Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          Q/X2oyRev/5UH6AWxoUMd8nFHcv5HyoTSrDgqTdoKLE=
Subject key identifier:   AE:FB:36:A8:44:84:27:93:5A:47:1B:84:BF:12:15:DE:E6:8A:C7:30
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0155
Signing time:             Sat 23 Aug 2025 04:19:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:19:54 +0000
Manifest next update:     Sat 30 Aug 2025 04:19:54 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: oI9p/HPsKiPJJaHAZ+x30zCrId91Y3obPwV0C3t5JHs=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Aug 23 04:19:54 2025 GMT
            Not After : Aug 30 04:19:54 2025 GMT
        Subject: CN=68a9416a-3b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:a7:4c:97:8c:f5:84:9d:7d:19:b5:85:5a:
                    87:65:e2:16:e0:ad:18:28:0b:96:c2:ed:ba:c1:95:
                    0b:09:4c:90:2c:55:76:1f:4e:30:8b:90:8d:cf:58:
                    02:38:af:80:eb:83:29:f0:f0:87:85:aa:ca:f1:72:
                    fd:22:92:49:d5:36:bb:5f:9f:df:0c:04:ed:a3:12:
                    96:ea:44:9c:24:60:16:49:25:3b:e6:b7:59:a2:8b:
                    13:b9:f5:a3:1e:1c:43:1e:9f:23:09:1a:ab:91:d5:
                    23:31:a2:96:ab:99:af:4c:b6:41:cc:d9:17:24:25:
                    e2:47:04:8b:06:6d:dc:1f:06:68:96:c8:67:5f:6c:
                    de:af:d4:1d:2f:6d:c0:72:b8:1f:15:a7:5f:83:7c:
                    44:59:76:4d:0a:81:e3:46:1c:7a:2b:62:b6:c8:b7:
                    80:77:ff:d2:c1:39:ba:61:cd:d4:56:81:9e:2f:d5:
                    8f:a3:6b:e7:3f:f8:3c:fb:33:80:c1:16:b0:28:21:
                    49:1d:11:70:5b:63:48:2a:43:32:90:0c:fb:b4:1c:
                    a3:b1:47:c3:71:c4:11:a1:e1:6c:d0:ee:40:64:84:
                    eb:89:31:2e:37:69:4f:18:e7:02:50:4e:18:ab:bd:
                    2c:13:1a:c2:89:d7:68:90:17:36:23:be:76:46:de:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:36:A8:44:84:27:93:5A:47:1B:84:BF:12:15:DE:E6:8A:C7:30
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:47:05:16:bd:d6:33:3f:dd:c4:b9:5e:51:5c:ea:83:a0:
         56:70:c1:e8:57:62:b3:34:4d:69:2e:80:4b:2c:f6:c7:67:7d:
         e2:83:e3:c4:2c:55:8f:c2:d6:5f:25:9e:10:45:e9:f9:36:8b:
         0e:f1:61:19:03:64:df:d0:97:a8:32:00:94:1d:f5:c5:00:df:
         ab:7b:23:09:e8:4f:f3:fe:7b:4b:4a:81:fd:92:34:23:d7:70:
         26:2e:46:11:66:7a:fb:98:00:a1:cb:c4:f7:27:74:1c:de:ee:
         47:a8:31:80:a2:70:97:4b:89:ff:9f:77:19:4f:98:3c:10:95:
         ad:cb:62:77:ad:e6:10:88:c2:5c:88:d6:16:ae:42:00:11:a6:
         17:8e:e7:26:56:ad:3d:05:fa:22:50:cd:97:f9:40:5b:a0:5a:
         53:93:7a:a2:e6:17:6c:50:1c:fa:e3:5d:bf:3e:a9:fd:6e:c8:
         06:42:4e:cd:ad:ee:96:8a:a3:ad:fd:2f:b5:e4:a8:7c:3a:36:
         97:9e:fe:5b:93:f8:3c:d4:02:58:59:a3:89:2a:39:2d:5d:e7:
         77:a9:f1:d5:0f:7f:90:b3:db:6e:de:34:8c:da:b5:2e:ef:f3:
         a5:ce:ad:00:19:0d:7c:78:b3:74:7f:bf:ad:e5:33:d9:6c:00:
         13:45:0d:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2
MUZEQkVBMzIwHhcNMjUwODIzMDQxOTU0WhcNMjUwODMwMDQxOTU0WjAYMRYwFAYD
VQQDEw02OGE5NDE2YS0zYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBanTJeM9YSdfRm1hVqHZeIW4K0YKAuWwu26wZULCUyQLFV2H04wi5CNz1gC
OK+A64Mp8PCHharK8XL9IpJJ1Ta7X5/fDATtoxKW6kScJGAWSSU75rdZoosTufWj
HhxDHp8jCRqrkdUjMaKWq5mvTLZBzNkXJCXiRwSLBm3cHwZolshnX2zer9QdL23A
crgfFadfg3xEWXZNCoHjRhx6K2K2yLeAd//SwTm6Yc3UVoGeL9WPo2vnP/g8+zOA
wRawKCFJHRFwW2NIKkMykAz7tByjsUfDccQRoeFs0O5AZITriTEuN2lPGOcCUE4Y
q70sExrCiddokBc2I752Rt46rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK77NqhE
hCeTWkcbhL8SFd7miscwMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF
MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3
TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzM0cFFr3WMz/dxLleUVzqg6BWcMHoV2KzNE1pLoBLLPbHZ33ig+PE
LFWPwtZfJZ4QRen5NosO8WEZA2Tf0JeoMgCUHfXFAN+reyMJ6E/z/ntLSoH9kjQj
13AmLkYRZnr7mAChy8T3J3Qc3u5HqDGAonCXS4n/n3cZT5g8EJWty2J3reYQiMJc
iNYWrkIAEaYXjucmVq09BfoiUM2X+UBboFpTk3qi5hdsUBz6412/Pqn9bsgGQk7N
re6WiqOt/S+15Kh8OjaXnv5bk/g81AJYWaOJKjktXed3qfHVD3+Qs9tu3jSM2rUu
7/Olzq0AGQ18eLN0f7+t5TPZbAATRQ1Z
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:33 2025 by rpki-client