Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          RRXWxln5u1Kovs6hKcZHvBVZSUjO+tLK20hHqwar6EA=
Subject key identifier:   F5:B4:3B:BE:AB:B7:D5:12:61:00:53:79:CA:CB:1E:21:6D:EA:88:A3
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          07DF
Signing time:             Fri 22 Aug 2025 21:26:37 +0000
Manifest this update:     Fri 22 Aug 2025 21:26:37 +0000
Manifest next update:     Fri 29 Aug 2025 21:26:36 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: vlz3tAuGoIRjiFwOKD3uyTGeJV5ZBKuPQ3LF4GgcvQo=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=)
                          3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=)
                          5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=)
                          6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=)
                          9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Aug 22 21:26:37 2025 GMT
            Not After : Aug 29 21:26:36 2025 GMT
        Subject: CN=68a8e08d-f28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:41:8d:6a:cd:aa:08:82:f2:9b:47:9a:fa:
                    14:d4:71:49:1d:53:45:fb:c6:82:c9:40:34:94:8c:
                    8b:85:b0:f8:6f:69:28:99:9d:df:35:20:89:29:41:
                    45:e0:ef:aa:33:be:b3:26:0e:98:99:da:86:46:2b:
                    59:d0:d4:66:ff:e0:35:74:14:8b:82:24:ff:1c:92:
                    82:76:d8:85:30:56:63:97:7b:34:58:7f:b9:d4:01:
                    f7:e0:25:03:ac:df:75:dc:23:21:f6:fe:58:6c:1c:
                    89:79:c1:c8:fc:5d:b6:a8:8e:50:c0:f6:6e:9a:27:
                    db:e1:07:ad:85:01:14:e2:e0:3c:a9:7a:82:1e:d8:
                    1d:4d:fc:36:3a:dc:23:fc:4e:ca:75:04:01:a2:2b:
                    62:e2:fd:2f:04:44:b9:59:3a:6c:23:63:ec:34:c2:
                    bd:3c:84:0c:82:23:4f:4d:a1:7c:db:06:be:3e:c9:
                    17:09:0d:9b:08:eb:e0:ce:8b:89:ee:5e:d2:18:7e:
                    ea:59:76:85:6b:23:f9:96:94:d8:39:45:24:53:37:
                    31:34:18:5d:37:c0:11:5f:03:54:68:87:a4:fd:68:
                    4a:de:91:a9:dd:7f:3c:bb:30:78:a5:7e:1f:ac:27:
                    a0:33:2e:a4:1f:a4:6e:c3:a7:d0:33:1b:f1:b9:f8:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B4:3B:BE:AB:B7:D5:12:61:00:53:79:CA:CB:1E:21:6D:EA:88:A3
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:d0:0b:74:f0:a4:7f:24:f6:4d:08:1e:67:41:dd:d2:49:
         30:9c:32:2b:c6:b1:79:3b:90:ef:8a:c1:ad:c5:75:ec:8e:25:
         48:26:ea:a6:cd:4c:50:ba:0c:cc:42:21:8e:f6:03:2e:e1:52:
         26:1b:fe:e0:d4:b2:ca:f9:90:e6:71:44:43:dd:1f:9d:ea:1a:
         31:76:9c:d3:cd:fa:8c:14:a7:de:46:56:5c:b9:41:0b:2b:a0:
         0d:e0:06:91:c5:0a:6f:70:9b:20:de:ff:77:4a:b8:08:ba:da:
         6e:9d:91:d9:3f:73:64:2a:18:f2:8a:c2:10:30:f4:a0:8b:39:
         8f:84:a6:24:55:f7:a8:3d:09:6e:e3:02:24:75:89:f3:60:8c:
         6e:d3:9b:42:23:ef:ba:71:5f:bf:da:98:2f:78:8d:15:59:b4:
         72:01:78:ac:cc:9b:9e:69:9e:17:07:72:04:5c:d1:92:1b:e8:
         cc:7e:e1:1b:1e:79:ed:f1:b5:36:e7:6b:79:b3:fd:8b:f1:d8:
         37:5c:0f:99:d8:f3:9e:72:d1:e5:64:ff:78:f3:e5:30:f6:d0:
         7f:5e:00:fc:9f:c0:5c:a8:ed:12:26:0d:a2:ce:15:83:f1:d5:
         16:82:77:08:40:34:23:4c:c1:9a:73:9e:81:e9:85:64:71:a1:
         33:b5:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:56:13 2025 by rpki-client