Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File:                     9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier:          wCS7MmQ2MKkRw/BVcyJIMrPN1uu4iiuKFcPkxdzHWss=
Subject key identifier:   10:18:17:14:51:06:9A:57:3C:6E:26:7A:BC:95:8E:F2:59:18:37:4D
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       02EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number:          02C5
Signing time:             Sat 23 Aug 2025 01:51:48 +0000
Manifest this update:     Sat 23 Aug 2025 01:51:48 +0000
Manifest next update:     Sat 30 Aug 2025 01:51:48 +0000
Files and hashes:         1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: ZLha+JsTVq7sS2gz3NAfJN2CJ2eT65nVSBqhGI0fvPo=)
                          2: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=)
                          3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: AxabGlp0IamL1AOMbCgBi5Y/mrLVivTXD8uMAD10h7U=)
                          4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
                          rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Aug 23 01:51:48 2025 GMT
            Not After : Aug 30 01:51:48 2025 GMT
        Subject: CN=68a91eb4-8c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:49:a1:5f:68:44:d4:e0:95:1d:d1:67:aa:
                    c5:30:90:73:87:26:88:ba:35:d9:6c:4d:ab:bd:d2:
                    7c:72:46:3a:1e:f3:ea:91:cf:cd:b3:2f:5c:f3:0d:
                    2d:9d:c5:e2:36:90:d4:f4:01:a9:bb:c2:b6:08:8a:
                    33:78:f3:1c:93:93:c4:8b:1a:52:6e:ea:e0:03:d8:
                    4f:87:4b:10:cc:b1:69:97:35:b7:e3:26:6b:10:c4:
                    a6:a2:97:36:00:fb:05:2f:ce:b3:19:8d:1d:8e:05:
                    ae:ac:e8:9b:12:5d:74:0b:9f:f3:3e:0b:4f:6d:c4:
                    91:79:78:f3:7f:51:dc:a8:99:63:74:c5:43:c9:c4:
                    52:9b:b5:d1:7f:95:76:cf:8c:c6:48:f6:53:a9:00:
                    92:db:96:41:5c:36:e2:1c:63:37:00:55:6d:f1:ad:
                    b3:12:6c:0c:d3:27:3a:28:9d:8d:cd:4d:03:10:0f:
                    57:ef:7f:d0:4d:0c:82:63:c9:de:18:04:19:8b:78:
                    46:4d:b2:3c:f8:4d:f7:3b:c1:fa:6d:63:7a:cc:d1:
                    bf:6a:23:ca:0b:9f:a0:f5:f5:8e:ae:e2:72:87:f8:
                    83:49:9b:b6:2c:42:9e:47:10:d5:22:06:86:dd:99:
                    08:2a:5d:f2:95:a1:b2:e0:d5:a5:b0:f6:b3:eb:be:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:17:14:51:06:9A:57:3C:6E:26:7A:BC:95:8E:F2:59:18:37:4D
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:72:29:f0:3f:f1:b7:41:ff:da:52:b0:63:a7:42:33:da:5c:
         ca:78:a0:76:25:0b:22:49:4d:d7:6d:ca:66:2f:c8:ed:4a:5a:
         5b:a0:d7:47:bd:e5:1f:28:68:b7:e4:92:16:e4:1c:37:b9:10:
         72:55:11:8b:cb:2d:a2:05:0b:fb:77:5f:62:c9:84:13:49:fd:
         22:9c:5e:90:93:56:dd:6e:b1:cc:4c:bd:91:15:88:30:d7:6b:
         eb:a3:06:21:a9:d7:29:c1:86:7a:7b:64:73:cd:a8:2a:7e:f5:
         cf:4c:2d:37:e0:1f:45:f1:a9:9d:15:c8:c7:ce:83:6e:9b:0f:
         39:9c:7f:c8:18:e2:70:01:23:d9:9d:f0:8d:06:a9:4a:5d:22:
         24:dd:35:11:7c:bc:af:b0:b4:a8:dd:6c:88:5c:7a:75:91:d8:
         d8:ef:79:15:80:6b:c2:d7:13:1e:d2:ee:9d:c5:d3:d3:68:55:
         b2:6f:51:a5:50:14:a0:58:b9:86:23:ca:eb:3f:51:dc:a8:66:
         89:3c:81:ba:ec:fd:bd:b5:35:55:c3:97:ca:f1:e9:e8:f1:40:
         fb:6a:98:bc:6c:49:3c:8a:1a:5b:e1:22:82:ca:6d:4b:a2:5c:
         5a:25:a9:61:04:03:c6:72:19:53:28:93:bc:5a:d5:f3:07:36:
         9f:19:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:08 2025 by rpki-client