Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File:                     faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier:          7L5RlLNvHhy+jUKL52pyUhs71bJIaAyx08l4G82BEA0=
Subject key identifier:   1C:D7:37:81:3E:5E:45:31:E2:DE:9B:64:9C:B4:FD:6C:5E:54:9B:32
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer:       /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial:       1059
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number:          104E
Signing time:             Fri 18 Jul 2025 17:34:18 +0000
Manifest this update:     Fri 18 Jul 2025 17:34:17 +0000
Manifest next update:     Fri 25 Jul 2025 17:34:17 +0000
Files and hashes:         1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: h18rz8UKggFPybRNIdgcFZCjpUfNiHCeFUrksxbTENs=)
                          2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: dldKM97yEUd08i981SQo623EWErkeJZ6nMm6B405eVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
                          rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4185 (0x1059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
        Validity
            Not Before: Jul 18 17:34:17 2025 GMT
            Not After : Jul 25 17:34:17 2025 GMT
        Subject: CN=687a8599-8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:8e:58:68:af:3e:d3:33:6d:d0:d2:2e:18:
                    ac:d3:0d:29:f3:00:61:0c:8e:88:fe:8a:51:37:a6:
                    70:d1:41:a8:56:b7:04:2a:75:ac:c5:e5:d9:b4:65:
                    5b:96:99:ee:c3:33:78:4b:0b:e2:7d:6d:bf:92:07:
                    70:da:65:76:35:7f:4a:60:27:a3:7a:73:f3:a8:f9:
                    18:c1:59:5d:68:2c:4f:b8:74:6d:98:49:3b:b3:5b:
                    fc:06:8d:d9:4c:da:77:75:b3:a4:79:5b:53:48:72:
                    8b:c1:e3:46:a1:ea:25:7d:21:c6:bb:64:96:00:b0:
                    2c:5f:3f:23:f5:58:5b:ca:91:44:22:ed:b5:98:40:
                    0e:fd:d4:07:4d:b0:80:8a:2c:e6:92:02:24:40:0e:
                    38:6d:fe:bd:5d:c3:42:ee:48:42:ff:54:8d:5f:43:
                    24:9c:72:41:36:fb:ad:66:a1:70:08:bd:54:3a:fa:
                    bf:6d:49:b7:1c:b1:0a:76:5c:ff:da:84:92:bb:9c:
                    ba:b9:b8:98:26:e3:d1:79:66:19:5e:86:3c:6c:06:
                    25:77:6a:05:93:2f:c8:b3:33:53:a1:32:3a:43:d6:
                    73:a5:40:2c:b7:0d:72:21:18:12:90:73:b7:5a:3c:
                    5a:28:88:8c:90:c9:ba:42:e1:e1:6f:e1:24:f3:9c:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:37:81:3E:5E:45:31:E2:DE:9B:64:9C:B4:FD:6C:5E:54:9B:32
            X509v3 Authority Key Identifier:
                keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:85:1d:90:ed:ee:4d:ee:27:0e:87:38:70:bd:20:9f:1d:
         82:0f:dc:53:9f:bd:bc:8e:2c:af:27:b5:24:49:ee:6d:b1:a3:
         d7:ce:9f:78:e3:b5:f2:ad:c5:bd:97:c0:a8:f9:ce:43:d8:75:
         54:14:fe:00:60:12:2e:de:86:c1:98:1c:a7:1e:e0:9b:c6:6d:
         bc:3b:c6:26:e9:d1:1d:bd:e0:f1:2e:0e:79:f1:92:a4:d3:a3:
         64:c1:4f:28:83:9c:ca:9f:c1:b2:e3:e1:cb:7a:b4:58:cc:34:
         2e:7f:43:4f:18:e0:9e:f6:99:91:39:bf:2d:a0:ce:73:6b:87:
         12:f0:b7:10:79:ce:39:78:b6:53:75:d7:47:a5:ec:72:69:2a:
         d8:84:f7:76:6f:86:a1:e4:b7:79:53:d0:e1:97:9e:62:9c:1e:
         73:2f:a6:96:ad:22:67:43:e3:dc:a0:e9:d4:5a:c9:8b:95:29:
         8b:cb:e5:0a:f6:e8:c7:97:52:63:e9:3f:27:2b:26:14:56:1b:
         b5:df:15:3b:a1:37:2b:61:2f:2a:96:1a:4a:54:5e:01:38:e0:
         20:21:d1:0f:3d:32:b9:b6:c5:e6:c4:4e:7d:63:af:59:ca:c9:
         77:e5:27:26:7b:c8:d0:46:b0:cd:c9:60:f7:43:43:71:2e:1b:
         2e:e0:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:35:11 2025 by rpki-client