Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
File:                     f_vcP3eaj5llMF597lHmpsU1_7g.mft (raw, json)
Hash identifier:          ftwoLg/3G9397SH/TKUUFyRbLep55hCdGw/etSXivPE=
Subject key identifier:   13:5C:4A:67:B4:9F:03:B0:E2:6F:44:0B:B3:90:48:BD:5E:97:22:5A
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Certificate issuer:       /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
Manifest number:          085F
Signing time:             Sun 20 Jul 2025 20:49:13 +0000
Manifest this update:     Sun 20 Jul 2025 20:49:13 +0000
Manifest next update:     Sun 27 Jul 2025 20:49:13 +0000
Files and hashes:         1: f_vcP3eaj5llMF597lHmpsU1_7g.crl (hash: Hwna3ojVrARnvtk94eFh9fT3zkHTgN5gYgSNqoGLgZU=)
                          2: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (hash: 1uFjTFe9Amsbq8/7U9vAw2GFeZcNsCf1O+GdbeaI35g=)
                          3: EF76C18C071C11EF9CF42877C4F9AE02.roa (hash: E3TzLkNtv/k+JSiXVZ+yE4299EE9gUcobjsGLwBVBpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl
                          rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 20:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
        Validity
            Not Before: Jul 20 20:49:13 2025 GMT
            Not After : Jul 27 20:49:13 2025 GMT
        Subject: CN=687d5649-fd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:29:88:ac:8d:d3:25:c2:1a:1f:b8:eb:14:
                    a4:c6:0e:c9:53:69:0e:2a:a8:38:4c:8c:95:99:84:
                    25:8b:e7:31:8e:ce:b8:ed:3d:6e:f3:4a:10:7e:33:
                    f8:5c:0a:0a:2c:f8:ea:c8:7c:c1:f8:cb:78:b5:7f:
                    69:da:5e:84:f7:09:a5:c2:5e:ac:55:10:ad:3f:60:
                    b6:25:83:bf:bf:99:e1:ff:f4:43:d0:7e:a0:5e:74:
                    e7:81:a3:70:ac:b9:10:f2:ed:b6:fd:16:f1:12:9b:
                    09:5d:65:13:e3:0e:c4:a9:31:ab:2d:bb:0c:8f:54:
                    33:dd:8a:9c:67:08:b5:3a:dc:64:e6:23:55:8e:6b:
                    29:7a:fb:98:70:ba:8f:2a:13:b5:2a:e9:de:1c:f1:
                    31:65:b2:37:db:a1:5b:a0:0f:cc:6e:80:a2:ec:c5:
                    10:3b:b8:de:c4:73:ea:9c:36:be:d7:2b:77:3c:cc:
                    e5:f6:0f:e0:52:9f:ce:eb:8f:6d:af:9f:57:bc:c9:
                    c8:88:9c:8a:a5:b2:93:3a:b2:78:d0:13:2c:bb:b6:
                    81:0c:12:55:1b:8f:11:aa:a9:35:59:65:02:dc:b0:
                    c0:ae:a7:96:eb:81:55:e3:b5:e9:01:2c:81:6c:57:
                    c4:14:9f:a2:f5:c4:8f:90:b9:a7:68:e2:bc:54:73:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:4A:67:B4:9F:03:B0:E2:6F:44:0B:B3:90:48:BD:5E:97:22:5A
            X509v3 Authority Key Identifier:
                keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:01:a4:dc:f1:45:f3:6f:2a:66:01:2b:e2:a5:b2:b0:ed:
         3e:ea:66:e5:c6:f4:43:df:0f:c9:cf:62:df:ef:51:f0:a5:d4:
         e8:6f:22:f2:5a:c1:77:38:a0:7b:50:54:c7:93:83:35:86:f3:
         72:61:d1:49:9c:1c:74:2e:e0:b1:64:ab:ae:aa:f5:c6:20:ca:
         08:ce:12:22:76:3e:f6:07:9f:a3:5c:c8:e1:1f:09:a7:b7:c5:
         4e:98:e4:64:21:eb:9d:62:29:9d:ce:0c:ec:ae:c1:d9:79:98:
         96:9a:ba:50:f8:ea:66:c8:4e:57:68:68:d0:6e:08:c5:ac:2d:
         e5:e0:a1:0c:1f:52:76:9a:de:32:ae:2b:2f:bf:fd:3a:6b:62:
         fe:36:5f:23:92:33:58:4f:1c:b9:4f:c3:bc:f1:6d:bd:7a:1f:
         0d:9f:af:2b:eb:4c:1c:61:6f:92:49:06:6f:d4:1b:ae:a6:fd:
         4f:ca:05:1d:9f:e4:0e:08:29:f8:22:93:77:51:fe:29:1d:ee:
         2e:b0:e9:d2:86:29:a6:60:41:cb:4b:72:6c:5f:47:5f:b8:6f:
         3b:ae:ff:2d:f6:22:6f:02:7e:8f:b2:0f:a2:64:6a:b6:ac:21:
         ab:13:89:04:32:2f:12:1d:a2:c1:2a:3c:71:4c:d5:61:4e:44:
         79:fa:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:50:11 2025 by rpki-client