Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
File:                     2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json)
Hash identifier:          fwsK+nuk0wzytb0sxBnNYr2rKtRidpxUNSdhYA9Ht1k=
Subject key identifier:   45:D1:97:51:3F:74:C4:38:32:CF:F5:7B:EA:CB:2D:0B:0B:01:D2:F9
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Certificate issuer:       /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
Manifest number:          071A
Signing time:             Fri 22 Aug 2025 22:03:08 +0000
Manifest this update:     Fri 22 Aug 2025 22:03:08 +0000
Manifest next update:     Fri 29 Aug 2025 22:03:08 +0000
Files and hashes:         1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: pBca17XeIfajFkbYEOAdqjdUI1Cp9FZxIlITdBklNtg=)
                          2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=)
                          3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=)
                          4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
                          rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
        Validity
            Not Before: Aug 22 22:03:08 2025 GMT
            Not After : Aug 29 22:03:08 2025 GMT
        Subject: CN=68a8e91c-4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:cb:81:78:49:26:10:4a:75:1a:d8:0a:2a:
                    a8:40:28:19:af:c6:a5:ea:8e:20:73:62:d2:0f:a5:
                    33:80:95:49:90:19:e8:de:86:e4:54:b5:8b:8e:8d:
                    cd:a5:19:aa:db:13:e9:dc:14:c6:75:73:d7:93:b2:
                    c0:5b:b2:57:db:0d:fd:99:93:30:c8:8c:ca:3a:dd:
                    29:47:40:48:80:37:3d:33:48:74:28:e3:7e:c0:75:
                    a2:66:5e:6f:ca:4c:0c:bb:83:c6:a0:28:84:bd:32:
                    48:09:35:3a:3d:04:e2:18:e0:61:97:45:18:04:b1:
                    ce:66:9f:29:58:e5:69:75:97:21:9d:88:1d:8a:ec:
                    ad:b7:0e:20:b8:cc:59:c0:9c:3e:03:49:78:cf:64:
                    fa:ce:fa:23:39:44:9e:bf:c3:c9:ae:33:d1:a0:da:
                    73:79:a7:aa:48:7c:d6:05:5b:4d:63:c1:74:06:08:
                    5a:4c:e0:48:c6:3e:50:3f:2e:8c:bf:c6:1a:f5:b0:
                    84:70:48:ca:fa:9a:b5:11:a1:48:ac:65:cb:11:c8:
                    df:ff:1c:00:fc:c5:83:bb:59:db:09:ac:00:02:61:
                    f5:3c:ad:f0:5f:b5:e2:3d:ea:bf:87:af:07:18:20:
                    c2:a5:02:95:ef:69:3d:75:81:fa:99:46:50:7f:57:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:97:51:3F:74:C4:38:32:CF:F5:7B:EA:CB:2D:0B:0B:01:D2:F9
            X509v3 Authority Key Identifier:
                keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:49:c1:a2:1e:5c:3b:4a:d7:cb:26:61:f9:f3:1e:e8:ff:
         0d:8d:c0:58:a3:2b:d2:2b:97:9b:bf:32:18:d3:4a:4c:1e:7f:
         e6:46:e0:dd:52:c3:63:d7:b5:b7:6a:5e:a0:c8:1a:65:a1:f7:
         7b:da:7e:cd:73:d9:0e:19:6d:dc:7b:4b:44:21:eb:9c:72:a3:
         c5:26:67:ed:bb:2f:18:cd:14:9e:9d:3e:b2:ee:9a:e2:8e:81:
         d9:a9:f6:73:52:7c:f7:04:70:01:14:78:e5:a9:38:19:14:47:
         f0:b3:b5:7b:99:b9:de:9b:54:5d:07:72:d0:84:02:95:92:6a:
         19:be:6a:cc:39:65:06:3c:78:31:04:43:d2:96:58:e4:09:96:
         b2:4d:97:d9:ce:7d:44:b9:06:79:ea:4e:42:cb:cc:36:41:cf:
         5c:80:1e:fc:c1:e2:14:85:75:e0:b2:12:a8:60:af:c0:78:ac:
         8c:fa:a3:90:da:ba:06:30:9b:4f:d8:7e:e2:3f:e7:17:22:95:
         ad:f0:e2:48:96:4a:8e:4f:8e:a8:8a:75:c9:02:c8:9a:d5:d0:
         de:b1:b9:1f:01:b3:14:d2:ab:4c:a7:38:46:39:a6:62:03:f7:
         3b:eb:71:ae:00:4b:37:52:2e:ed:4b:0d:a1:e9:13:ec:d0:30:
         f0:0b:e9:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD
RjIwOTQ4MzcwHhcNMjUwODIyMjIwMzA4WhcNMjUwODI5MjIwMzA4WjAYMRYwFAYD
VQQDEw02OGE4ZTkxYy00MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0g7LgXhJJhBKdRrYCiqoQCgZr8al6o4gc2LSD6UzgJVJkBno3obkVLWLjo3N
pRmq2xPp3BTGdXPXk7LAW7JX2w39mZMwyIzKOt0pR0BIgDc9M0h0KON+wHWiZl5v
ykwMu4PGoCiEvTJICTU6PQTiGOBhl0UYBLHOZp8pWOVpdZchnYgdiuyttw4guMxZ
wJw+A0l4z2T6zvojOUSev8PJrjPRoNpzeaeqSHzWBVtNY8F0BghaTOBIxj5QPy6M
v8Ya9bCEcEjK+pq1EaFIrGXLEcjf/xwA/MWDu1nbCawAAmH1PK3wX7XiPeq/h68H
GCDCpQKV72k9dYH6mUZQf1ddewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXRl1E/
dMQ4Ms/1e+rLLQsLAdL5MB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1
M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3
SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlqknBoh5cO0rXyyZh+fMe6P8NjcBYoyvSK5ebvzIY00pMHn/mRuDd
UsNj17W3al6gyBplofd72n7Nc9kOGW3ce0tEIeuccqPFJmftuy8YzRSenT6y7pri
joHZqfZzUnz3BHABFHjlqTgZFEfws7V7mbnem1RdB3LQhAKVkmoZvmrMOWUGPHgx
BEPSlljkCZayTZfZzn1EuQZ56k5Cy8w2Qc9cgB78weIUhXXgshKoYK/AeKyM+qOQ
2roGMJtP2H7iP+cXIpWt8OJIlkqOT46oinXJAsia1dDesbkfAbMU0qtMpzhGOaZi
A/c763GuAEs3Ui7tSw2h6RPs0DDwC+nP
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:06 2025 by rpki-client