Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
File:                     9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json)
Hash identifier:          w+8FwD93YB2WkVDiiPQQQh5wa4ile65aWYgCMxBDk3o=
Subject key identifier:   7A:A4:F1:DF:AA:C4:26:97:CE:65:46:CC:7B:4D:9D:8C:80:4B:7F:B6
Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
Certificate issuer:       /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Certificate serial:       100A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
Manifest number:          0FF2
Signing time:             Tue 22 Jul 2025 17:37:57 +0000
Manifest this update:     Tue 22 Jul 2025 17:37:57 +0000
Manifest next update:     Tue 29 Jul 2025 17:37:57 +0000
Files and hashes:         1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: DryT3RIq5izUt9IZHiuMftnypwmsX7PXf8KaQE0UJ9U=)
                          2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=)
                          3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4106 (0x100a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
        Validity
            Not Before: Jul 22 17:37:57 2025 GMT
            Not After : Jul 29 17:37:57 2025 GMT
        Subject: CN=687fcc75-0474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:04:01:32:5a:8c:66:03:fd:c9:5d:f7:ab:
                    b3:45:4c:4a:b1:2d:57:ca:e8:14:a2:34:6c:4e:cd:
                    8a:ef:3e:42:03:28:1a:99:30:93:0f:97:3d:e9:57:
                    53:5d:09:c2:67:92:f6:15:e1:13:a8:2b:7f:78:a2:
                    da:fc:86:0c:c1:95:4b:89:5e:44:76:4d:5d:d7:ac:
                    5c:81:38:2f:90:09:72:ac:ac:c6:b2:56:ff:9b:13:
                    23:39:20:97:1e:18:42:98:b0:33:c3:b7:8a:db:d9:
                    97:9b:82:aa:fc:ba:12:43:17:1e:5d:77:ae:12:a5:
                    43:d5:78:56:f9:92:09:32:c3:38:87:c7:73:e6:df:
                    a7:32:83:a4:cf:27:a9:aa:34:6d:80:4c:6b:e1:95:
                    2b:60:81:50:b6:95:1a:93:45:6a:7d:fb:ed:b4:a1:
                    f8:fa:22:c2:0b:c3:2e:7d:b5:30:ea:3e:8e:90:5c:
                    34:b8:6a:83:0d:e1:2c:9c:32:40:d2:f1:50:35:a3:
                    1a:07:ee:22:68:48:64:9a:20:10:9d:13:4f:8b:56:
                    27:96:3f:46:47:7f:91:94:2a:d8:2e:27:57:9d:d6:
                    0a:b2:04:ac:24:a3:9e:f9:86:54:24:0d:5d:07:59:
                    da:10:fa:47:05:c9:66:b8:2e:88:c2:d4:f8:80:7f:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:F1:DF:AA:C4:26:97:CE:65:46:CC:7B:4D:9D:8C:80:4B:7F:B6
            X509v3 Authority Key Identifier:
                keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:8c:6a:b0:c2:ec:54:0d:3a:0e:76:10:b9:e1:43:56:af:
         e2:33:22:b7:01:12:3e:b7:d6:96:f1:79:59:24:46:2a:48:c0:
         3b:79:ad:f4:15:7a:92:bc:34:48:d0:3a:28:91:99:78:ce:78:
         f6:81:cc:4c:ec:5c:5a:58:7a:45:10:84:c1:21:bc:62:ec:67:
         96:b7:6e:30:e9:a4:29:ff:0c:a9:55:0e:57:38:d9:39:8b:a4:
         4d:8f:ac:77:3f:2e:f6:64:d3:8f:2e:dc:9b:b8:64:1f:71:47:
         e4:93:2d:df:ab:42:25:ba:7b:8b:33:26:a4:a5:76:0e:08:c2:
         fc:67:1f:c6:5f:be:9e:43:ad:91:cd:2b:78:a8:95:4f:27:e0:
         61:cc:4b:fa:75:c6:73:49:5f:2c:c9:76:2d:f6:38:59:e0:5f:
         f9:94:e6:43:f0:b8:d8:f6:0c:41:54:54:7a:90:0e:5c:45:54:
         ae:81:fc:dd:a5:70:68:08:c2:ac:85:59:c5:d5:57:27:b5:9a:
         fd:6f:e4:c3:b0:fc:21:a1:5a:a1:7d:11:33:d5:28:6e:d9:aa:
         97:56:bd:18:c2:84:8f:48:ff:a6:f8:a7:2d:e4:bb:ca:12:1d:
         97:a4:27:bb:3a:6b:dd:8f:b6:16:db:5e:54:8d:e5:a5:a6:24:
         ef:1f:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:34:13 2025 by rpki-client