Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File:                     fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier:          WtEDCzozrYQHL+r2KoJYcG0OfFqqzoRzu7B2Wdit6z8=
Subject key identifier:   D3:27:76:4F:45:25:D9:CD:18:D6:CE:E0:89:3A:D2:BA:89:75:66:22
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer:       /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number:          064E
Signing time:             Fri 22 Aug 2025 22:50:01 +0000
Manifest this update:     Fri 22 Aug 2025 22:50:01 +0000
Manifest next update:     Fri 29 Aug 2025 22:50:01 +0000
Files and hashes:         1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: OcUbUZyCUeuZYp6qGOHBA/ISTZY6A+EBEhzs1n5DS1M=)
                          2: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: KQvzfFoZ8+mG1PwqX29gc/leNzp6B+eUlYg2ecJeyn4=)
                          3: 3E5C80C867EF11F08BDFA829C4F9AE02.roa (hash: Ufr8w+TB+VCXABGBC4tw1eiGkf84BSkGr1I+23fXuVI=)
                          4: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
                          rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
        Validity
            Not Before: Aug 22 22:50:01 2025 GMT
            Not After : Aug 29 22:50:01 2025 GMT
        Subject: CN=68a8f419-022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:a1:b8:41:f8:1a:7e:e0:98:10:c4:39:e2:
                    31:08:8d:f2:ec:08:23:64:68:a2:17:fa:0d:4a:62:
                    bf:3a:0e:2d:3a:f1:9f:ae:0f:4f:11:28:d1:54:46:
                    99:54:1a:91:df:68:b6:9f:7d:fb:03:ce:7c:f1:ed:
                    c2:80:c3:c3:70:fc:b3:71:3f:c0:b0:cd:42:fc:f4:
                    8a:24:72:bd:81:5f:8b:16:e5:a3:ee:78:7c:21:9d:
                    3f:7a:77:28:e8:1f:57:f4:48:0b:f3:e4:d5:c6:65:
                    25:47:65:81:c5:75:fb:57:10:a0:ae:a8:cf:ba:90:
                    0c:23:9d:3f:83:08:0c:95:f4:75:78:42:4f:67:60:
                    1e:f4:43:b2:9a:19:d0:85:18:e3:cc:b0:ff:f0:ad:
                    21:b2:f6:a6:9e:27:f8:8f:17:b6:dc:a3:4f:ff:6b:
                    b4:1f:63:a3:c3:a5:86:1b:9d:41:55:b0:30:d3:7e:
                    6f:fd:dd:0a:35:ee:62:5e:ad:3f:28:4a:6a:7e:1e:
                    a0:f9:5b:2d:c6:fa:ce:6a:13:99:0b:2d:87:a7:86:
                    63:10:b8:ff:af:40:a9:b0:05:39:10:bc:14:9a:75:
                    d9:a9:0c:d4:a1:2b:61:b5:a1:d9:93:3e:ae:e3:70:
                    65:da:0c:ae:1d:30:19:f1:ee:b0:77:f7:6b:42:f9:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:76:4F:45:25:D9:CD:18:D6:CE:E0:89:3A:D2:BA:89:75:66:22
            X509v3 Authority Key Identifier:
                keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:73:b3:da:42:2b:59:94:dd:35:bf:85:f3:b8:1b:52:b5:
         a4:c8:4c:c8:be:89:a9:d5:1d:c2:9c:4a:00:ae:ff:ce:23:12:
         07:ed:f5:5a:bf:a8:5c:e2:3a:0c:46:67:e8:83:ed:60:04:54:
         44:4c:55:4e:c1:b9:4e:e6:ca:86:53:32:9f:b3:f1:b8:8f:fc:
         dd:b0:a6:ad:53:b4:4a:75:7f:06:55:fe:b7:8f:ea:9c:28:04:
         ba:d2:91:62:5a:18:13:f2:d3:45:39:26:9a:3b:4e:f6:5b:6e:
         06:ad:00:53:ad:ef:11:ff:dc:e8:1a:67:df:5e:50:50:43:01:
         56:d5:ce:d0:7c:3b:22:08:0d:00:39:df:04:66:98:32:4b:b6:
         2a:4f:7c:92:a8:6b:9a:53:a1:be:43:60:3f:dd:80:66:f8:b7:
         09:52:a0:53:80:c1:ce:0e:ef:dd:08:9d:40:d5:95:8f:35:7c:
         4e:ee:fb:d5:2c:95:ae:1b:f8:e1:69:6b:eb:68:be:e5:74:b1:
         53:5e:27:27:9f:b5:f2:ff:b2:2d:67:69:00:9c:f8:42:40:81:
         80:c1:3c:11:a3:3a:ea:11:73:52:91:a7:a8:2c:fc:c0:ec:ad:
         f3:91:71:5c:2a:18:b2:8a:af:ca:ca:2f:c4:c6:1b:42:2d:54:
         27:20:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:50 2025 by rpki-client