Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          Q7CGQjUHE7KjcUIywrSoFEm4pfAoB9w+ZrUSCRjy22c=
Subject key identifier:   54:85:41:C7:F4:5E:38:75:2E:8A:FD:BD:78:B5:2A:D1:49:53:31:73
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          0634
Signing time:             Fri 18 Jul 2025 23:01:59 +0000
Manifest this update:     Fri 18 Jul 2025 23:01:58 +0000
Manifest next update:     Fri 25 Jul 2025 23:01:58 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: Hio+tB2mDmwhvarSHhCIXPuq2wFJJqmQDiyG59td5C8=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: 3i3Obqp5nv0g5N9cz3IbC+KBKlhtiXr0r1G3L5MWY/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Jul 18 23:01:58 2025 GMT
            Not After : Jul 25 23:01:58 2025 GMT
        Subject: CN=687ad266-b507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:1b:e8:f8:8a:8b:73:97:f7:17:7f:cd:55:
                    ef:70:73:da:4d:de:17:54:20:ab:48:41:95:c6:a3:
                    9a:9c:d5:77:2c:0d:cf:44:a5:85:f5:6a:4b:96:65:
                    0b:e9:25:5b:a8:cd:d6:0f:7c:fc:b1:d3:d8:26:a6:
                    35:09:e8:3f:40:a1:9f:c7:2d:78:b4:71:83:73:13:
                    ed:94:1b:ed:bd:96:2f:3e:d1:31:f8:57:c3:5a:f9:
                    ef:bd:ba:40:bb:64:72:97:ed:c5:16:3e:e5:b1:70:
                    a4:4a:16:05:0b:27:fd:88:3a:6b:6a:91:9a:8f:66:
                    ce:a4:04:26:01:22:97:2d:4d:95:54:ac:6a:42:64:
                    af:f9:ce:44:bf:c4:64:25:bb:4e:b7:d3:3c:c1:12:
                    1b:bb:34:a2:0b:d8:7b:85:bd:81:13:87:c1:5a:97:
                    88:93:9b:ca:4d:33:37:69:70:91:eb:bc:cf:66:01:
                    6a:99:1d:46:07:99:82:54:61:c2:d4:b6:e0:ae:17:
                    1f:b9:94:68:87:19:ac:c3:f9:b2:57:e9:42:bd:14:
                    9f:ab:4b:6d:0d:13:ef:d3:4c:cb:41:74:f8:69:49:
                    90:cd:f2:02:c2:3e:e6:e8:6b:49:f6:92:c7:eb:29:
                    0f:6d:48:dd:f0:a6:ab:de:d7:0a:dc:26:f0:b6:c0:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:41:C7:F4:5E:38:75:2E:8A:FD:BD:78:B5:2A:D1:49:53:31:73
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:aa:f7:ac:88:d3:1c:89:46:ce:ca:2d:7e:b2:65:21:cc:
         9d:2a:0f:ed:5c:a9:9a:8d:1f:97:45:58:01:f8:1c:37:3f:37:
         df:d1:11:49:28:73:7b:d0:72:54:46:c5:3c:2d:6d:bd:9d:90:
         a9:da:7c:ce:34:09:92:0e:82:6d:27:4f:d7:ea:9d:84:9c:20:
         6e:97:d7:83:d4:62:4a:6a:c9:df:12:88:42:ed:f1:41:35:95:
         09:b8:e8:63:7c:09:21:18:c0:60:4f:12:4b:8f:40:80:39:e5:
         43:ad:63:00:6a:fd:6d:81:85:0f:81:ec:e1:9a:ac:9a:79:5f:
         fa:c1:a6:2f:4e:cb:dc:88:fb:6e:d0:39:d8:70:bd:bd:6d:5b:
         3a:a2:f8:19:56:40:5b:fd:56:15:6e:6c:78:a9:d2:fc:13:92:
         01:8c:8c:19:48:48:ac:58:d8:34:2a:48:38:cd:fa:bd:f0:82:
         fa:b8:f4:df:61:bb:06:e2:37:e7:a4:4f:37:26:6a:7e:e2:be:
         8f:eb:23:88:53:28:67:41:9c:c4:55:3a:5e:36:eb:be:6f:82:
         10:f3:cf:cc:0d:1f:9d:5c:28:bc:92:66:eb:7c:62:ea:75:40:
         08:b2:6f:7c:94:95:18:40:78:2e:4c:ff:4b:8c:7a:89:44:28:
         bc:93:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:02:11 2025 by rpki-client