Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          3HgZ1AGXB/Bj/dF1qbm/PICYg20tVuJjqrYffoK303s=
Subject key identifier:   32:3A:45:93:C0:6F:69:BB:18:DE:0E:FB:0C:98:AE:80:5A:3E:AA:2F
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          01F1
Signing time:             Sat 23 Aug 2025 02:37:55 +0000
Manifest this update:     Sat 23 Aug 2025 02:37:55 +0000
Manifest next update:     Sat 30 Aug 2025 02:37:55 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: K/gMtZW/A2gw+yi9sexhWe7yNwQp82Ng+PpQbZEBPbk=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Aug 23 02:37:55 2025 GMT
            Not After : Aug 30 02:37:55 2025 GMT
        Subject: CN=68a92983-d5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:63:b3:d1:5f:1d:65:6b:aa:61:f3:a1:6c:
                    25:34:58:2a:3b:26:f0:16:82:ae:75:ca:c7:c7:2d:
                    80:5d:1b:27:41:58:61:42:06:82:7c:ba:28:c8:0b:
                    5d:d1:ce:a8:2d:3c:1f:13:0b:9d:80:26:1b:df:e3:
                    de:98:6d:1c:02:02:3b:03:55:76:71:5f:10:58:ac:
                    27:8c:5c:2f:18:0e:75:f0:a3:40:12:b3:75:b2:14:
                    9c:2c:45:aa:00:6a:b1:7a:ad:aa:bb:34:47:67:b4:
                    a2:f3:20:8c:3d:9f:0f:7a:96:ed:fb:b8:e0:bd:4e:
                    56:0a:82:9c:50:65:d2:2e:0c:fc:aa:87:7d:5d:f7:
                    cf:ca:7b:25:98:91:85:26:0d:12:78:72:9c:32:72:
                    89:6d:64:09:28:94:99:f5:d4:df:e7:b4:db:5f:2d:
                    c9:d0:aa:37:6f:9d:b7:3f:92:02:8b:88:49:e3:96:
                    28:60:b4:e7:66:e9:ea:5c:c5:84:11:57:8a:0f:aa:
                    41:1c:0c:96:ac:14:5b:49:91:87:e8:e8:a1:de:35:
                    4a:53:8a:e6:c4:ed:c3:fc:06:fc:04:60:62:34:11:
                    4a:5d:b1:4d:54:cd:e4:c4:7b:45:6c:70:37:14:bd:
                    a6:40:b7:81:04:a5:2f:12:06:2b:22:1b:d4:69:6d:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:45:93:C0:6F:69:BB:18:DE:0E:FB:0C:98:AE:80:5A:3E:AA:2F
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:ef:7f:38:7c:68:1b:3f:71:a6:b2:0c:d7:41:b0:50:16:
         dd:e4:ef:d5:88:1e:75:74:e8:04:03:d5:be:e3:f9:25:d5:38:
         5f:08:36:81:03:47:0a:27:45:8a:1b:4d:86:e5:70:60:ec:7e:
         73:a5:46:ca:ae:6c:ab:2b:71:b5:88:54:4b:41:0c:86:0c:54:
         32:d5:e3:50:16:68:b3:2a:a0:22:14:0b:ee:ab:72:5b:5c:89:
         6d:3c:c9:54:1a:cb:10:d9:e1:3c:55:a8:ba:19:1b:0e:20:42:
         9a:9d:16:3b:35:b5:d8:40:7d:e7:f3:a6:56:b1:22:82:e9:b3:
         4e:47:11:cc:b6:86:35:16:9a:9e:4a:ef:f1:9e:00:4e:99:9f:
         88:63:cc:5a:18:54:0a:33:8e:24:8f:ff:88:a8:cb:04:ab:c4:
         53:b8:f7:e6:8e:65:50:b5:25:c3:59:4d:81:9f:5b:c6:25:d4:
         a4:61:c5:7d:a5:47:a9:0f:b1:b9:29:71:66:46:52:cf:ce:9c:
         0d:40:55:20:92:26:50:77:db:3a:8d:58:91:55:00:3b:99:14:
         47:04:71:a1:47:cf:17:4b:c8:4d:a1:b6:76:55:16:2e:2c:59:
         c4:40:6e:d4:8d:90:fa:fd:d3:97:63:ce:67:f6:a1:89:30:45:
         bb:94:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:30 2025 by rpki-client