Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
File:                     E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json)
Hash identifier:          FTBpHkH8m/w8tUWfZL9NQH4Vig5KHytQSaJB9a9sX1A=
Subject key identifier:   70:9E:B6:B8:7C:F7:91:48:33:9B:55:46:82:D6:87:8A:F2:89:14:AC
Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
Certificate issuer:       /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Certificate serial:       087A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
Manifest number:          0875
Signing time:             Sat 28 Jun 2025 20:19:08 +0000
Manifest this update:     Sat 28 Jun 2025 20:19:08 +0000
Manifest next update:     Sat 05 Jul 2025 20:19:08 +0000
Files and hashes:         1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: Mt841MOizVBCBN8gZ0O+I6McFoIsxHl/bmJ4FeBreiE=)
                          2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
                          rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
        Validity
            Not Before: Jun 28 20:19:08 2025 GMT
            Not After : Jul  5 20:19:08 2025 GMT
        Subject: CN=68604e3c-27cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:d0:1c:d7:fb:e6:e8:f6:2f:ac:72:45:a9:
                    e0:64:70:af:77:7b:68:5b:1a:03:bd:ec:a0:e8:89:
                    2c:b2:19:02:0d:9f:96:6c:79:cb:45:b5:e9:9e:1b:
                    db:58:21:2c:79:b6:3e:76:86:d7:6c:ac:88:24:17:
                    9a:52:48:c7:e0:68:a9:04:79:e7:de:fd:2a:d5:34:
                    83:40:be:0b:c1:2e:7c:51:c1:38:3e:b0:a1:91:09:
                    ee:66:d3:29:af:56:a9:89:78:f0:9b:2a:95:d5:40:
                    ca:11:67:80:a4:60:87:27:8e:b9:c0:36:71:24:db:
                    57:a0:21:36:9e:df:4a:b3:2c:41:b1:c8:97:a8:06:
                    fe:6a:53:d4:b5:45:7e:49:54:6f:1a:08:99:7e:03:
                    18:c1:bd:09:01:2c:a9:21:6a:b8:b2:e2:50:a0:37:
                    80:f6:a7:ea:3d:07:cb:4d:bd:6b:ce:ec:27:7a:ab:
                    c0:35:a4:43:2b:07:71:e4:f8:9d:05:6d:4b:cb:5f:
                    69:48:d1:e3:27:d1:2d:e8:36:12:28:f7:ac:54:76:
                    7b:df:d5:f5:d9:35:9a:28:64:31:a0:04:20:7b:79:
                    9e:62:74:53:62:17:e6:4f:87:9f:e4:ff:95:05:f5:
                    f7:1a:45:32:b3:de:71:b1:c0:12:b8:95:a2:01:28:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9E:B6:B8:7C:F7:91:48:33:9B:55:46:82:D6:87:8A:F2:89:14:AC
            X509v3 Authority Key Identifier:
                keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:5a:56:09:7a:af:a0:4e:54:26:c8:57:75:29:df:3b:ca:
         b1:e1:e7:71:a6:3d:45:42:af:5a:d6:0b:7d:67:db:25:cf:89:
         80:7a:f6:ff:58:5a:8b:37:60:cb:72:06:7e:8f:bd:e1:77:b2:
         26:04:c3:f2:32:45:0c:49:9e:96:bb:31:b3:cd:d0:2f:fb:88:
         61:a9:51:d8:7e:e4:eb:cb:2d:4b:4f:23:18:f4:32:cb:18:ac:
         42:6b:19:3b:ef:94:79:01:8b:35:d1:39:63:64:91:6c:02:28:
         2e:d9:d2:f3:74:a0:81:04:db:18:3d:16:41:b9:ac:ec:f6:e8:
         c1:75:e5:5a:4c:8c:54:56:25:7e:42:a5:3b:48:3a:90:e2:c7:
         06:05:47:21:8c:8f:8f:ae:91:0c:d8:17:f5:d8:15:55:e5:07:
         af:79:39:05:14:9b:b4:a1:13:0a:47:06:c6:c2:e7:0b:d3:d6:
         6d:cc:35:cc:7a:6c:98:55:13:59:ba:36:4f:47:d9:75:d4:1c:
         83:bf:e5:11:01:32:e3:1f:b3:c8:e4:58:53:e7:26:d4:7f:47:
         5b:39:b9:a5:7f:33:df:ac:fe:93:6e:a3:4e:f1:33:ab:fd:db:
         e6:7a:37:ce:73:8a:ae:cb:da:9c:26:98:2e:d9:05:06:51:2e:
         f5:91:b8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:19:30 2025 by rpki-client