Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File:                     sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier:          Veaf5MvZFMFwkGvvzdaQwT87OTFr0vhxZj8g7PjMTqs=
Subject key identifier:   3A:D8:5F:61:EC:78:55:1C:78:61:BF:B5:A2:C7:53:53:43:39:D7:55
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number:          0282
Signing time:             Sat 23 Aug 2025 02:04:02 +0000
Manifest this update:     Sat 23 Aug 2025 02:04:01 +0000
Manifest next update:     Sat 30 Aug 2025 02:04:01 +0000
Files and hashes:         1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: hVmZh3+s2w4v85oe3AG+CX5t4jxg5aaZBmS6/kZp5MY=)
                          2: 0F1BFF983C6411F08247312EC4F9AE02.roa (hash: 8qUuDVndIDg2NrEC8AKM8tdD0/103K09L9Yt7oBaFMM=)
                          3: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=)
                          4: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: QqcsybSo4IYcyiaXsqo+jWTeq4K18MPbnynQPtbdI+c=)
                          5: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: 1rvs0GBAuHrNAHdvsK+LkWPhncBagdhoXnnxzRRg5HA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Aug 23 02:04:01 2025 GMT
            Not After : Aug 30 02:04:01 2025 GMT
        Subject: CN=68a92192-9d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:d8:68:bb:60:15:71:e0:6d:24:f7:23:17:
                    31:34:e4:d7:95:32:00:c8:47:48:26:2a:83:f0:e2:
                    6c:fa:2c:65:1c:79:c7:70:e1:ab:16:8a:15:ff:52:
                    69:02:13:1b:a5:fb:52:ec:66:8d:4f:61:3d:dc:a6:
                    55:32:22:91:34:39:2d:fe:01:33:90:9a:c9:44:07:
                    44:6e:52:12:cc:d1:57:8a:12:ab:28:b3:27:89:1d:
                    45:79:30:b7:a8:eb:84:3c:2e:67:3f:cf:b0:8a:54:
                    92:40:28:bd:e9:3f:5a:b8:aa:04:fc:72:65:6e:95:
                    7d:08:5c:4c:2d:26:0f:d0:e6:0b:98:ad:c4:e7:d7:
                    3e:7f:b1:d7:1a:0b:ea:82:71:eb:38:70:62:76:68:
                    cd:09:b9:39:a1:62:86:48:e7:06:ae:e7:b4:65:3a:
                    83:7f:95:da:bd:ad:f5:ad:c6:dc:9b:6c:5e:a2:38:
                    31:4b:8b:62:40:0a:33:1e:06:92:95:f0:c7:c8:65:
                    84:bd:05:98:7e:32:12:6c:7c:9e:93:2d:04:f9:e8:
                    3a:be:ee:b3:48:08:4e:e0:f7:8a:31:8b:d5:b4:b8:
                    23:6e:ce:c6:24:0f:84:ed:42:7d:f0:8b:8a:4a:1a:
                    41:d3:77:b7:8b:08:9c:e4:30:a7:6b:a2:79:29:05:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D8:5F:61:EC:78:55:1C:78:61:BF:B5:A2:C7:53:53:43:39:D7:55
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:89:d8:8f:82:96:44:ed:97:43:2d:de:16:9a:5b:ef:d3:fc:
         3e:d1:54:23:30:8a:00:94:00:12:fa:24:29:5c:5c:91:c4:68:
         f3:27:72:6c:8c:dc:44:c9:b3:16:c9:64:6a:c9:29:f0:3e:17:
         6e:bd:f7:6c:ee:15:65:f7:19:82:21:7e:f0:f8:2d:22:b0:34:
         14:e0:e8:07:fa:f5:1e:c4:e2:9b:a9:ee:72:a4:f2:96:6a:a9:
         b0:3a:bd:bf:fb:0e:b6:03:e2:b3:c5:36:e0:27:e4:ed:2a:ba:
         16:d9:41:b2:ee:bd:93:0e:88:38:48:e7:59:d6:d9:c2:21:e0:
         e0:4e:d3:e0:fe:34:a8:07:4f:41:fc:ea:e0:f7:7a:be:be:c8:
         0d:0d:8a:79:74:ed:b3:c7:18:f9:6d:3c:d6:f1:ec:90:ed:3a:
         01:43:ee:99:a5:90:fe:b9:40:bb:a4:73:4e:84:25:33:53:b4:
         d0:ef:42:2f:d1:73:04:3d:2c:42:c7:b7:bb:56:96:41:6c:29:
         4c:6b:ca:e7:dd:56:79:62:7c:1d:ad:82:d2:5f:a2:a6:0c:86:
         d3:1c:0b:fa:13:9e:b7:56:a1:8e:77:11:43:7f:38:81:be:d4:
         d5:e6:d5:9c:66:71:16:72:c5:79:20:59:2f:ec:94:ff:49:f9:
         d5:cb:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:32 2025 by rpki-client