Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File:                     lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier:          2G/lsDM7t7JnGgXlfQjH4g3v+M+Il2A1VMHyzzPe2h4=
Subject key identifier:   6A:69:C2:4D:57:DA:F1:3F:C3:C6:64:06:01:C6:CD:21:4E:B9:1B:4B
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer:       /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial:       07FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number:          607F
Signing time:             Sun 20 Jul 2025 14:15:28 +0000
Manifest this update:     Sun 20 Jul 2025 14:15:28 +0000
Manifest next update:     Sun 27 Jul 2025 14:15:28 +0000
Files and hashes:         1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: DvzDS9Xtp0p8h+eGS8S0FowvgwAzhdWqRU2t8lHdiXM=)
                          2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 3mG/DAHD47ieP+pHQ6Ko9KqnRvDpTJqoMQIZjKg03d8=)
                          3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: B5KSH4tVyudgx/M89rAS977NHCczXltU5o9B12V7IsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
        Validity
            Not Before: Jul 20 14:15:28 2025 GMT
            Not After : Jul 27 14:15:28 2025 GMT
        Subject: CN=687cfa00-2096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:f7:76:21:ce:77:0e:24:88:98:88:92:c4:
                    55:15:c9:ea:28:b1:aa:e8:c7:a8:71:29:45:ac:3c:
                    7d:b4:53:54:5e:00:16:98:53:95:2e:41:5b:c4:33:
                    9e:4a:28:c9:a1:0b:ec:09:69:81:af:9b:8a:24:e4:
                    e6:80:cb:58:71:ae:f5:1a:b5:74:5c:31:9d:69:e2:
                    00:0b:c5:e4:76:5b:64:53:e4:6a:a0:b4:b6:b5:06:
                    7f:9f:f2:f0:6a:34:e1:a7:0d:57:5f:30:c6:ae:21:
                    6f:2d:9c:1e:60:2b:f7:4b:ce:54:84:6a:b0:fc:f4:
                    d1:ca:01:09:d8:8e:cd:29:f2:14:af:ce:ec:e6:1c:
                    38:b7:c4:b8:6e:5e:29:0b:a1:9e:ee:9f:26:38:45:
                    56:db:f3:a2:83:75:22:23:3b:10:dc:5f:fb:c1:9a:
                    1c:7b:3d:a2:75:13:e5:31:d6:73:cc:3f:1c:93:0f:
                    23:be:00:96:56:0d:93:9d:b7:60:a0:44:a8:41:d3:
                    a5:90:b4:8b:9a:8b:76:74:06:93:83:1f:c2:6a:37:
                    1f:a9:d6:46:ae:bd:12:0c:53:e6:15:cb:9c:e9:65:
                    62:7c:0d:1b:61:85:3e:e9:f8:7a:d7:82:97:3a:37:
                    e0:6c:b1:c6:78:68:d2:77:b1:dc:db:2c:a8:25:da:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:C2:4D:57:DA:F1:3F:C3:C6:64:06:01:C6:CD:21:4E:B9:1B:4B
            X509v3 Authority Key Identifier:
                keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:0a:5c:87:77:c4:22:5d:d5:b4:b1:fe:e9:8f:54:8a:c3:fe:
         dc:cb:3c:d2:42:10:72:dd:19:2e:81:b1:e5:2e:0b:52:c3:70:
         9c:eb:24:41:c0:a9:37:d1:b9:36:52:2f:d2:01:a7:f7:ba:06:
         18:4d:23:66:ba:8b:16:bf:ce:ff:88:26:c3:63:93:9e:16:1a:
         fb:9a:36:19:e1:e5:e6:23:ab:ce:fa:14:65:1f:ff:92:b9:a4:
         88:e5:68:7b:06:5d:75:c1:e5:8f:19:c1:bc:e9:54:b4:ad:4f:
         cc:c2:8b:ad:ff:b8:50:5c:63:33:13:01:a9:58:f0:92:ce:29:
         73:fa:c8:54:fa:34:e6:a2:2d:58:d2:06:61:b2:64:fd:62:fd:
         9a:8c:2f:c3:fc:81:bf:c4:50:33:2c:3f:4a:96:ad:d9:e8:39:
         71:50:0c:ab:8e:63:a9:a1:9a:a5:d0:3a:bc:b2:e7:6b:a3:5c:
         ac:80:a4:75:07:44:2d:ca:23:bb:94:9b:91:5d:3e:25:f4:62:
         27:71:97:fe:3a:98:48:77:24:ed:dc:82:37:86:47:75:ed:e3:
         da:db:90:55:e4:29:bf:c9:d0:cf:3d:fd:ff:3c:90:ce:56:f0:
         27:90:ff:ed:46:cc:91:3c:ca:d5:67:ea:0a:17:63:f3:b3:38:
         26:1f:0b:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDk0RDU4N0I2RTc1QkYxMDhBRjVCNDI0OTIyQzRBOEJB
QUIzRUU5NDYwHhcNMjUwNzIwMTQxNTI4WhcNMjUwNzI3MTQxNTI4WjAYMRYwFAYD
VQQDEw02ODdjZmEwMC0yMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVv3diHOdw4kiJiIksRVFcnqKLGq6MeocSlFrDx9tFNUXgAWmFOVLkFbxDOe
SijJoQvsCWmBr5uKJOTmgMtYca71GrV0XDGdaeIAC8XkdltkU+RqoLS2tQZ/n/Lw
ajThpw1XXzDGriFvLZweYCv3S85UhGqw/PTRygEJ2I7NKfIUr87s5hw4t8S4bl4p
C6Ge7p8mOEVW2/Oig3UiIzsQ3F/7wZocez2idRPlMdZzzD8ckw8jvgCWVg2Tnbdg
oESoQdOlkLSLmot2dAaTgx/CajcfqdZGrr0SDFPmFcuc6WVifA0bYYU+6fh614KX
OjfgbLHGeGjSd7Hc2yyoJdopcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGppwk1X
2vE/w8ZkBgHGzSFOuRtLMB8GA1UdIwQYMBaAFJTVh7bnW/EIr1tCSSLEqLqrPulG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9sTldIdHVkYjhRaXZXMEpKSXNTb3Vxcy02
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xOV0h0dWRiOFFpdlcwSkpJc1NvdXFzLTZVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9sTldIdHVkYjhR
aXZXMEpKSXNTb3Vxcy02VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGClyHd8QiXdW0sf7pj1SKw/7cyzzSQhBy3RkugbHlLgtSw3Cc6yRB
wKk30bk2Ui/SAaf3ugYYTSNmuosWv87/iCbDY5OeFhr7mjYZ4eXmI6vO+hRlH/+S
uaSI5Wh7Bl11weWPGcG86VS0rU/Mwout/7hQXGMzEwGpWPCSzilz+shU+jTmoi1Y
0gZhsmT9Yv2ajC/D/IG/xFAzLD9Klq3Z6DlxUAyrjmOpoZql0Dq8sudro1ysgKR1
B0QtyiO7lJuRXT4l9GIncZf+OphIdyTt3II3hkd17ePa25BV5Cm/ydDPPf3/PJDO
VvAnkP/tRsyRPMrVZ+oKF2PzszgmHwsI
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:57:55 2025 by rpki-client