Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
File:                     CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json)
Hash identifier:          pNCmazecWt5Sni5Z5+Eq7qmIGJA43ArZE3NLXtAE52g=
Subject key identifier:   C8:C7:BF:AA:01:39:26:2B:A9:1E:2C:4C:27:00:BD:72:F9:C7:82:A6
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Certificate issuer:       /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
Manifest number:          049E
Signing time:             Sat 23 Aug 2025 00:12:03 +0000
Manifest this update:     Sat 23 Aug 2025 00:12:02 +0000
Manifest next update:     Sat 30 Aug 2025 00:12:02 +0000
Files and hashes:         1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: m/mxzpz4uqzM4LdDpEM5lSFaAe9qaOqPly1xW4nNq+o=)
                          2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=)
                          3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=)
                          4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
                          rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
        Validity
            Not Before: Aug 23 00:12:02 2025 GMT
            Not After : Aug 30 00:12:02 2025 GMT
        Subject: CN=68a90752-6e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:0d:0e:40:85:75:51:2c:29:42:06:71:ab:
                    ef:6b:fd:58:08:6a:41:e5:ff:37:7f:67:3d:bb:76:
                    b4:e2:8a:1a:0b:6c:f4:a6:31:64:43:ae:d4:80:7c:
                    58:a6:89:d4:c6:ff:af:ed:73:b2:14:02:74:a3:e7:
                    82:b2:b8:c8:70:c0:15:08:fb:ce:1e:76:dc:95:be:
                    7d:04:1a:ab:69:44:40:d0:d0:37:53:0d:9a:86:36:
                    62:14:ad:5e:6c:fc:6d:72:bf:79:1f:9b:78:b4:a1:
                    6d:ea:c6:c4:ec:1c:be:48:89:91:22:e8:fb:2f:ed:
                    ea:fd:77:09:53:05:85:0a:f8:0b:1f:4a:30:93:94:
                    5f:61:b9:23:f7:e3:b5:d3:07:95:1b:34:81:96:58:
                    9f:32:07:dd:d2:dd:db:c3:89:22:6e:97:c3:9c:8e:
                    8b:69:47:ce:ab:25:d2:cb:9e:a7:5d:bd:33:04:86:
                    d3:c5:41:b0:ea:e2:31:42:7e:7a:d1:de:23:45:81:
                    b7:8a:47:f0:c2:de:f1:0e:65:69:8f:4c:57:1f:a0:
                    12:f1:f2:c1:99:a4:4f:4b:20:08:a8:64:6f:42:e0:
                    81:0d:66:db:ab:71:d4:42:a9:fa:0e:a5:a7:95:bb:
                    d4:3a:0c:c1:5c:da:9b:b7:76:9b:d6:a9:08:50:3f:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C7:BF:AA:01:39:26:2B:A9:1E:2C:4C:27:00:BD:72:F9:C7:82:A6
            X509v3 Authority Key Identifier:
                keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:03:40:09:04:85:d3:13:7a:b7:ec:75:a5:34:cf:6a:13:
         de:7a:db:5a:55:99:18:be:2c:8d:07:9f:d6:99:35:33:fa:cd:
         55:0f:fe:b0:a7:74:a1:f4:58:bb:5e:78:fa:79:25:c7:b8:b9:
         d4:2c:30:02:ee:82:46:e2:84:93:b8:ee:3c:e5:16:58:f4:3b:
         0b:80:69:07:17:de:11:41:3d:f2:7b:39:93:00:7b:a4:3d:c7:
         b6:f6:be:eb:9e:30:8d:aa:bf:4f:7c:af:f5:11:9c:22:31:d1:
         e1:50:04:4c:a6:c2:d9:ea:87:7b:de:28:50:de:0a:25:c2:99:
         06:27:35:88:d6:dc:38:a5:f0:3f:d7:c1:ee:99:20:b6:17:1f:
         39:b1:a4:fd:70:21:dd:d8:24:6e:b5:e0:d6:ce:2f:90:71:62:
         0b:9b:c0:1b:de:38:84:60:99:f0:14:62:6a:1a:51:af:bd:9a:
         ac:08:09:6a:66:95:2f:37:1b:23:a7:3a:40:21:a0:d7:9a:f7:
         33:77:5f:be:7e:f3:71:54:65:62:05:8e:75:3b:a8:ba:d9:97:
         9e:93:91:44:b8:0a:5e:e3:e0:6d:10:68:56:33:e3:f2:f5:ee:
         c1:b5:17:d5:cd:93:b8:81:d2:25:27:26:95:28:a6:1f:ba:74:
         e0:db:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:50 2025 by rpki-client