Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File:                     xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier:          ahUnp5u1pFsi2uw1eORTCHt6J4wP5EFmVi0w3OgTq5Q=
Subject key identifier:   1A:11:F9:44:D7:C6:2F:07:DB:AE:C7:CF:DE:28:90:AD:4A:87:A3:09
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number:          01BD
Signing time:             Sat 19 Jul 2025 03:32:16 +0000
Manifest this update:     Sat 19 Jul 2025 03:32:15 +0000
Manifest next update:     Sat 26 Jul 2025 03:32:15 +0000
Files and hashes:         1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: x6yl1V7t0nsGvckdOnjEzzdOQctY+uE3e5sOjXviDbQ=)
                          2: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=)
                          3: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=)
                          4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=)
                          5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Jul 19 03:32:15 2025 GMT
            Not After : Jul 26 03:32:15 2025 GMT
        Subject: CN=687b11bf-5b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:6f:e0:11:69:43:5c:36:64:97:84:72:04:
                    ae:da:86:9f:47:54:f3:4b:b1:68:d1:67:79:fb:04:
                    98:cf:50:fd:ec:c4:cc:44:6b:ac:9f:51:20:8e:32:
                    db:77:8e:62:97:ba:6e:28:df:2d:53:ec:bf:65:e2:
                    8f:6d:67:89:71:74:91:da:1d:e6:be:1a:41:26:16:
                    0e:e1:95:82:1a:71:9c:4d:82:e4:19:72:fe:74:20:
                    94:3f:05:11:4b:be:38:e8:76:a0:91:f7:5e:0c:f1:
                    62:0b:e6:16:6b:8b:2e:4f:da:b1:19:19:55:a1:16:
                    47:33:74:39:ff:55:1c:df:34:b8:9d:ce:60:5b:5f:
                    33:27:19:91:59:b7:c7:6c:bc:46:2a:6a:e8:2b:3c:
                    ba:36:2c:4c:3e:22:e4:3e:70:c3:a9:42:4d:86:2b:
                    4d:b4:74:1c:85:aa:73:60:05:bd:f1:30:24:cd:98:
                    b9:fe:a9:c1:87:41:c0:b3:a5:58:02:59:f2:0b:52:
                    f5:8a:98:68:74:37:46:1a:7b:c9:21:4b:03:ec:b6:
                    b7:43:f6:10:de:ab:36:73:b6:d4:9f:c5:af:f4:b5:
                    83:43:fc:7e:26:0f:4e:8b:88:92:a8:c7:b7:80:f0:
                    53:e2:48:98:6e:1c:0c:07:8c:31:c9:76:4e:14:7c:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:F9:44:D7:C6:2F:07:DB:AE:C7:CF:DE:28:90:AD:4A:87:A3:09
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:7f:35:82:73:27:58:54:ee:30:81:ee:73:ca:66:c9:cd:
         d3:07:af:1e:a5:ee:8e:cd:0e:d9:c5:45:7f:44:8a:71:8e:cd:
         fd:67:8c:0f:ad:a6:98:f5:06:28:7f:39:15:62:ac:63:b3:c8:
         ef:42:04:d1:43:2b:9a:31:20:5f:ef:0c:22:a9:d3:04:a6:37:
         dd:0b:ef:1d:7a:8e:5e:bc:cc:89:d3:78:05:e5:0d:36:b2:48:
         f4:60:6d:b8:ec:dc:1f:08:27:52:eb:b2:a0:4a:2b:91:c5:3b:
         4a:40:4c:0d:63:6e:a3:5f:2c:37:c5:22:84:92:8e:cc:2c:c7:
         29:40:8b:41:06:93:9a:ee:59:62:83:42:88:23:07:9b:07:ff:
         4f:76:17:e4:74:04:ee:eb:dd:23:67:74:ee:ae:6e:65:17:34:
         f2:58:49:74:05:9b:b6:0c:02:bb:d8:20:15:84:f4:2f:de:83:
         99:b9:a8:90:e2:99:b2:a0:53:1b:89:46:64:fd:68:01:d3:69:
         1d:fb:0c:25:c7:48:e2:1d:c0:ec:34:96:c9:2a:43:64:f1:33:
         37:84:c3:c1:1e:48:f2:7e:67:be:ec:00:c6:d1:3b:3c:4f:81:
         3f:30:c1:a9:8b:3e:f3:3c:a9:a0:48:11:3d:79:c3:9f:37:63:
         a6:76:8c:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB
MjEzQTUzRTMwHhcNMjUwNzE5MDMzMjE1WhcNMjUwNzI2MDMzMjE1WjAYMRYwFAYD
VQQDEw02ODdiMTFiZi01Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEtv4BFpQ1w2ZJeEcgSu2oafR1TzS7Fo0Wd5+wSYz1D97MTMRGusn1EgjjLb
d45il7puKN8tU+y/ZeKPbWeJcXSR2h3mvhpBJhYO4ZWCGnGcTYLkGXL+dCCUPwUR
S7446HagkfdeDPFiC+YWa4suT9qxGRlVoRZHM3Q5/1Uc3zS4nc5gW18zJxmRWbfH
bLxGKmroKzy6NixMPiLkPnDDqUJNhitNtHQchapzYAW98TAkzZi5/qnBh0HAs6VY
AlnyC1L1iphodDdGGnvJIUsD7La3Q/YQ3qs2c7bUn8Wv9LWDQ/x+Jg9Oi4iSqMe3
gPBT4kiYbhwMB4wxyXZOFHyhGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoR+UTX
xi8H267Hz94okK1Kh6MJMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG
MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3
OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxjn81gnMnWFTuMIHuc8pmyc3TB68epe6OzQ7ZxUV/RIpxjs39Z4wP
raaY9QYofzkVYqxjs8jvQgTRQyuaMSBf7wwiqdMEpjfdC+8deo5evMyJ03gF5Q02
skj0YG247NwfCCdS67KgSiuRxTtKQEwNY26jXyw3xSKEko7MLMcpQItBBpOa7lli
g0KIIwebB/9PdhfkdATu690jZ3Turm5lFzTyWEl0BZu2DAK72CAVhPQv3oOZuaiQ
4pmyoFMbiUZk/WgB02kd+wwlx0jiHcDsNJbJKkNk8TM3hMPBHkjyfme+7ADG0Ts8
T4E/MMGpiz7zPKmgSBE9ecOfN2Omdoxu
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:21:55 2025 by rpki-client