Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File:                     XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier:          r8yqyW6eaBFjcEEFdH3p5OAutqakr+CGZeKoDlCgkZw=
Subject key identifier:   BB:C8:0F:F2:DB:68:66:BC:16:59:42:02:66:3F:0E:23:0B:32:4E:D5
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number:          02C4
Signing time:             Sat 23 Aug 2025 01:40:47 +0000
Manifest this update:     Sat 23 Aug 2025 01:40:47 +0000
Manifest next update:     Sat 30 Aug 2025 01:40:47 +0000
Files and hashes:         1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: +wVGCdID2mk9152NOQXbhvMvilDG1HroGvD+hCmi7UQ=)
                          2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=)
                          3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=)
                          4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=)
                          5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Aug 23 01:40:47 2025 GMT
            Not After : Aug 30 01:40:47 2025 GMT
        Subject: CN=68a91c1f-1947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:fb:42:68:b5:fd:08:40:ba:d2:bb:62:ee:
                    40:84:31:b9:05:b5:d4:96:df:e3:8d:22:45:c4:3a:
                    aa:e3:2c:11:38:5b:b4:41:cd:04:20:94:6a:62:21:
                    ac:6f:d1:f4:6d:bc:a6:70:76:81:a6:79:c2:45:40:
                    0b:8b:c2:e3:dd:5c:20:a4:98:a8:55:ab:c1:f0:9a:
                    c2:eb:94:0c:14:f7:c2:58:85:85:67:a6:4b:f1:bf:
                    f3:ce:fb:b3:4f:a7:d7:b2:78:48:39:eb:b7:f5:f6:
                    75:96:f9:86:80:69:13:93:50:67:45:6f:78:5c:17:
                    36:8d:4a:70:e5:f7:57:db:43:99:4b:4a:c2:06:3b:
                    df:75:88:11:cb:cd:4d:b1:9f:ee:44:1e:df:c8:f8:
                    eb:9c:c7:b6:30:10:3d:49:55:e9:60:17:35:94:67:
                    53:c2:9d:df:cf:19:db:ad:60:24:2a:9b:24:ce:b4:
                    cf:52:a5:2b:03:ad:51:4c:89:5a:b9:db:89:bd:f9:
                    ae:aa:b9:43:10:e2:e9:e1:96:e8:aa:a7:23:c0:aa:
                    d5:9b:76:a2:a2:8c:dd:9a:61:c4:97:3b:6b:90:c3:
                    83:7e:c0:a1:33:3e:c3:d1:3b:fb:99:40:4b:2e:0d:
                    ee:5f:2d:93:50:d6:a5:7c:91:2b:81:d8:f1:d5:ea:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C8:0F:F2:DB:68:66:BC:16:59:42:02:66:3F:0E:23:0B:32:4E:D5
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:96:86:87:12:50:e4:d6:c6:13:e5:7c:69:28:07:e3:ea:
         03:69:d5:ee:a2:cb:f1:84:09:46:5e:90:b7:f2:e3:c3:21:d3:
         f1:53:d0:db:21:e3:18:64:e8:b0:34:82:0c:dc:32:4b:fd:32:
         6e:c9:28:32:e7:24:76:15:a0:81:7f:3e:33:80:85:74:22:4a:
         59:c4:c6:3c:1a:13:6e:c1:5c:7b:8a:96:33:35:c2:2a:91:d7:
         fa:db:1e:f9:57:db:16:8d:c4:c5:a2:29:46:d1:a0:ea:fa:89:
         6d:22:29:e0:b8:7d:83:6c:2a:70:d3:33:91:fa:2b:7f:03:c5:
         2f:ba:44:58:e0:cb:58:b6:1c:85:ae:ed:27:ca:18:8c:26:eb:
         d3:5a:fd:51:23:69:a5:39:c7:d8:e1:29:77:ed:e3:ab:5c:c7:
         54:1d:a5:40:62:3d:b7:68:f7:2e:42:ed:f0:86:9d:c7:02:15:
         bc:18:6f:a1:09:dc:45:bb:1d:49:17:9e:c6:9d:18:51:9f:4a:
         f0:22:cf:ad:21:0f:37:8b:35:23:88:50:6f:f3:50:c7:9e:0c:
         ac:c8:37:0b:5f:f7:ab:c9:6f:6f:b9:5c:be:24:bc:2e:00:c3:
         5b:96:8e:0d:35:db:e2:f4:54:ad:4a:14:51:42:e5:47:b8:10:
         e0:1f:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:45:45 2025 by rpki-client