Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File:                     8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier:          a/A223CDE6UWN8Z8enf7+SdkD/DKGDr+uq3LkUQeTzw=
Subject key identifier:   41:72:5D:5B:5E:F7:8A:11:3A:FC:CE:52:01:95:BD:FD:48:55:B9:BA
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       351A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number:          34B6
Signing time:             Fri 18 Jul 2025 14:19:34 +0000
Manifest this update:     Fri 18 Jul 2025 14:19:33 +0000
Manifest next update:     Fri 25 Jul 2025 14:19:33 +0000
Files and hashes:         1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: lnPbiwrXOEgJu9fcwTVPWfwf5Oqy3lOPeK4bxkeWCHI=)
                          2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=)
                          3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=)
                          4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=)
                          5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=)
                          6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 14:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13594 (0x351a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Jul 18 14:19:33 2025 GMT
            Not After : Jul 25 14:19:33 2025 GMT
        Subject: CN=687a57f6-00e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:0f:56:11:02:5e:96:c9:3f:a9:c8:aa:c1:
                    e0:8e:4b:ff:cc:47:03:73:ed:73:77:ed:7b:dc:17:
                    95:44:3f:4b:3a:27:e4:3b:31:8d:97:d0:5d:fa:2b:
                    1f:37:65:44:36:e7:73:d5:01:d0:7a:bb:45:bd:84:
                    6c:67:08:af:8c:09:15:75:3b:46:36:53:f7:2f:02:
                    94:67:6d:d7:7e:fc:8c:97:dc:bb:38:c5:06:81:34:
                    07:19:b3:c3:36:0d:c7:4e:4a:d8:46:6c:c6:9e:28:
                    1b:51:c4:8e:05:52:ac:8b:2a:f2:bb:9e:70:94:41:
                    fc:f7:c2:a7:cd:b4:59:c6:cc:68:5a:17:cd:2a:89:
                    22:20:34:01:05:cd:95:d4:69:55:92:58:56:7a:73:
                    53:7a:f6:40:c5:0a:4b:f3:46:b0:a8:2d:c0:59:a3:
                    cb:eb:5a:60:91:e7:f2:6d:ac:62:57:7f:9b:ad:c3:
                    b9:58:fd:ef:bf:f7:9c:ef:07:3d:7b:d0:1b:c1:03:
                    5e:da:c3:87:db:dc:56:08:58:3a:a1:f7:62:ff:85:
                    8b:b8:a0:c2:a1:e5:84:9e:24:0c:4e:62:7a:3d:3c:
                    e3:49:64:2b:b2:9f:bf:b6:4c:3d:47:73:10:8b:a0:
                    8a:9b:8a:fd:f7:39:40:78:94:0f:3a:72:ce:5e:aa:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:5D:5B:5E:F7:8A:11:3A:FC:CE:52:01:95:BD:FD:48:55:B9:BA
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:5d:03:50:0e:47:0f:91:59:da:84:00:93:54:9c:c5:10:
         40:60:0c:64:d8:70:78:33:62:c8:ae:65:ab:04:51:89:e3:ca:
         08:d4:7a:6d:fb:b2:f9:ba:fd:d0:30:43:91:b8:8d:34:02:e5:
         d9:3f:61:7f:7c:03:ae:ed:df:e5:bb:28:a3:f1:7b:6a:e4:1e:
         e7:be:19:f8:ad:3b:49:75:e8:e4:29:a0:6a:06:5d:21:88:b4:
         4d:ed:3d:48:4f:47:02:75:4c:7a:ae:a0:c6:8b:24:31:d1:7c:
         d6:25:bd:8d:d8:b6:d1:77:3b:43:c6:43:29:ba:cc:9e:b9:ef:
         b9:3c:9b:99:70:d4:f3:74:5f:ca:41:53:47:0b:c5:1f:1e:a9:
         79:2c:c1:ff:34:3b:77:22:67:c0:61:77:69:9e:f1:0c:20:8e:
         84:cd:c7:ff:e9:dc:85:6f:bb:97:0a:82:10:21:19:c3:9e:6a:
         c9:ca:b8:cc:de:fa:2b:bb:fd:a2:7e:0f:cc:6c:06:b8:9e:70:
         c3:42:2e:8e:e2:f1:3f:58:c1:69:97:12:3e:fe:96:2e:4c:f7:
         29:15:ab:e1:ad:08:35:fe:d8:36:3e:a5:9c:29:49:3d:89:cf:
         be:d5:56:5f:d1:18:e4:69:cc:7d:f6:09:28:b5:9f:c5:c2:9d:
         f1:db:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:20:58 2025 by rpki-client