Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          osbJKBO1ulrCiaGBBigAvNeDb8bYAvTmiPZ5tpx++bI=
Subject key identifier:   4A:95:A1:2A:97:D7:F1:B4:E7:3C:B9:0E:FD:A3:46:84:A1:11:BA:05
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          34E3
Signing time:             Sun 20 Jul 2025 15:00:53 +0000
Manifest this update:     Sun 20 Jul 2025 15:00:53 +0000
Manifest next update:     Sun 27 Jul 2025 15:00:53 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: 4RKC0PLZQ3OvaJCAsn1g9ng4NUX+wTDupUuQux0OdEw=)
                          2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=)
                          3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=)
                          4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=)
                          5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Jul 20 15:00:53 2025 GMT
            Not After : Jul 27 15:00:53 2025 GMT
        Subject: CN=687d04a5-2321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:fc:22:b1:78:5f:00:c6:2f:8c:73:ad:14:
                    e7:ad:20:9d:e7:97:8e:90:9c:65:e8:e5:d1:bc:50:
                    c2:85:86:90:be:fe:73:71:0f:a8:79:d4:bb:c6:d1:
                    e1:a6:2f:32:28:39:1a:07:7f:9f:d6:35:17:03:96:
                    c7:db:04:8a:8b:90:ba:8f:38:da:48:32:7b:54:6b:
                    9a:65:81:9d:42:97:82:f0:89:01:cd:3f:b1:61:43:
                    0a:f9:39:56:cf:42:57:2c:63:64:09:b8:53:63:e5:
                    b9:83:ed:3d:05:b3:d2:ca:3f:84:6e:e5:f7:8a:92:
                    e6:1e:79:d1:6d:85:0f:53:16:54:e0:34:6b:54:0c:
                    14:35:fc:6d:76:4b:2f:ee:e3:17:81:19:c3:f1:65:
                    5f:38:6d:67:2f:d3:64:a1:b6:1c:20:f5:85:a2:7f:
                    92:7b:f8:b9:96:58:e2:96:2b:1c:15:26:87:fb:5b:
                    ec:ad:d3:db:6d:1e:7b:d8:72:a1:6a:74:da:e7:a5:
                    49:67:80:f4:c5:3e:f0:3d:4b:35:f6:3e:26:6c:58:
                    18:0f:02:e8:41:92:48:47:98:7c:61:79:6c:b1:b0:
                    1f:46:0c:f7:8a:2a:ac:14:f1:25:39:58:2b:33:65:
                    e2:f6:8d:e3:81:94:73:36:d7:cf:dd:45:aa:8c:70:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:A1:2A:97:D7:F1:B4:E7:3C:B9:0E:FD:A3:46:84:A1:11:BA:05
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6d:ec:74:0c:53:12:80:13:d9:26:f4:a4:4a:e8:19:bc:be:
         b2:ef:62:d6:d7:6a:c0:65:c3:93:59:78:b0:82:25:48:de:0c:
         b3:bc:20:c4:15:f5:c1:d6:6c:db:d3:ab:20:4f:47:69:a7:c3:
         c1:ca:d5:b8:ac:8d:87:1f:0d:c2:ea:7b:09:bf:17:53:5a:fd:
         63:f9:64:36:4d:8b:44:64:19:e8:90:11:2b:af:5a:f0:3e:78:
         eb:e5:27:df:1b:64:1a:06:9e:fd:f0:24:a2:07:a5:0f:b7:36:
         63:6c:6b:9d:05:b1:9b:36:f3:9d:66:7d:9c:dd:1f:44:76:f3:
         87:e0:57:99:e7:c5:ca:8f:d7:20:cb:2f:fe:04:07:f4:7b:df:
         21:56:86:b0:9b:82:6a:a0:14:bd:93:71:2e:4f:b1:ae:a7:de:
         ee:fe:ae:03:d3:1d:10:0a:fa:55:19:40:8e:4c:b9:75:56:e2:
         73:ac:a6:72:dc:19:2c:94:62:9d:80:16:0a:95:1d:fe:f3:0b:
         35:b1:34:13:62:7b:c2:b8:70:53:14:4e:fc:25:22:44:dc:ea:
         0e:95:f7:95:76:25:2e:38:d4:f1:8c:26:c8:a2:d7:1e:6c:10:
         f2:31:45:59:9a:89:fd:3b:d6:88:c0:2d:db:c7:b2:7f:ee:48:
         63:4a:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:06:35 2025 by rpki-client