Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
File:                     sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft (raw, json)
Hash identifier:          RYxh+Ibs9tAXuxNTvOQwPW8DVLvCjQLjnYOQ229EdkE=
Subject key identifier:   D6:F0:36:58:5D:DF:94:5E:D9:4F:FD:A3:71:2D:14:1F:97:C8:46:95
Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB
Certificate issuer:       /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
Manifest number:          0E1C
Signing time:             Fri 18 Jul 2025 19:02:23 +0000
Manifest this update:     Fri 18 Jul 2025 19:02:23 +0000
Manifest next update:     Fri 25 Jul 2025 19:02:23 +0000
Files and hashes:         1: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl (hash: fEM3iOoWK2L3jANyDkcaMz77pkQlUcJ4SZV91Sk3TAM=)
                          2: 16D76086A0A811EF88ED2026C4F9AE02.roa (hash: xXVPh1g488DDZ2eC7px+JMoDM3ZGXGyVRE09L+pr9Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl
                          rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA25, serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
        Validity
            Not Before: Jul 18 19:02:23 2025 GMT
            Not After : Jul 25 19:02:23 2025 GMT
        Subject: CN=687a9a3f-db35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:22:d7:96:7a:7f:e5:34:74:c7:7b:e4:31:
                    26:4b:20:f3:9d:04:85:e8:d4:61:fe:ce:19:f3:c1:
                    be:b1:d6:3a:1a:97:00:7f:45:44:25:3c:fc:9d:d6:
                    ef:1a:37:c8:4c:6c:9c:07:3f:49:ce:b3:aa:4b:43:
                    21:33:e8:81:c9:f7:25:c8:51:14:0b:25:49:4b:22:
                    ff:f9:65:77:27:7b:d1:ec:0a:04:54:8a:a7:b3:af:
                    74:26:aa:77:3a:53:48:1c:fd:65:f0:ae:21:60:5b:
                    86:6e:04:d0:22:85:c1:96:14:98:78:a9:86:32:b5:
                    fd:35:f4:47:95:9f:5f:0b:aa:d3:98:e5:eb:e2:7f:
                    42:d4:7b:31:21:ba:1c:d2:07:99:87:6f:65:aa:ce:
                    73:1b:d2:d3:5c:17:e8:c8:51:49:3e:4e:1f:33:c6:
                    13:cb:a8:53:57:00:c1:9d:16:61:a7:f1:8d:0c:11:
                    4f:1e:0b:f3:66:a0:5d:bb:5e:34:51:bb:d4:f6:4a:
                    14:e7:0e:66:f3:2a:68:d5:e0:47:69:2f:c5:2a:8f:
                    fa:1e:f0:d1:50:63:aa:8f:4b:ec:eb:45:e0:6d:f4:
                    6e:51:aa:89:aa:96:f0:46:ff:a3:34:93:30:df:ea:
                    ff:3f:ec:6d:69:79:f6:22:c6:76:39:d0:20:11:74:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:36:58:5D:DF:94:5E:D9:4F:FD:A3:71:2D:14:1F:97:C8:46:95
            X509v3 Authority Key Identifier:
                keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:44:ae:38:32:29:ad:0e:d6:86:23:71:77:5b:c7:39:0e:
         84:8f:5d:83:60:ac:2c:75:bf:51:92:25:fc:e4:22:25:99:7b:
         4f:20:47:7e:8e:99:d7:5c:c6:54:d0:31:58:dd:40:92:58:b8:
         18:8c:59:a3:ba:b6:48:3f:22:b8:c4:38:3e:90:16:aa:e2:27:
         38:f1:bc:44:af:1e:62:1c:5e:da:21:e5:3a:78:1d:e3:8c:ad:
         56:8a:16:6c:7e:3b:f5:71:c5:55:f5:7e:ad:e8:f8:2e:9b:19:
         5a:a6:b0:dd:66:c1:9d:0b:c1:08:11:66:db:5b:91:bb:53:43:
         4f:41:74:74:67:d4:ca:f4:0e:77:f7:7b:a8:ca:1a:6e:3f:b0:
         5a:d4:32:40:cf:7f:b9:54:1a:b3:fb:d0:67:77:3e:4a:00:c8:
         b6:b3:32:76:ef:76:ea:46:26:1e:81:e9:de:27:d3:78:a6:73:
         fd:f2:b5:ee:94:c8:1b:df:01:bc:60:9c:9a:c1:72:e7:88:94:
         b8:2e:eb:63:cf:7d:ab:0f:99:23:0c:ab:d1:ca:83:0a:89:71:
         fd:6d:9b:1d:fa:c4:cc:1e:14:a0:07:3f:c3:70:27:65:32:64:
         af:bb:5f:67:bb:88:7c:14:5c:7a:cd:41:35:70:13:6f:d0:4b:
         72:20:89:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZBMjUxMTAvBgNVBAUTKEIwMDE0QTgzMDZDNTJFNDA0RjY3Q0EyRjhFNTg2RjlC
ODY4RThDQUIwHhcNMjUwNzE4MTkwMjIzWhcNMjUwNzI1MTkwMjIzWjAYMRYwFAYD
VQQDEw02ODdhOWEzZi1kYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVYi15Z6f+U0dMd75DEmSyDznQSF6NRh/s4Z88G+sdY6GpcAf0VEJTz8ndbv
GjfITGycBz9JzrOqS0MhM+iByfclyFEUCyVJSyL/+WV3J3vR7AoEVIqns690Jqp3
OlNIHP1l8K4hYFuGbgTQIoXBlhSYeKmGMrX9NfRHlZ9fC6rTmOXr4n9C1HsxIboc
0geZh29lqs5zG9LTXBfoyFFJPk4fM8YTy6hTVwDBnRZhp/GNDBFPHgvzZqBdu140
UbvU9koU5w5m8ypo1eBHaS/FKo/6HvDRUGOqj0vs60XgbfRuUaqJqpbwRv+jNJMw
3+r/P+xtaXn2IsZ2OdAgEXTvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbwNlhd
35Re2U/9o3EtFB+XyEaVMB8GA1UdIwQYMBaAFLABSoMGxS5AT2fKL45Yb5uGjoyr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE
QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxrQlBaOG92amxodm00YU9q
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxr
QlBaOG92amxodm00YU9qS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJL0SuODIprQ7WhiNxd1vHOQ6Ej12DYKwsdb9RkiX85CIlmXtPIEd+
jpnXXMZU0DFY3UCSWLgYjFmjurZIPyK4xDg+kBaq4ic48bxErx5iHF7aIeU6eB3j
jK1WihZsfjv1ccVV9X6t6PgumxlaprDdZsGdC8EIEWbbW5G7U0NPQXR0Z9TK9A53
93uoyhpuP7Ba1DJAz3+5VBqz+9Bndz5KAMi2szJ273bqRiYegeneJ9N4pnP98rXu
lMgb3wG8YJyawXLniJS4Lutjz32rD5kjDKvRyoMKiXH9bZsd+sTMHhSgBz/DcCdl
MmSvu19nu4h8FFx6zUE1cBNv0EtyIIli
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:33:52 2025 by rpki-client