Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          O8UJUsiE0HdvKcOT+2CNrN3Zkw0GOmhHk2isUrnbT9c=
Subject key identifier:   00:4F:8A:DB:57:96:92:32:84:C4:01:F7:91:A5:24:6B:C8:C5:0E:24
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0EFF
Signing time:             Tue 22 Jul 2025 17:47:24 +0000
Manifest this update:     Tue 22 Jul 2025 17:47:24 +0000
Manifest next update:     Tue 29 Jul 2025 17:47:24 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: P6QspARcLISNZ9GK10tJ4B3XfB0QSAUKib3Hl5B34OM=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3848 (0xf08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Jul 22 17:47:24 2025 GMT
            Not After : Jul 29 17:47:24 2025 GMT
        Subject: CN=687fceac-a280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:44:8d:89:6f:a9:c0:0e:87:dc:2f:3a:58:
                    a8:1b:fe:39:84:12:a2:7f:2f:e3:a9:61:10:f7:f7:
                    0a:0c:82:0e:5c:49:bf:5c:e6:39:d8:4f:31:0e:04:
                    49:6d:f4:71:ab:93:6e:f7:7c:62:84:7d:93:38:89:
                    7c:67:1d:d9:d1:06:22:7c:4b:ea:c9:ea:90:45:ea:
                    1c:02:98:07:b0:6c:df:c1:7b:74:ea:77:36:67:99:
                    38:78:a2:bf:f2:4e:bc:04:a3:70:eb:3b:3b:b0:22:
                    c8:cc:ab:29:39:f0:95:bd:d0:11:73:29:ff:a2:35:
                    14:45:fe:69:a5:5a:cb:95:e7:36:ea:7a:ce:4a:17:
                    3d:c0:b2:a8:92:13:c8:7f:05:54:80:dd:60:fa:17:
                    42:f4:38:00:10:83:66:c0:5f:15:9e:ab:b2:a8:fd:
                    7e:f6:39:dd:fb:97:46:95:cd:d2:9f:f9:43:de:46:
                    a6:51:ca:57:bb:7d:77:55:fd:9b:f0:f9:0e:3c:73:
                    ae:44:7a:eb:c1:98:e1:12:e7:c9:ab:54:6c:4f:f9:
                    0c:78:7d:42:50:14:aa:e0:37:d5:91:d8:88:4a:9f:
                    eb:98:7f:e9:52:9e:96:1a:e7:75:0f:9f:a9:c3:d3:
                    6e:25:e4:0d:95:7a:86:b5:e7:f7:0b:84:3b:66:6d:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:8A:DB:57:96:92:32:84:C4:01:F7:91:A5:24:6B:C8:C5:0E:24
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:51:1c:db:9e:74:f6:c8:ca:e4:c0:9d:47:bf:86:99:6b:
         6b:af:8c:49:4a:0a:b0:b9:c7:a2:48:ca:f6:2f:bc:9c:37:66:
         99:10:eb:6b:db:b9:06:35:1d:80:57:9f:ed:76:10:77:6e:0e:
         1d:c6:0c:a3:cd:c0:eb:1f:b3:04:7e:60:8d:3d:d6:53:1b:a6:
         c7:20:ca:af:3f:e9:38:cd:d6:65:43:d1:03:86:9a:c8:2b:42:
         e0:c4:b0:b3:ea:43:6e:13:cf:4f:ac:36:2e:31:38:7e:e4:3d:
         d1:52:5c:b8:eb:9b:70:9f:2a:40:d1:27:d2:fa:d1:80:8f:c7:
         90:af:89:19:20:2a:d8:9b:f0:c7:29:a9:b3:62:34:f4:44:25:
         f3:fd:d1:a0:ea:b5:f2:27:7d:fc:3e:e8:69:21:3b:c7:5e:07:
         fb:37:82:5a:29:a3:ce:d1:13:49:52:d5:35:eb:25:56:0e:e4:
         de:70:c7:43:09:88:f8:f4:45:ad:8c:24:66:eb:eb:1c:18:f1:
         b6:5a:2b:3e:cc:2e:d6:b2:cc:f9:a7:e8:3b:6e:0f:fc:e5:7a:
         3e:f1:05:65:81:bd:84:12:59:4c:09:cd:0b:62:6b:c3:19:95:
         42:b3:2c:a8:38:35:30:2f:02:23:d3:c1:ad:dd:6e:1e:bf:1b:
         0f:a9:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:46:25 2025 by rpki-client