:f5:28:41:a1:35:31:bf:9a:d2:3d:51:f4:
                    4d:6f:22:e7:18:0a:ab:df:3e:ff:7e:e2:ec:13:e7:
                    19:54:1c:52:b8:06:d4:af:51:31:9b:b3:29:d2:df:
                    b7:c0:54:8d:74:72:fd:09:b4:bf:93:04:5e:3b:5a:
                    32:a8:33:9d:dc:75:4f:d3:69:e1:05:b5:f4:9d:89:
                    4d:4b:4d:24:95:cf:cd:5c:e2:2d:7a:63:ef:cc:ca:
                    30:d8:a9:1a:1a:95:c4:0b:43:53:69:e5:f9:32:4a:
                    1c:ff:40:2e:47:74:4f:67:30:b6:f3:71:79:36:ef:
                    f5:d0:c3:dc:e7:46:be:7f:f6:ba:7d:15:ed:53:34:
                    e4:2e:67:1c:b1:00:26:3b:05:f8:12:2f:4d:47:e3:
                    f4:61:50:0d:45:ba:f5:4a:a7:8e:10:bc:3e:0a:6d:
                    d9:6b:b0:7f:ac:15:e4:d9:d5:a5:dc:18:33:7a:b4:
                    0b:9f:f8:5d:31:4f:16:f8:4e:7f:20:5b:34:d0:42:
                    c0:0b:6a:76:2c:d9:76:45:4e:3e:89:b5:73:2d:86:
                    d9:ae:23:aa:72:97:96:93:12:af:c3:8a:53:4f:b7:
                    bc:82:fc:35:49:e1:a7:c7:9e:a0:4d:91:a4:5f:e4:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:A1:98:CA:B2:0B:75:5A:54:BA:21:08:9C:51:23:22:A1:7D:49
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:89:92:22:c1:15:b4:52:e7:2a:30:23:1f:11:c6:86:27:
         8e:7f:f5:66:11:e3:f6:85:34:c2:4f:1c:62:f2:23:3b:f4:79:
         5f:79:6c:7b:2a:51:1e:15:bb:86:4b:e5:f3:7d:31:7f:ad:08:
         2b:5c:eb:86:0c:ac:41:56:2f:2b:75:cd:73:48:76:b7:5a:8f:
         bf:e5:26:ea:3d:d9:cc:9e:5e:34:da:ab:b7:ad:ec:83:7a:7d:
         fd:9f:7e:f4:9b:5e:03:35:a9:93:6e:35:0a:a3:85:6b:14:f8:
         66:4b:51:d3:22:67:ac:f3:1a:df:8c:f1:6f:2f:da:ae:25:a6:
         43:70:72:87:c0:a7:ab:9e:62:c1:65:93:42:d3:4f:37:d9:c3:
         81:29:b3:35:34:83:43:08:0a:84:b5:c0:7c:68:05:67:30:cf:
         dc:d9:25:db:e1:91:38:08:b7:86:a1:8b:fe:a8:58:d5:bb:ef:
         1f:1d:88:76:aa:c7:f2:4c:b8:8f:58:3c:01:e7:01:38:01:dc:
         bd:a0:27:5a:9a:5b:e0:49:4b:0a:e7:c5:be:a6:91:05:98:4f:
         0e:a4:4d:6b:27:72:74:2b:75:da:9f:e9:4d:9d:19:d2:09:fd:
         db:8e:87:11:52:82:19:c9:4d:29:90:46:51:54:0c:67:d5:12:
         f0:2c:d9:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzlBQzExMC8GA1UEBRMoOThDQTQ5NERGNjlERURGNjE2RTQxRDA1OUExNEU3RjY4
NzlDREZCMzAeFw0yNTA3MDMwNzAzNTNaFw0yNTA3MTAwNzAzNTNaMBgxFjAUBgNV
BAMTDTY4NjYyYjU5LTEzOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCd4TiTBiSo/726OjbN8AboRvUoQaE1Mb+a0j1R9E1vIucYCqvfPv9+4uwT5xlU
HFK4BtSvUTGbsynS37fAVI10cv0JtL+TBF47WjKoM53cdU/TaeEFtfSdiU1LTSSV
z81c4i16Y+/MyjDYqRoalcQLQ1Np5fkyShz/QC5HdE9nMLbzcXk27/XQw9znRr5/
9rp9Fe1TNOQuZxyxACY7BfgSL01H4/RhUA1FuvVKp44QvD4KbdlrsH+sFeTZ1aXc
GDN6tAuf+F0xTxb4Tn8gWzTQQsALanYs2XZFTj6JtXMthtmuI6pyl5aTEq/DilNP
t7yC/DVJ4afHnqBNkaRf5IAjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkGahmMqy
C3VaVLohCJxRIyKhfUkwHwYDVR0jBBgwFoAUmMpJTfad7fYW5B0FmhTn9oec37Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzYwOTQ2Q0Q2QTgw
MTExRUZBNDA2NzUzQkM0RjlBRTAyL21NcEpUZmFkN2ZZVzVCMEZtaFRuOW9lYzM3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbU1wSlRmYWQ3ZllXNUIwRm1oVG45b2VjMzdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OUFDLzYwOTQ2Q0Q2QTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL21NcEpUZmFkN2ZZ
VzVCMEZtaFRuOW9lYzM3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJcNiZIiwRW0UucqMCMfEcaGJ45/9WYR4/aFNMJPHGLyIzv0eV95bHsq
UR4Vu4ZL5fN9MX+tCCtc64YMrEFWLyt1zXNIdrdaj7/lJuo92cyeXjTaq7et7IN6
ff2ffvSbXgM1qZNuNQqjhWsU+GZLUdMiZ6zzGt+M8W8v2q4lpkNwcofAp6ueYsFl
k0LTTzfZw4EpszU0g0MICoS1wHxoBWcwz9zZJdvhkTgIt4ahi/6oWNW77x8diHaq
x/JMuI9YPAHnATgB3L2gJ1qaW+BJSwrnxb6mkQWYTw6kTWsncnQrddqf6U2dGdIJ
/duOhxFSghnJTSmQRlFUDGfVEvAs2b8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:19 2025 by rpki-client