Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File:                     8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier:          GpS/46Gz22mqC3vZMrPBMfT4sQj/NCjlgNRmgtAsX5s=
Subject key identifier:   EA:D2:97:FB:86:8B:EF:9F:32:41:E6:4B:9F:8A:70:01:A2:60:9A:34
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer:       /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial:       05C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number:          05B1
Signing time:             Fri 22 Aug 2025 23:22:08 +0000
Manifest this update:     Fri 22 Aug 2025 23:22:07 +0000
Manifest next update:     Fri 29 Aug 2025 23:22:07 +0000
Files and hashes:         1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: aiB81+Cdwsgu0PtFuEcC+4oIrLFyaHTvqD1UyBdz4uw=)
                          2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=)
                          3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=)
                          4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
        Validity
            Not Before: Aug 22 23:22:07 2025 GMT
            Not After : Aug 29 23:22:07 2025 GMT
        Subject: CN=68a8fba0-909d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:09:87:c8:17:15:d8:cc:a6:64:bc:9f:e9:
                    da:a3:cc:74:2b:30:23:f4:5e:aa:3a:20:c2:58:bc:
                    4c:bf:13:e0:5e:5b:b6:67:a3:ff:f7:6c:d9:68:e6:
                    47:d8:c2:d0:1f:79:26:dc:28:0c:0d:d4:6d:fa:67:
                    cc:65:03:fd:83:07:4f:27:77:b2:d8:aa:68:04:2e:
                    fc:4a:f5:53:d2:8a:e0:6e:db:cc:7d:7d:27:4b:ff:
                    72:86:6c:0e:28:62:d6:e7:c6:6c:ad:22:5a:89:c0:
                    a6:59:94:07:1f:e2:10:d3:10:5b:ab:ed:26:c7:e1:
                    5a:24:e7:0e:37:09:f5:de:a0:86:4e:00:40:b3:08:
                    44:79:72:83:8f:7c:91:34:82:33:24:5a:6f:24:2f:
                    2b:ca:a1:6b:ca:5d:b3:a9:21:e8:8f:60:ab:49:12:
                    15:d8:5d:62:e0:5d:27:4f:a6:67:01:a2:55:ac:35:
                    84:fd:a5:b1:95:81:86:6e:86:69:2b:f3:fe:85:85:
                    70:b4:53:86:71:97:48:de:5a:ee:c6:08:47:07:25:
                    1c:cc:8d:3c:bc:67:f5:8e:1a:8b:8c:d7:38:1b:4d:
                    15:9d:7a:9e:06:12:75:ce:c1:60:62:02:e8:0a:03:
                    f0:0f:cb:2e:9f:93:62:f6:7c:bc:d5:76:d1:e7:8d:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:97:FB:86:8B:EF:9F:32:41:E6:4B:9F:8A:70:01:A2:60:9A:34
            X509v3 Authority Key Identifier:
                keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:0b:a0:16:f9:cc:eb:c0:88:49:de:89:de:35:e5:5d:ce:
         56:3b:03:ab:d8:07:86:da:92:ee:6a:35:8f:5d:02:12:6b:d4:
         1f:49:c1:18:d2:e1:37:a8:96:82:4c:48:fb:1a:ae:8b:6a:ed:
         92:18:ea:4e:c7:5b:f5:8e:2d:af:9a:68:2b:9e:0a:0d:25:52:
         85:2a:71:68:85:40:9d:24:0c:57:3d:d2:17:b8:ad:79:e6:b5:
         8e:1c:81:ff:e9:ce:04:b4:08:c2:1a:ec:84:05:7d:99:bb:e4:
         4f:d1:23:b5:7e:d8:88:31:82:6d:0a:18:7f:05:68:08:4c:c2:
         39:f5:88:fc:8a:18:bb:f2:4c:b6:8e:b1:6c:ab:9e:53:b6:0d:
         9a:61:08:98:6c:d5:2c:ef:a4:09:49:73:05:48:84:11:31:3f:
         a4:e5:9c:b2:f0:42:d0:8c:e6:82:3c:ac:22:51:d2:00:5e:f3:
         c9:73:f0:45:90:30:b0:4b:ea:9b:66:92:ca:72:db:2b:09:96:
         5f:f5:65:5f:29:8d:b6:37:c8:8e:8d:db:12:72:b8:87:16:5a:
         f5:e6:7b:46:11:39:1f:fc:5a:09:15:85:89:b7:c5:46:fb:81:
         a2:f6:71:df:72:79:dc:12:6e:b3:6d:d6:fd:9a:f3:54:6a:78:
         c6:62:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:04 2025 by rpki-client