Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File:                     e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier:          0z9dN0IiBXjf/IiOXT4qw5S/Jy2f9Gy+jqnbdMCFzzI=
Subject key identifier:   6D:B1:2D:57:43:18:BE:4B:59:CF:4B:3A:71:92:DF:80:92:CF:E3:2F
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       0670
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number:          0665
Signing time:             Fri 22 Aug 2025 22:43:18 +0000
Manifest this update:     Fri 22 Aug 2025 22:43:17 +0000
Manifest next update:     Fri 29 Aug 2025 22:43:17 +0000
Files and hashes:         1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: M5nq780WNR+YKFesYybojEYDqgUkgoTMLOh8+ZFUjgM=)
                          2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=)
                          3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Aug 22 22:43:17 2025 GMT
            Not After : Aug 29 22:43:17 2025 GMT
        Subject: CN=68a8f285-b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:cc:97:9e:dd:eb:7b:b4:09:09:9f:73:55:
                    79:b2:a9:93:fb:84:19:dc:8e:1a:fe:76:07:e6:87:
                    a3:1e:4c:5b:fc:d0:b5:c6:f2:e7:00:0c:69:4b:c2:
                    51:6b:9f:37:cd:0c:ec:ed:06:02:2f:8a:53:e5:7b:
                    b6:4b:e3:4f:85:e0:4d:f6:e5:0a:01:51:b4:72:f9:
                    ad:c9:b9:55:b1:2b:27:16:80:7b:51:07:e9:1f:55:
                    d5:91:6e:55:46:3a:eb:4e:f9:03:c4:bf:6e:bc:38:
                    1c:a0:11:ef:b1:5f:24:a5:aa:07:cb:08:93:ac:20:
                    3a:10:9d:04:a5:18:8a:bc:72:d8:bf:69:47:aa:18:
                    41:6b:d0:e2:c7:fb:75:a8:de:0e:a8:18:9d:a8:a7:
                    8a:26:eb:12:1a:09:bd:04:b1:71:66:69:d1:e0:44:
                    5d:6e:40:c6:d0:89:84:bd:0b:78:cf:c6:21:33:ac:
                    69:3d:79:e0:a3:01:df:b7:1e:0f:61:aa:2b:e8:51:
                    e0:03:38:cc:07:39:68:e8:34:fe:60:18:c4:24:d7:
                    91:98:e6:96:eb:d1:6d:10:ed:3f:79:52:1f:b2:ff:
                    c5:1e:63:66:73:88:4a:0f:4a:18:ef:52:e0:87:f2:
                    05:64:49:b9:33:b5:ce:f1:30:df:84:fa:2b:3b:60:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:2D:57:43:18:BE:4B:59:CF:4B:3A:71:92:DF:80:92:CF:E3:2F
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:59:bd:18:6c:65:4a:e1:b1:c8:54:ec:88:0e:d8:23:71:
         27:25:a9:df:ce:8e:b8:53:81:08:72:18:39:12:1a:4e:06:4f:
         7f:87:99:9f:09:45:d0:59:4f:b9:df:96:e5:aa:50:6c:3e:d8:
         aa:64:ed:d4:b8:6b:54:6e:d4:f6:43:27:0a:a2:6a:a4:eb:20:
         ee:41:77:06:ce:6a:db:ff:47:13:7d:1c:aa:84:3e:c1:5f:ca:
         ed:63:d4:58:0a:7e:2b:a2:69:48:0f:a2:46:a6:02:b1:9e:7f:
         fd:13:38:32:a4:88:a3:29:18:6c:94:a9:f5:94:f5:60:d8:a8:
         42:5a:09:b2:8d:35:2b:b6:1e:3f:65:9b:62:0e:c0:99:6b:8d:
         5c:b5:ef:fd:b2:e6:77:8c:60:0d:41:5b:c1:b5:6c:af:ec:ac:
         d4:3e:30:40:45:21:ca:65:da:82:ad:1e:34:f1:fc:f8:f2:49:
         e7:54:e1:37:59:b9:d2:99:ff:63:aa:b3:40:e6:c1:d3:04:ea:
         b0:09:17:e0:4d:9f:dc:2e:5c:cd:f9:d8:c3:4c:eb:fc:33:28:
         3b:d5:7b:52:17:3c:92:97:f3:5b:34:cc:25:08:0f:43:0b:56:
         c4:ef:ad:3a:c7:b9:df:4f:19:a6:60:80:d9:3b:c2:e3:0c:92:
         d3:b1:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:56:32 2025 by rpki-client