Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          PWirDXCy0kUYHmeyblBOo7zZtWXut4EpwIH5sP2NrbY=
Subject key identifier:   0B:72:CD:BC:CD:65:08:06:82:B2:8F:7F:45:00:56:64:29:75:96:C3
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          01D5
Signing time:             Sat 19 Jul 2025 02:58:47 +0000
Manifest this update:     Sat 19 Jul 2025 02:58:46 +0000
Manifest next update:     Sat 26 Jul 2025 02:58:46 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: KI7zYQZids9virPmdOCS7HT+YHUJf+mZ+Ubl1WmdoK4=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: acIP9bNBSWQVEKBII6hnoV+cuy/+F66JRfGEFST3yH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Jul 19 02:58:46 2025 GMT
            Not After : Jul 26 02:58:46 2025 GMT
        Subject: CN=687b09e6-d546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:c3:d9:94:5e:ec:f6:a2:4a:bf:98:d4:d5:
                    af:80:30:43:f3:fe:a3:84:b6:18:ec:c7:0c:d3:2a:
                    7a:97:89:d3:4b:b1:b5:ca:b4:44:2a:18:5e:8b:c3:
                    37:42:12:fe:3f:d2:e4:ba:0f:ac:3d:2d:76:6b:2e:
                    c7:a6:7c:93:51:27:17:f2:31:5c:f6:8b:4f:2e:93:
                    2e:7b:b9:c1:4f:ae:5c:68:3c:5b:e0:0d:d5:b0:fd:
                    ad:0d:2a:21:e4:67:a7:a8:67:50:2b:d5:f1:a3:9d:
                    f8:53:e9:91:57:da:64:7c:54:ab:e4:ea:b2:9c:c3:
                    50:91:15:1f:05:5a:9a:a9:0c:b9:1d:5d:3f:1c:fd:
                    a0:9b:f5:dc:f6:a2:af:a0:75:53:c8:fb:6c:51:12:
                    60:1d:8b:5d:b2:fa:f7:2e:05:d3:27:59:7a:20:85:
                    9e:61:03:31:72:a3:05:8a:b3:9e:73:18:5d:bf:b4:
                    d9:39:79:19:3a:41:cf:6f:c1:09:4a:85:76:eb:b6:
                    0c:60:64:84:95:cd:2b:23:c3:b0:9f:6e:e9:49:16:
                    66:e6:62:ea:46:b4:ea:fc:1b:1d:2a:ab:03:26:40:
                    e6:b7:cc:95:7f:c4:7e:8f:b0:26:2a:3d:35:65:e4:
                    54:38:a6:8b:e0:97:9c:37:2b:08:80:80:86:37:36:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:72:CD:BC:CD:65:08:06:82:B2:8F:7F:45:00:56:64:29:75:96:C3
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:20:31:e9:ac:65:53:2e:13:b9:13:50:08:1a:f6:41:8e:
         ca:34:a0:81:7f:c5:6b:be:8f:8b:8d:9f:43:e9:51:57:90:b9:
         07:74:34:36:87:dd:91:d7:e0:87:ac:43:aa:79:af:92:51:fd:
         a2:88:6a:dc:04:e3:7d:d9:d0:55:39:f1:22:70:a5:7b:bf:2b:
         76:48:d4:7a:02:c1:8e:2c:66:a5:1e:55:ae:c5:40:9f:6f:ef:
         27:39:c2:d4:67:d6:e5:08:19:83:26:0b:9e:23:c3:40:23:59:
         c5:41:11:b8:fe:26:ce:ff:89:a0:0f:37:0b:d2:18:6f:6a:f3:
         7d:e8:cd:e3:82:00:33:62:54:ba:70:d5:70:8e:1d:f7:3f:e0:
         cf:a9:98:f0:2b:1f:a4:c6:2b:81:78:ed:d0:85:61:91:d4:7a:
         31:d4:e6:10:c1:eb:f5:64:fd:3b:41:5c:1f:ac:cd:67:6f:6d:
         e9:b5:23:45:a5:70:e6:78:e4:63:c5:ae:ce:56:1a:12:d2:28:
         9e:11:ad:b5:80:a2:2a:8b:41:a7:76:47:51:e7:dd:93:9a:03:
         a1:ff:4c:48:96:56:a9:c3:6f:b3:7a:1e:36:e7:35:70:9a:23:
         a3:8c:6b:2b:a1:18:5e:3c:d5:3b:f3:8b:5f:2b:bc:0d:ec:61:
         78:c0:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:50:43 2025 by rpki-client