Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
File:                     fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json)
Hash identifier:          LHrgiY0HnTTYBfDo+vvTfh6XZDqsdRcKjF5EZoY3dsc=
Subject key identifier:   05:CB:69:80:B4:7A:1C:7A:8E:53:9B:E1:9C:C7:DA:86:C1:9B:88:2A
Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
Certificate issuer:       /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Certificate serial:       10DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
Manifest number:          10D4
Signing time:             Fri 18 Jul 2025 17:27:45 +0000
Manifest this update:     Fri 18 Jul 2025 17:27:45 +0000
Manifest next update:     Fri 25 Jul 2025 17:27:45 +0000
Files and hashes:         1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: epqGL8QGMnc9Zi4SiOL/59jPKxc9pRqZP9tmmW3MORc=)
                          2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl
                          rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4317 (0x10dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
        Validity
            Not Before: Jul 18 17:27:45 2025 GMT
            Not After : Jul 25 17:27:45 2025 GMT
        Subject: CN=687a8411-ca2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:ec:a8:5b:a3:40:79:4a:03:7b:90:85:c7:
                    fc:78:5b:4a:79:56:3b:5f:c9:3e:d4:b9:f1:31:a6:
                    df:2b:97:a0:a7:07:af:c1:96:d7:2b:16:50:6e:7b:
                    14:8a:7f:29:9d:5b:a6:c8:25:20:4e:fd:81:06:cf:
                    3e:6e:57:ce:4a:d0:8c:82:e6:05:fb:b3:4f:ae:34:
                    a0:de:aa:a3:20:e1:ad:93:61:a5:51:34:c9:1e:91:
                    fd:92:a5:ad:ed:8b:e5:23:8c:82:c0:77:3b:12:59:
                    1b:f8:7b:7e:c3:f8:87:04:17:7b:88:b1:66:85:dc:
                    f4:27:70:3e:ea:df:7a:0f:79:55:29:44:d3:70:f2:
                    44:33:80:21:09:6a:a3:0e:52:2f:6d:f5:75:8e:18:
                    84:ed:08:91:24:c6:60:ee:fb:67:77:ef:87:41:d5:
                    de:2c:67:03:34:46:e5:34:f1:a5:d2:dd:1b:3e:2d:
                    49:03:f0:2a:5c:9b:09:5b:66:bd:87:a9:ba:d3:9e:
                    8e:91:14:d8:dd:69:ab:24:1e:8f:9c:57:2e:0a:23:
                    52:e9:1e:89:6d:6f:1f:36:19:aa:81:4d:92:8f:50:
                    1c:15:f4:c0:e5:87:3e:1f:95:df:a4:29:dd:e2:e5:
                    f4:f1:19:59:8e:f0:b5:50:cc:c8:31:bc:8c:a1:49:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:69:80:B4:7A:1C:7A:8E:53:9B:E1:9C:C7:DA:86:C1:9B:88:2A
            X509v3 Authority Key Identifier:
                keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:bd:3a:6c:54:d3:04:32:aa:22:69:4b:e2:55:b2:71:b0:
         59:15:42:d7:ec:65:fb:e3:25:64:e1:d4:11:97:9d:61:4f:6c:
         89:63:ef:e7:32:f5:41:7b:d3:cf:0c:7a:57:42:f2:a0:b8:00:
         11:aa:12:29:f3:5d:04:81:15:ae:7e:15:18:66:41:23:79:0f:
         23:91:b8:e0:06:2d:86:bf:96:bc:ad:7a:90:60:26:d7:44:8c:
         cf:e5:5b:af:fd:74:8c:68:02:38:e6:b6:11:b1:1d:d9:d0:01:
         d1:64:2f:91:15:40:d7:96:79:63:d3:b6:e5:ab:bc:15:b2:e0:
         26:69:3f:91:b2:c1:1f:0e:e7:7f:96:60:c8:e2:41:58:99:e3:
         2c:34:30:ad:52:e9:04:30:d0:fe:c9:b7:82:67:1d:d6:b2:c6:
         73:ab:0c:70:23:c9:d2:e4:99:4b:ea:e3:88:db:1d:77:32:45:
         7b:fc:2d:aa:ce:be:fb:a2:5f:9e:bd:52:06:93:ac:9f:01:0c:
         7d:1a:a4:0c:d4:c1:87:af:d8:0f:ac:7b:8d:02:be:bb:39:e6:
         6a:1b:3a:c4:23:2b:e7:e7:aa:23:0a:a0:bc:06:c1:70:d9:31:
         b8:de:e0:8e:0e:ca:6f:3d:63:10:3a:a9:95:18:6f:bb:5d:71:
         3b:fd:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:01:53 2025 by rpki-client