Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File:                     fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier:          VyrUYEz6InBiccm3IF8vI4tqY/aQRYKFo+chLiLVLp8=
Subject key identifier:   82:88:3E:26:85:04:26:AA:10:AC:89:96:A4:1D:4B:65:79:2E:FC:39
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number:          02EC
Signing time:             Mon 21 Jul 2025 01:34:07 +0000
Manifest this update:     Mon 21 Jul 2025 01:34:07 +0000
Manifest next update:     Mon 28 Jul 2025 01:34:07 +0000
Files and hashes:         1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: EUPR0z9m++zZ7tukuVpUdF72QzKmdmPW83HjelnM+AM=)
                          2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Jul 21 01:34:07 2025 GMT
            Not After : Jul 28 01:34:07 2025 GMT
        Subject: CN=687d990f-0bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:5e:ff:eb:50:e8:38:0d:8e:93:63:1e:32:
                    b3:66:2c:07:76:8e:58:c5:cd:22:6a:6e:df:68:7f:
                    d0:12:fc:ba:d8:a0:73:69:c8:9f:86:94:b7:ea:c2:
                    7b:4d:65:f1:04:08:47:2f:14:f2:bb:35:f7:50:33:
                    20:11:87:d6:d7:af:95:3f:30:6c:eb:cc:9d:80:0a:
                    56:fc:ad:9d:05:5f:ee:77:db:f1:48:c5:f1:91:2c:
                    62:d0:5c:60:02:3b:8c:23:7e:89:e2:b2:83:8d:13:
                    3b:9e:a9:9c:b9:61:ab:ea:c6:ed:41:42:db:39:a6:
                    6d:6c:ae:6d:e6:44:81:61:05:f3:b3:30:10:8a:0a:
                    15:f0:15:a1:6a:62:cb:35:c0:8b:c6:f1:64:bd:14:
                    7c:e1:01:b9:80:21:7c:1d:e5:e1:b3:30:ac:b4:71:
                    41:56:99:9a:0c:d0:c4:d8:a1:71:c9:62:3b:10:df:
                    fe:e0:0c:fd:94:71:82:3f:00:1c:fe:71:c6:e6:d2:
                    90:55:9a:07:6e:61:8b:83:bc:c4:ef:6d:eb:a3:a3:
                    74:e4:86:c6:ed:37:2f:78:18:a3:62:37:f0:93:15:
                    c3:af:64:2a:08:0d:2b:a8:94:ab:d7:bc:f4:31:b6:
                    8a:c6:aa:a3:98:66:ae:60:2a:36:14:a2:ca:6b:09:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:3E:26:85:04:26:AA:10:AC:89:96:A4:1D:4B:65:79:2E:FC:39
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:2f:da:cf:8b:eb:22:18:ff:7a:fe:f9:8c:94:33:9e:24:
         db:cd:32:ee:5a:7f:cf:10:31:fb:47:72:8e:18:a0:a8:c7:d0:
         87:95:8d:e3:97:da:13:e2:bf:60:ca:4f:58:8c:0d:26:14:30:
         e6:8c:de:1e:23:ea:45:74:33:1d:49:51:d8:df:40:49:5a:18:
         0f:17:c7:55:b2:21:99:95:a1:22:38:af:15:7d:88:a6:d2:64:
         65:8f:34:95:01:7f:dd:76:4b:d1:15:d4:3d:df:b0:76:03:45:
         15:68:10:5e:46:82:80:30:1f:c6:b2:95:84:7d:ee:20:e3:a7:
         9e:91:98:ea:52:b7:6c:f4:f5:a4:dc:91:e3:ad:98:5d:7a:e7:
         f2:6d:10:33:4b:9a:55:e0:a4:3b:18:d9:63:dc:90:2b:80:74:
         5a:2c:55:36:73:cc:af:1d:a9:b9:af:db:d3:9f:ec:b0:da:81:
         49:5b:06:8c:28:9e:aa:8c:21:64:c9:2d:14:4c:c4:f4:82:86:
         c1:7f:84:96:64:19:2f:14:55:0a:9e:74:5b:9f:54:69:b3:0c:
         37:f3:61:20:df:0d:a0:c0:29:0e:d6:1f:ce:ec:c9:08:30:b9:
         ad:20:66:56:e2:92:f0:cd:7c:2c:8d:cb:f6:fb:ea:08:2f:d3:
         d5:ea:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:27:05 2025 by rpki-client