Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          caLBcVQh3ix/jUjsU0pwvlPnTLLklbM8kOpkp13vPu4=
Subject key identifier:   3F:38:31:3A:91:25:9D:35:38:89:20:A0:28:91:4D:6A:06:67:48:84
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          0103
Signing time:             Sat 23 Aug 2025 05:23:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:23:42 +0000
Manifest next update:     Sat 30 Aug 2025 05:23:41 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: IMSTx9BPclMP0b0ucOTKeB0GnFdZ7d13kfNnd4Ptd1M=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: nV0vvomgUuYAvIzu+zUsDjepnjclen17WArrRDCOOcE=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: 8Rz14qqnLJzTDtmQhY87UU9ZmhRFExlX0EXdINFDVKA=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: pMueZdZNVsSO9dkMJ6HNJEYyNaRswTRPg4jNaq1x/N8=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: kU3sDSAugxDvj2jONja3ZA3jP5BMAHMZw6R2ums+q7s=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: Oc+7IC+W0+Xbte63+cuJ+plpWgmKJWGeEg9BO4bYTrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: Aug 23 05:23:42 2025 GMT
            Not After : Aug 30 05:23:41 2025 GMT
        Subject: CN=68a9505e-9c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:02:96:6d:66:17:57:df:d9:32:83:b6:85:
                    e1:ac:98:76:26:3f:1e:b8:10:95:1c:1f:58:3d:a7:
                    6e:81:be:14:4e:ef:bc:a9:ee:b7:ad:97:56:22:e3:
                    4f:f8:32:75:5a:81:ff:41:94:73:ab:28:7b:0a:3b:
                    ae:91:c6:e5:f7:39:71:ff:e4:25:df:e2:ae:d9:a7:
                    b8:a5:cc:65:57:63:0b:02:22:06:8b:4f:73:da:26:
                    4a:41:46:18:4d:29:82:85:38:e2:14:b0:db:4e:a5:
                    b6:14:f3:87:d5:c9:6e:27:b1:aa:fb:3d:4f:dc:db:
                    6e:14:40:3e:a4:af:1d:5c:e1:e7:6a:72:46:91:43:
                    8e:e0:2e:96:b6:8d:c4:7a:88:a0:3f:41:ca:61:7e:
                    de:35:a5:e4:83:2d:04:4a:5c:b0:dc:a6:bd:4a:e6:
                    dd:77:e4:85:3a:1d:15:60:92:c5:ea:18:c7:84:42:
                    1d:bd:4a:09:00:4b:cf:e9:8f:f8:35:cc:88:0b:6a:
                    c4:3c:99:b5:ef:f3:13:a6:a7:71:48:28:c2:62:28:
                    16:35:01:7c:e8:cb:b0:07:72:29:dc:7c:fe:62:8e:
                    45:39:54:c2:11:68:a8:65:9f:74:11:15:4c:5d:65:
                    3f:e9:fc:f2:7b:4f:75:fe:4d:7c:d6:1e:09:b8:05:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:38:31:3A:91:25:9D:35:38:89:20:A0:28:91:4D:6A:06:67:48:84
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:77:13:e0:ca:42:b3:5f:bb:78:2e:3a:c6:82:e0:26:b9:4a:
         6d:72:83:84:b8:1f:72:c0:af:74:8a:53:5d:61:76:03:07:37:
         52:72:96:4f:fd:3c:bc:3c:68:a7:19:34:be:0d:63:96:0a:c1:
         5c:5d:8d:2f:98:00:9c:f5:3e:97:e1:47:a6:d2:c4:0d:d3:db:
         7f:17:0a:54:31:f9:e9:65:76:3b:cd:3e:12:83:90:92:bb:c1:
         2b:9c:75:ae:df:f7:45:6c:ca:11:ac:bb:b3:91:29:ed:1f:c8:
         3d:cb:73:4c:86:11:b4:3c:ef:15:17:5c:0e:67:da:9f:3f:20:
         f7:45:62:03:ad:ce:29:12:47:7b:87:3e:e0:a5:05:62:d0:61:
         ef:72:10:f2:b9:0d:fb:93:ec:08:73:f7:42:25:5d:ec:5f:3e:
         39:9a:bc:a6:ef:95:2f:61:41:3a:8f:8c:69:ef:ea:6d:5e:82:
         e0:5b:1e:71:1b:45:e6:05:21:c6:c8:26:59:f2:2c:51:14:14:
         8f:cd:1d:ea:ae:c4:26:ab:5c:e2:86:31:d9:7a:e4:c8:70:be:
         a6:38:0d:ad:f1:9f:c0:ff:63:8c:1f:30:1a:48:86:e7:c9:77:
         af:39:c9:72:ec:8a:37:75:f7:64:bb:b1:66:5b:c1:86:ba:ff:
         12:48:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:33 2025 by rpki-client