Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          Tkg4uz9f79tfBqAH67dKdkhunDcRS7ZNtKwea3u1+R0=
Subject key identifier:   2E:E1:DA:3E:C6:E6:A1:D0:F8:BD:FF:1F:71:97:C8:58:83:F7:52:29
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          019D
Signing time:             Sat 23 Aug 2025 03:47:15 +0000
Manifest this update:     Sat 23 Aug 2025 03:47:15 +0000
Manifest next update:     Sat 30 Aug 2025 03:47:15 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: cWiZrjlqnw0P7KPwnuMP7TBeHXc3NSpm40hWnuEXlQM=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: hs4pbkMdAj+D2UuqPGCvCOhNIxOm0iHH3n26RgqYzp4=)
                          3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: 2oxGf1eF2vMP7e/KYqIXBpkCvgOIzwtv4aEoBWiSHEE=)
                          4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 4eY2s8Kl/roYRAvSuHuq1ezQDh2MWHLHPTeUX63R6yM=)
                          5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: idXeV/vJmvr27TLb+qveG/iLmKPYdgqQIbqbNOCFSf4=)
                          6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: E0/fmo1zRhNUo9QRAW44/yJchxGo4nB0rPZ+W1mU3F0=)
                          7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: GBGetP5iCb9tsjZGfvDrYFe7zLDfSNoHPSI0qO5wZUo=)
                          8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: kP45XXDunbMIfdqYzPQTlFvypMXpadnSedx4GT1Iwgc=)
                          9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: pk4iRSrrvtFGqra4UOtTwUERBl9wGLn18X+I8xUeZuo=)
                          10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 9VTaK6okqIJvF9II2cb927AcLgrTqA9SlI29NpkDXFQ=)
                          11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: jnn+3+ad82Cn/wKtacQrT2BVd7Rq7+SYdgr+JJUl5yM=)
                          12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=)
                          13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: czjAqWQeWsyu/4wi/BZHeovzI0scnOJ//P4FWGc4nUs=)
                          14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: n2ZNps1Q9cQsfWAtJjRE5AUYafhco8sajICleXYU/Io=)
                          15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: oVqk1V6SMsFEFFypJZwBJY7tdrNrtjHmcrmlxHpAog8=)
                          16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wpnmGkguzd61ngA1alk/0gWu0+VGdOnX4QN2iRz/PDY=)
                          17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: UClI42Nc4TAFt2EH/zfcSweF10PqmL7CvHfiL9lPAxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug 23 03:47:15 2025 GMT
            Not After : Aug 30 03:47:15 2025 GMT
        Subject: CN=68a939c3-47ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:2f:63:10:05:a7:82:34:3e:7b:95:74:9b:
                    37:d4:db:d6:fb:a8:15:ed:e7:39:fb:c4:33:f6:28:
                    46:76:c6:4d:51:3c:8d:3c:3a:09:88:8d:d3:d1:45:
                    1d:66:05:01:c8:61:a3:de:22:44:3b:dd:e5:c5:79:
                    69:c0:42:2e:11:c5:b0:05:03:d1:88:76:12:c0:18:
                    06:4f:e0:5f:ae:7f:a5:21:74:f7:ea:7e:75:cb:4d:
                    24:c2:00:b7:5c:d7:c1:d2:8f:b0:a9:83:b8:e7:e8:
                    9e:9d:96:6c:77:a9:34:6a:30:c8:da:b9:e4:6d:7e:
                    ca:05:aa:3e:81:c6:e1:63:cf:19:7e:29:55:dd:37:
                    b2:be:82:7e:33:39:ab:8d:a3:43:48:09:57:f2:00:
                    0e:9b:7d:5f:d9:f2:ae:34:ca:fb:b6:40:2d:d4:a7:
                    98:af:4d:66:ab:8f:59:5f:48:5a:28:40:da:28:52:
                    66:09:7d:3c:de:4a:a5:7b:90:39:30:75:16:5a:8a:
                    f2:4e:54:6c:64:46:c1:c5:b4:1a:47:63:63:b6:11:
                    66:43:e1:c5:1a:52:f0:cc:15:4e:42:80:5b:92:89:
                    b2:97:1d:45:fa:e2:95:25:fc:83:1b:56:92:57:61:
                    82:45:ac:ff:2d:4d:a3:ac:09:ae:0e:e3:fe:dc:4d:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:DA:3E:C6:E6:A1:D0:F8:BD:FF:1F:71:97:C8:58:83:F7:52:29
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:4a:6e:cf:ff:78:e2:52:5c:da:41:6d:4c:17:56:98:be:
         65:7b:b3:e3:21:d2:b6:59:34:e3:5d:30:dd:e7:51:77:7b:6f:
         bb:b1:e8:cc:8c:98:89:92:8b:7a:06:4c:c5:6a:1a:d4:fc:77:
         71:5d:05:df:d6:17:4a:ad:c8:91:91:8b:1f:ae:d7:66:9d:80:
         54:7e:74:e2:77:30:7b:4e:55:5c:1f:db:19:91:59:61:de:96:
         d1:2d:bb:6b:31:86:27:5e:9a:62:8b:09:10:34:5d:bb:48:72:
         97:71:fb:6f:55:e4:e6:06:32:78:cf:08:df:07:e7:da:14:62:
         38:e3:fd:b9:fa:aa:00:5e:a9:7d:56:7d:76:56:85:2a:e7:81:
         bb:53:42:f3:f3:0d:0f:99:78:c2:7f:ae:6d:10:f1:9c:4e:45:
         64:2c:73:f9:8f:f9:a2:f1:14:17:f3:c4:0b:1d:10:9a:c1:a4:
         52:9a:46:7c:45:f4:74:a9:64:0a:e3:cf:c3:c0:8d:52:fb:f7:
         dc:07:db:eb:ab:d6:53:89:46:39:7b:6b:3c:4b:9b:78:3a:c4:
         8f:00:64:ea:50:c1:4f:80:f7:b3:d4:d6:70:3a:e9:e8:ca:9d:
         b3:07:46:8a:87:20:6a:13:7c:ed:c9:0e:b2:7c:6d:c6:da:7e:
         c1:c6:73:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUwODIzMDM0NzE1WhcNMjUwODMwMDM0NzE1WjAYMRYwFAYD
VQQDEw02OGE5MzljMy00N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4LEvYxAFp4I0PnuVdJs31NvW+6gV7ec5+8Qz9ihGdsZNUTyNPDoJiI3T0UUd
ZgUByGGj3iJEO93lxXlpwEIuEcWwBQPRiHYSwBgGT+Bfrn+lIXT36n51y00kwgC3
XNfB0o+wqYO45+ienZZsd6k0ajDI2rnkbX7KBao+gcbhY88ZfilV3TeyvoJ+Mzmr
jaNDSAlX8gAOm31f2fKuNMr7tkAt1KeYr01mq49ZX0haKEDaKFJmCX083kqle5A5
MHUWWoryTlRsZEbBxbQaR2NjthFmQ+HFGlLwzBVOQoBbkomylx1F+uKVJfyDG1aS
V2GCRaz/LU2jrAmuDuP+3E1fDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7h2j7G
5qHQ+L3/H3GXyFiD91IpMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm
TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7rEpuz/944lJc2kFtTBdWmL5le7PjIdK2WTTjXTDd51F3e2+7sejM
jJiJkot6BkzFahrU/HdxXQXf1hdKrciRkYsfrtdmnYBUfnTidzB7TlVcH9sZkVlh
3pbRLbtrMYYnXppiiwkQNF27SHKXcftvVeTmBjJ4zwjfB+faFGI44/25+qoAXql9
Vn12VoUq54G7U0Lz8w0PmXjCf65tEPGcTkVkLHP5j/mi8RQX88QLHRCawaRSmkZ8
RfR0qWQK48/DwI1S+/fcB9vrq9ZTiUY5e2s8S5t4OsSPAGTqUMFPgPez1NZwOuno
yp2zB0aKhyBqE3ztyQ6yfG3G2n7BxnOe
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:38 2025 by rpki-client