Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier:          fG6qvfFKFTcYc09SiTJzRYqKklJ0ZxEWYlLJVHqSm3o=
Subject key identifier:   86:33:4F:2A:E8:BE:61:00:C1:02:E6:8A:3E:BA:06:CF:0A:ED:E7:0B
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number:          0155
Signing time:             Sat 23 Aug 2025 04:15:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:15:34 +0000
Manifest next update:     Sat 30 Aug 2025 04:15:34 +0000
Files and hashes:         1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: dwlqUcc0M+T2xTMgscfhTWWrcg4quogFtq+aLRsBwYs=)
                          2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Aug 23 04:15:34 2025 GMT
            Not After : Aug 30 04:15:34 2025 GMT
        Subject: CN=68a94066-22c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:c4:b5:d4:fc:97:f5:17:04:0b:6f:03:b6:
                    97:3f:b4:b1:41:93:9e:81:1a:54:38:b6:0b:d1:4e:
                    df:11:ce:0f:31:82:d3:e1:2f:10:29:0d:d3:e6:80:
                    d8:9e:b0:22:8a:f2:d7:40:ff:7f:ee:36:59:59:f9:
                    cc:25:3f:15:04:7c:8e:cd:40:32:1e:36:45:82:cf:
                    e8:a1:ec:2a:19:0e:2b:1c:eb:89:51:b5:d0:0e:7e:
                    78:a7:cc:ac:f0:99:62:82:24:64:b0:46:2d:c5:0f:
                    db:29:ec:d0:18:26:3f:d0:a2:af:f1:c8:38:65:f5:
                    81:c8:d8:09:63:3a:0d:5d:a1:d7:e9:a0:8c:f6:4f:
                    ad:2d:eb:c7:92:75:43:c4:4c:4f:10:9d:0c:99:33:
                    d3:1d:3e:3b:c6:c7:5b:64:27:2d:e5:1b:cd:ff:20:
                    ae:f8:f2:08:b6:80:e3:4a:24:59:f2:b7:5c:e7:dd:
                    be:81:32:68:b5:c0:69:77:73:bb:89:30:e7:dd:22:
                    47:0f:9c:48:e8:86:4c:ce:93:fe:11:ae:c4:5f:48:
                    7f:0a:d0:43:74:46:5a:17:70:74:20:b5:69:eb:2d:
                    27:2f:f4:a5:f2:41:02:73:42:d9:d6:68:91:17:40:
                    25:4c:1d:e5:5d:59:91:45:c9:30:d5:67:63:b3:b1:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:33:4F:2A:E8:BE:61:00:C1:02:E6:8A:3E:BA:06:CF:0A:ED:E7:0B
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:f5:55:63:58:d7:1f:17:0b:65:68:5a:02:68:9d:1a:cc:
         81:23:fb:01:2b:d0:d2:71:32:ea:8d:c8:6c:f2:40:14:69:a2:
         71:58:a4:18:25:bb:00:dc:30:b9:40:0a:51:30:99:52:3d:ed:
         11:ea:fb:8c:64:a3:2d:d9:61:59:c7:2b:42:8f:9c:ee:6e:f0:
         0a:22:be:3c:18:eb:9e:27:0d:37:44:90:b5:17:ec:09:7e:6f:
         d2:19:18:df:0f:92:b6:49:93:97:2f:b2:be:57:69:76:cd:7d:
         68:28:7c:a1:46:28:76:32:68:b6:0e:58:c1:32:5c:35:77:f4:
         80:fa:0f:ef:1e:7a:f7:bd:1a:c8:4c:73:3f:62:17:1e:7b:81:
         27:d7:92:e6:e1:13:ee:46:e6:42:77:93:c2:f8:05:1a:17:ce:
         04:59:b2:c9:d7:23:69:2d:f5:fa:73:69:d8:68:ed:f1:56:f1:
         df:d3:48:d8:d6:0d:e3:6f:6f:5c:79:fa:6c:55:53:e5:8c:e9:
         6f:aa:03:9a:58:83:79:3d:60:36:02:c8:10:03:e0:8a:51:2c:
         72:75:2d:f8:5a:14:d7:3e:5f:f1:67:c0:1e:ec:98:b8:8b:03:
         a6:d8:e4:bb:71:1b:2b:d2:0d:a8:f9:03:62:50:33:1d:ae:e5:
         1b:43:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:21 2025 by rpki-client