Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File:                     9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier:          MhlZ2n+HghzquhTVJpYPLkJE4wSfbPa5yxiDmkgSgnI=
Subject key identifier:   19:28:EA:BD:77:02:5E:8D:1A:CA:68:4F:4D:96:1E:11:33:AF:B6:2E
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer:       /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial:       0C6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number:          0C62
Signing time:             Thu 24 Jul 2025 18:33:35 +0000
Manifest this update:     Thu 24 Jul 2025 18:33:34 +0000
Manifest next update:     Thu 31 Jul 2025 18:33:34 +0000
Files and hashes:         1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: ElCJ5EQvSXZfLaGfgoVZ2fGbw6jfVtYW5Jlqlryenp0=)
                          2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
                          rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 18:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3180 (0xc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
        Validity
            Not Before: Jul 24 18:33:34 2025 GMT
            Not After : Jul 31 18:33:34 2025 GMT
        Subject: CN=68827c7f-0b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:15:b3:20:26:2a:16:91:b8:73:42:1d:45:
                    de:b8:58:da:39:8a:b1:57:93:d9:f1:b4:0f:68:51:
                    65:eb:20:3b:8e:c0:fd:2f:3b:79:b0:7f:f1:69:d2:
                    f4:8a:74:f7:5e:f7:41:63:45:a8:bf:ac:5c:a3:c3:
                    52:c8:f0:bb:75:65:bd:fa:13:c6:88:ba:28:c6:07:
                    08:70:66:9c:6b:84:71:7a:6d:39:1e:43:72:5d:a4:
                    1f:3d:dd:e4:b5:81:8b:c5:cb:79:ee:14:cb:c9:ea:
                    9c:67:89:cd:23:ca:d9:1c:ab:8c:15:b4:b3:c2:35:
                    47:46:de:42:e0:d0:91:ba:0c:5f:bd:f3:81:26:27:
                    6f:b2:f0:82:15:5d:4f:e3:9a:d2:e9:71:fa:bf:61:
                    78:05:c7:0b:1a:74:01:7a:dc:44:f6:79:fe:28:e8:
                    46:4e:ff:a3:9d:45:92:8a:ca:05:53:4d:d8:64:78:
                    a9:d7:e6:51:6e:63:99:95:3f:47:64:40:39:fb:57:
                    87:26:fd:ca:8d:8a:b2:43:56:17:9a:8c:8b:ca:38:
                    1e:0d:43:06:f5:a7:a3:df:f9:2f:ce:4d:fd:86:fc:
                    9c:3f:1c:4d:ef:49:b3:bd:bf:57:e5:84:40:26:27:
                    52:f1:c0:77:f0:ea:43:a9:9b:0e:f9:a6:30:a2:21:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:EA:BD:77:02:5E:8D:1A:CA:68:4F:4D:96:1E:11:33:AF:B6:2E
            X509v3 Authority Key Identifier:
                keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:16:e8:76:ba:fe:7d:15:54:39:a9:20:dc:3e:4e:6b:b2:
         04:58:e0:63:bc:89:93:b4:bd:6f:1e:e4:ac:e1:a6:2e:35:e4:
         ab:47:a9:1e:18:16:9b:6c:e5:97:bb:01:3c:11:c2:db:d5:66:
         65:c8:ac:f8:79:f6:a4:81:a3:50:a3:94:6f:f9:96:a7:05:de:
         c3:3b:09:e7:d6:11:f5:01:30:9c:3d:9c:05:d1:be:47:6d:02:
         51:72:68:2c:4b:31:d0:28:7f:36:89:9e:c0:5e:0d:72:91:49:
         6c:36:7d:cd:42:c1:51:09:4b:22:9a:52:70:98:18:bd:1c:e9:
         58:73:0c:77:93:6f:3e:31:95:05:8d:5f:9e:44:ed:09:ab:a9:
         33:68:a4:2c:95:2b:98:c4:8f:3d:fa:44:c8:b0:70:9a:47:b9:
         b5:0b:47:18:98:14:d6:1f:9a:66:fe:06:de:e4:f0:70:2e:22:
         5d:91:7b:0d:56:8f:8f:de:3f:7d:9a:8a:5a:92:db:95:f1:55:
         f9:6b:65:e4:d8:62:ee:6c:8c:c5:b7:f2:c5:fb:eb:f3:c9:7b:
         58:df:ca:fe:d0:73:15:da:46:ba:27:b4:73:0a:43:78:34:6b:
         40:8d:db:04:5a:9d:43:b9:6e:82:38:54:02:4d:34:5a:87:bf:
         f6:d8:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:04:32 2025 by rpki-client