Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          xNzy50cFNK3X6YJq4eiQj5HePvGTXkFyhehpwdZLZzQ=
Subject key identifier:   50:AD:45:22:EC:7C:54:5E:0D:77:AB:5F:49:0C:53:7F:C7:C2:1C:50
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          BF
Signing time:             Sat 23 Aug 2025 06:04:16 +0000
Manifest this update:     Sat 23 Aug 2025 06:04:15 +0000
Manifest next update:     Sat 30 Aug 2025 06:04:15 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: //8/4vbrQsCdDv/b8uSQaZClyl2Orymqga1TWoRtX7M=)
                          2: E1EF913A5DF011EFAC9CA43BC4F9AE02.roa (hash: HnEUHlw9gil+mYxp63GxFhUGPoOAuwCoKZnzCLBninA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Aug 23 06:04:15 2025 GMT
            Not After : Aug 30 06:04:15 2025 GMT
        Subject: CN=68a959df-ac00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:ca:80:8c:bf:ee:f5:7a:96:68:c2:26:0d:
                    2d:e4:6f:5b:02:22:fb:e0:6a:7a:89:18:79:a3:84:
                    6b:6b:c8:48:6f:66:1b:dd:58:e4:16:2e:c8:d7:3c:
                    1c:ef:59:d6:a3:4e:28:0e:71:46:54:e2:94:dc:b5:
                    02:2d:58:14:b7:1b:5b:04:f1:7a:f2:4c:be:9d:30:
                    3f:b6:1b:01:b0:36:ac:4a:83:9a:ca:13:6c:f0:7d:
                    8a:e8:64:00:89:70:7d:f8:59:16:5a:8f:65:88:f1:
                    fe:18:79:79:4d:cf:44:36:47:bf:68:d9:df:3d:f0:
                    15:69:76:76:64:e9:b0:3e:ad:86:60:4a:3f:24:c0:
                    09:cf:10:90:b8:79:96:61:33:8d:99:7e:9f:6a:f5:
                    7a:66:41:72:01:4b:c6:53:9b:18:28:ac:3a:97:89:
                    f6:10:11:fe:9f:e7:3e:0e:a4:4b:29:07:fd:a0:c8:
                    5c:7d:f1:2a:7c:29:f7:b7:20:f8:29:d3:be:f2:d6:
                    83:12:92:9f:c0:58:25:e6:64:85:80:f5:e6:1d:04:
                    19:7d:7d:0e:f8:3c:1f:c8:7c:22:5a:34:b5:d8:eb:
                    9a:20:97:18:98:49:86:bb:eb:5f:84:57:db:c2:ed:
                    88:04:e4:69:f5:92:0a:58:0e:6f:b4:7f:3d:5b:7d:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:45:22:EC:7C:54:5E:0D:77:AB:5F:49:0C:53:7F:C7:C2:1C:50
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:9f:bd:b5:2c:8b:63:53:4a:2b:b0:59:5f:4f:7f:72:7b:
         2d:4b:96:2b:55:19:e2:f7:e1:74:ca:f0:68:82:e9:c5:49:45:
         5a:39:0b:36:de:45:85:24:8e:a2:06:76:bc:81:da:e3:ee:93:
         14:bc:77:a2:d5:fb:9c:bd:13:28:ee:40:f7:1e:8e:90:65:fb:
         93:af:bd:fe:45:7f:04:91:59:67:93:2c:7b:6b:ac:b3:7d:82:
         ae:5f:89:1d:f1:30:96:12:a7:4a:11:48:ce:ff:70:20:cc:5f:
         90:d7:ce:c8:08:44:01:37:94:db:d2:b9:8d:d8:6b:73:33:97:
         97:6c:15:4f:79:ba:a0:c9:5b:76:58:29:dc:25:48:6a:22:2b:
         66:8d:d6:57:bd:9e:e2:80:bf:0b:18:44:09:d4:45:95:49:67:
         c0:15:3e:4b:ad:45:41:6b:8d:cf:68:45:b8:8b:ed:e1:51:d6:
         1a:c7:1d:16:24:89:83:98:df:32:e9:7f:42:4b:3b:33:d1:f9:
         32:86:cb:34:97:13:c7:11:48:6b:6f:fe:84:11:a2:3f:4f:e0:
         18:e0:81:40:df:b5:ab:a8:a6:21:78:0f:4c:e4:a0:ac:66:85:
         da:02:e3:53:a6:de:1f:b4:d2:e0:ce:d3:3a:67:6d:0f:f6:3b:
         87:6b:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:45 2025 by rpki-client