Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
File:                     0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json)
Hash identifier:          bFv8fAUNsQvDCwfmDLZPRPZtVsfiC91Xuh1PqRTLYKM=
Subject key identifier:   BE:55:5A:33:29:5E:2B:78:D5:92:C2:8B:05:09:AE:AB:BC:F1:41:CD
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Certificate issuer:       /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial:       0827
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
Manifest number:          0811
Signing time:             Fri 22 Aug 2025 21:03:20 +0000
Manifest this update:     Fri 22 Aug 2025 21:03:20 +0000
Manifest next update:     Fri 29 Aug 2025 21:03:20 +0000
Files and hashes:         1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: rMfGL4SMRnj2ujX1eqw0z5bFvvSQ7ipbi6FuqvJcWhU=)
                          2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: vK7zDAtMwxZ46qmtLmdd+XyPCpBAd+F+Ur4M7PgRHvc=)
                          3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: ag0QXLN9VhtP4YSxCpypnephnV4TdElKmf1LeX8WRbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
                          rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
        Validity
            Not Before: Aug 22 21:03:20 2025 GMT
            Not After : Aug 29 21:03:20 2025 GMT
        Subject: CN=68a8db18-8194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:4d:e6:78:7d:34:3e:12:e8:cb:61:ca:20:
                    2f:7f:33:38:4a:f7:80:6a:d2:50:5b:c9:62:9e:b0:
                    4f:75:46:b9:d9:d7:f2:ce:e6:b1:9a:96:e9:63:85:
                    4b:2c:45:d2:8d:e7:7c:b3:f2:99:19:5d:74:13:3a:
                    84:24:8e:a3:e0:bc:79:09:da:10:75:65:44:0a:30:
                    9d:1f:b1:e5:7c:c3:a0:a3:bd:c3:07:fd:a3:fb:1e:
                    96:a9:da:e8:ec:d8:13:c1:00:88:b7:3b:47:3f:08:
                    3d:84:61:8a:e8:4e:cd:c6:67:24:66:5b:1e:79:13:
                    5b:b0:30:0f:cd:4e:e0:d0:fe:9a:1a:a0:6c:28:60:
                    4d:5b:d6:6e:0a:f4:e3:ff:2b:47:f8:00:70:22:47:
                    0f:97:15:cd:63:70:12:13:38:15:00:41:b0:3a:1a:
                    54:bc:9e:f6:eb:1e:55:fc:bb:6e:b7:b6:7d:4d:f3:
                    01:5e:22:44:71:88:08:af:61:ff:84:72:7a:e5:14:
                    5f:ef:11:67:c0:a8:d7:29:76:56:e3:eb:6f:40:a1:
                    f7:19:95:ad:f2:b9:42:40:1b:fb:16:74:b7:b4:e8:
                    58:27:1f:92:ca:ec:58:94:26:70:8b:20:3c:13:41:
                    12:c6:12:aa:f6:fb:97:ae:a7:fc:b6:35:1c:88:e5:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:5A:33:29:5E:2B:78:D5:92:C2:8B:05:09:AE:AB:BC:F1:41:CD
            X509v3 Authority Key Identifier:
                keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:80:9a:a8:45:b1:84:27:b4:c9:cc:a3:a0:a6:8f:26:b8:
         18:80:89:5b:a9:f2:00:88:d9:2b:23:c3:34:f8:7d:bd:84:45:
         d1:a7:76:9c:c9:b0:cf:54:73:4e:c8:4a:d1:7e:d7:e4:c3:e5:
         ac:24:0a:3a:44:e5:a4:35:2e:c4:7c:a5:52:dc:eb:c3:ee:b3:
         5f:06:ce:b4:07:17:9d:24:b2:98:68:11:38:5f:0d:1e:d7:7e:
         e1:24:35:b4:e9:88:1e:6e:d2:1c:82:c7:d1:6b:de:0f:ee:c9:
         6a:c6:6e:52:1c:5a:c2:a2:20:a6:3b:6b:7b:c3:0b:c0:34:bf:
         50:97:30:e8:26:f1:90:28:c3:e9:36:80:b1:23:5d:b9:4f:ac:
         16:d4:d5:73:a3:ea:3d:08:25:ac:a0:6e:53:8f:27:ef:e4:bc:
         b6:d8:1a:b9:eb:c3:56:f9:15:3b:b9:e5:2e:02:25:57:db:5b:
         bd:f7:a1:c0:bc:6b:2c:b0:ad:09:b7:32:14:01:12:94:a3:f8:
         5c:32:95:26:c1:f2:60:35:74:41:a0:67:1b:e1:e4:52:51:b7:
         2b:f7:a7:ca:5c:fe:be:51:b8:c9:cf:3e:49:90:ee:06:6f:89:
         53:bb:53:21:9a:18:93:75:15:3b:99:58:b7:f7:c3:1f:2c:f4:
         bd:28:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:21 2025 by rpki-client