Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          Ab5C2UnAA3JIyorWLVFucUqIE//z1SCf6JO7gZorVwk=
Subject key identifier:   C5:B6:7B:0C:F3:5E:27:71:F0:B3:CE:D0:F6:EF:83:FD:CE:23:12:1A
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0CDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0CBA
Signing time:             Sun 20 Jul 2025 18:14:42 +0000
Manifest this update:     Sun 20 Jul 2025 18:14:42 +0000
Manifest next update:     Sun 27 Jul 2025 18:14:42 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: fTTD1ceY+orjpP5xQQTZ8wr8knfW9ktZsYuXEMyHGio=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 18:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3293 (0xcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Jul 20 18:14:42 2025 GMT
            Not After : Jul 27 18:14:42 2025 GMT
        Subject: CN=687d3212-4d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:21:d5:ec:fd:4e:be:dc:6d:1d:1d:86:fb:
                    17:b5:02:a3:ca:20:c8:bc:bd:93:d6:50:22:30:f1:
                    18:f7:59:41:0c:39:c0:42:1e:59:ce:64:30:5b:92:
                    1d:cd:15:76:7b:8a:da:20:25:58:ea:35:49:98:bb:
                    4b:4f:2c:8c:75:ac:8d:58:ed:ce:5a:42:c2:8f:af:
                    69:df:21:d1:2e:5c:1f:45:2d:65:2b:17:75:63:62:
                    49:68:ca:de:a4:8f:59:0c:4f:b7:1d:de:a4:1d:b5:
                    e6:65:06:5e:4e:85:0b:54:6e:7a:03:92:10:67:a8:
                    4a:44:95:78:ea:5e:4c:7c:64:8d:cb:20:88:50:82:
                    8a:ae:f8:f1:ff:e4:dd:85:d4:81:c9:87:89:3b:fb:
                    83:db:e8:74:bc:4e:89:c9:ef:52:1a:d8:64:cd:53:
                    cd:4f:84:8f:ee:38:7b:e3:9f:14:01:84:c2:85:cb:
                    da:45:e8:60:2a:9a:00:40:0c:43:85:c4:c6:f3:da:
                    de:25:d6:50:6b:c0:7f:6b:ef:48:9e:0d:52:a0:10:
                    0d:a3:73:32:6d:65:17:37:67:d8:cc:ff:4f:34:3d:
                    a5:a1:99:f6:6e:be:11:b6:a3:3b:de:1d:02:75:2d:
                    53:e3:93:be:f3:99:1c:73:04:eb:a8:74:31:d4:db:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:7B:0C:F3:5E:27:71:F0:B3:CE:D0:F6:EF:83:FD:CE:23:12:1A
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:71:ec:2b:2d:a8:0c:50:55:39:6b:e5:a2:eb:f4:af:1b:a3:
         5a:55:d5:e1:d8:d3:25:7b:e2:ac:37:e4:21:8a:10:ab:44:6b:
         8b:4a:99:1b:55:a9:bd:fa:b5:9d:48:5b:c9:ef:94:92:3c:dc:
         5c:9a:6a:5c:88:93:2c:0a:43:ef:c7:33:67:af:87:bd:92:06:
         f9:3e:03:10:a3:e7:b5:e4:93:b9:e6:5c:1a:1d:2f:34:a9:8d:
         59:bc:02:4d:a3:eb:31:d0:26:83:03:4d:c6:d8:27:54:99:f4:
         5d:52:92:1b:d4:76:a0:c8:2d:bc:74:9c:f1:bd:9e:9d:86:43:
         e2:7e:fb:55:d0:b9:46:18:c5:4f:e0:c7:26:00:8c:01:99:47:
         48:6e:2a:2c:21:19:7f:2f:b7:b2:0d:82:c3:b6:45:55:38:8a:
         9d:5e:2a:54:57:21:d6:3c:c9:5d:64:63:40:df:86:1f:b5:f1:
         ff:31:7d:32:f2:3a:cf:33:d2:49:f4:fb:f0:1b:bc:dc:5a:56:
         e3:df:19:47:88:91:56:c3:13:be:f6:ad:99:f6:fe:aa:73:e7:
         5e:73:20:ef:7d:d1:98:46:15:92:3d:d5:47:a8:e5:23:92:56:
         6a:37:dc:11:6e:36:15:12:c6:9d:a5:a7:0d:b7:e3:b7:41:44:
         ae:d2:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:16 2025 by rpki-client