Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File:                     c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier:          82NUZlD4W730vq4w30sorT6R7lv+Wd4c9AtX1AxpJB4=
Subject key identifier:   F1:39:BA:58:EF:AD:F7:AE:A0:35:70:8D:3E:6D:12:03:5B:D0:A0:CF
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer:       /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial:       11E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number:          11D9
Signing time:             Tue 22 Jul 2025 17:19:47 +0000
Manifest this update:     Tue 22 Jul 2025 17:19:47 +0000
Manifest next update:     Tue 29 Jul 2025 17:19:47 +0000
Files and hashes:         1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: owfzDPxy5ntw2ywIvflFokgbaJdS8DpbvpcQQhap80A=)
                          2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
                          rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4583 (0x11e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
        Validity
            Not Before: Jul 22 17:19:47 2025 GMT
            Not After : Jul 29 17:19:47 2025 GMT
        Subject: CN=687fc833-af5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:a8:1f:9e:1b:ab:85:aa:d2:e0:c0:03:ef:
                    bb:39:2b:02:fb:13:65:f8:fc:e3:60:9d:d1:73:8f:
                    f4:c4:fb:04:78:d2:af:9c:e0:95:18:4c:9c:19:9b:
                    75:a3:39:7d:6e:60:7e:41:b7:29:40:32:b1:9d:48:
                    60:16:cc:df:45:fa:70:e9:6e:e3:cc:60:87:75:7b:
                    90:20:86:ec:74:a6:ab:af:52:93:d8:4a:dd:e8:a0:
                    17:fd:ea:91:c7:75:1d:25:27:78:a2:42:23:e9:c5:
                    ae:e6:7a:09:6e:ba:c9:c2:2a:b8:0b:1d:05:85:83:
                    e4:75:bf:7a:fa:82:51:3c:01:b0:de:53:42:89:b3:
                    c2:85:7b:dd:2c:cd:3a:4d:c9:ae:8c:81:b1:c4:48:
                    b8:1e:4e:a7:55:d2:e9:fe:45:32:1d:dc:dc:b3:98:
                    68:c9:35:5a:c5:37:44:b4:2b:98:62:8d:4d:83:ad:
                    ad:ea:6b:3a:8d:16:3c:74:58:69:e0:19:77:e8:eb:
                    40:3d:86:52:db:74:f5:e6:15:ae:5d:d7:b4:2a:24:
                    24:b1:42:f3:48:ee:77:e7:62:4d:71:bf:c2:c2:4d:
                    f9:a8:f1:bc:8c:f9:49:f4:b2:15:82:16:31:d2:e2:
                    a6:45:73:eb:4d:8a:3a:84:d3:b1:6a:7d:0e:7f:1d:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:BA:58:EF:AD:F7:AE:A0:35:70:8D:3E:6D:12:03:5B:D0:A0:CF
            X509v3 Authority Key Identifier:
                keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:81:21:50:e6:e7:57:70:37:d3:3d:2c:ff:da:dd:1a:7d:39:
         d9:8f:79:b7:01:07:24:26:f2:d3:a6:bf:93:0c:3e:e1:f4:b6:
         03:5b:4f:bd:84:a5:c9:b5:17:7d:a0:a1:62:86:b9:fb:0d:cb:
         bd:70:fc:e5:87:a9:e6:aa:87:f0:d3:a3:28:ac:6d:7c:40:3e:
         29:f7:82:3c:33:73:e4:5a:a8:4c:e9:49:7b:63:57:d4:83:7f:
         85:c7:7c:b3:06:65:c0:cf:65:66:6a:96:33:2d:62:ca:56:97:
         ad:9b:b8:6e:8c:2d:91:93:d3:54:67:0f:c9:c4:cd:47:8b:43:
         c6:4b:ab:b8:ea:1f:88:99:35:20:7d:fe:93:2e:24:cf:96:1c:
         a2:4c:ce:69:da:9a:26:e9:2f:eb:06:2a:2b:f2:e1:0c:22:c3:
         cb:bb:ea:f8:ba:0c:ae:51:84:da:75:00:78:c9:43:56:ae:67:
         f0:eb:0c:ee:93:0f:c4:46:21:43:f4:69:96:4c:b0:9b:85:47:
         b2:99:bc:26:e4:3c:30:0d:ef:57:50:98:f2:f5:28:3f:ef:2f:
         9e:68:83:72:91:01:b1:36:a9:4e:1c:df:73:9e:5f:88:9f:4a:
         2d:9c:70:2f:b5:86:3e:61:b1:7f:23:0c:4e:dd:28:b7:6c:f4:
         a6:d1:98:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy
Q0NDMjFENjcwHhcNMjUwNzIyMTcxOTQ3WhcNMjUwNzI5MTcxOTQ3WjAYMRYwFAYD
VQQDEw02ODdmYzgzMy1hZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFaoH54bq4Wq0uDAA++7OSsC+xNl+PzjYJ3Rc4/0xPsEeNKvnOCVGEycGZt1
ozl9bmB+QbcpQDKxnUhgFszfRfpw6W7jzGCHdXuQIIbsdKarr1KT2Erd6KAX/eqR
x3UdJSd4okIj6cWu5noJbrrJwiq4Cx0FhYPkdb96+oJRPAGw3lNCibPChXvdLM06
TcmujIGxxEi4Hk6nVdLp/kUyHdzcs5hoyTVaxTdEtCuYYo1Ng62t6ms6jRY8dFhp
4Bl36OtAPYZS23T15hWuXde0KiQksULzSO5352JNcb/Cwk35qPG8jPlJ9LIVghYx
0uKmRXPrTYo6hNOxan0Ofx2T6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE5uljv
rfeuoDVwjT5tEgNb0KDPMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz
QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX
NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBygSFQ5udXcDfTPSz/2t0afTnZj3m3AQckJvLTpr+TDD7h9LYDW0+9
hKXJtRd9oKFihrn7Dcu9cPzlh6nmqofw06MorG18QD4p94I8M3PkWqhM6Ul7Y1fU
g3+Fx3yzBmXAz2VmapYzLWLKVpetm7hujC2Rk9NUZw/JxM1Hi0PGS6u46h+ImTUg
ff6TLiTPlhyiTM5p2pom6S/rBior8uEMIsPLu+r4ugyuUYTadQB4yUNWrmfw6wzu
kw/ERiFD9GmWTLCbhUeymbwm5DwwDe9XUJjy9Sg/7y+eaINykQGxNqlOHN9znl+I
n0otnHAvtYY+YbF/IwxO3Si3bPSm0Zhi
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:05:55 2025 by rpki-client