Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File:                     GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier:          1fVGpljpWUShYhvm0ckFbMX6SaoegF2tjjIltF3GhkM=
Subject key identifier:   8B:A0:4D:44:CA:39:25:E5:27:44:2D:82:D3:C4:74:90:EC:BF:B7:CE
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       10F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number:          10A1
Signing time:             Thu 04 Sep 2025 17:33:29 +0000
Manifest this update:     Thu 04 Sep 2025 17:33:29 +0000
Manifest next update:     Thu 11 Sep 2025 17:33:29 +0000
Files and hashes:         1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: iCLfFmYfLq9ENER4ezORhd6oZyHr1O34vaukJzDvdsg=)
                          2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=)
                          3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=)
                          4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 17:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4340 (0x10f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Sep  4 17:33:29 2025 GMT
            Not After : Sep 11 17:33:29 2025 GMT
        Subject: CN=68b9cd69-d218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:1e:2c:3e:85:59:cc:ce:7f:eb:45:bd:1d:
                    a1:49:8c:0e:9e:c0:e1:51:1a:83:47:4d:9e:9a:ea:
                    b8:3b:44:db:a1:53:96:35:80:dc:51:dc:6b:e5:6b:
                    7d:43:c4:99:25:c4:c8:13:2f:c0:00:43:fe:17:c8:
                    f0:d7:8f:e6:70:21:42:0f:71:78:13:e2:44:e1:a9:
                    d8:88:ba:b5:38:91:f4:b1:56:e8:a9:6a:49:7d:4b:
                    cb:78:70:b7:80:de:35:13:c8:fe:8b:62:49:5e:a8:
                    5b:82:13:f0:fd:ef:2f:56:57:61:9f:f8:4d:7b:0a:
                    f6:e3:c4:06:d9:f2:44:48:34:71:d1:bd:9b:9e:8c:
                    67:0c:95:86:c0:1e:0f:be:cb:f4:36:89:4b:48:4b:
                    e7:84:84:81:56:f6:e6:50:6b:29:88:68:e4:37:17:
                    c3:53:b6:e5:0b:89:6d:36:ba:b3:10:0b:de:d3:dd:
                    3a:1f:61:31:25:69:64:92:78:3b:33:89:42:17:7c:
                    89:ee:eb:33:da:6c:c7:ae:5e:aa:12:73:43:9e:4f:
                    41:6d:ea:eb:c6:98:59:db:25:c5:b8:3b:91:d6:fb:
                    a4:a8:48:2a:90:fd:9d:a3:ca:40:c6:f1:26:a0:6e:
                    60:aa:c6:ee:6b:4f:51:e9:f6:f4:92:1f:62:19:bd:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:4D:44:CA:39:25:E5:27:44:2D:82:D3:C4:74:90:EC:BF:B7:CE
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:a1:d9:86:a3:cc:c3:33:8d:06:9a:9c:b9:4b:e3:e8:d2:
         f1:bf:cb:68:a5:93:58:e5:a8:d6:ce:f5:34:c2:f1:f4:27:e0:
         f8:50:27:ed:c0:1c:28:fa:ad:b5:54:70:c8:ff:a9:29:d0:87:
         da:8c:45:8c:b0:c1:75:97:9d:94:3d:8e:f1:ca:b6:74:b4:cb:
         32:42:f1:90:c0:4c:13:d6:f1:49:c7:00:87:5e:8f:4a:2e:95:
         4a:2d:03:25:46:84:9f:b6:7d:be:f6:cd:ea:72:ad:73:84:6e:
         5f:af:f6:26:9a:10:6b:24:b5:5c:89:c1:b6:0a:d1:a1:6d:7a:
         77:41:9c:da:87:c7:e3:c6:21:ec:66:ee:27:4c:8f:d4:06:f5:
         d9:ed:91:80:7d:08:3a:55:0b:de:3e:f3:be:f0:b6:85:40:0b:
         82:55:61:f7:47:12:65:4e:37:a4:13:85:6d:2a:f8:12:28:b3:
         44:86:cf:92:db:4c:17:39:2d:89:3b:51:7d:76:fa:56:39:d5:
         4e:fb:77:6b:c5:f5:ec:17:35:45:30:90:a1:59:4f:8e:be:94:
         1b:e5:86:52:74:cc:77:9b:b7:e2:a0:55:73:10:00:f4:a1:53:
         42:98:fb:bd:51:25:54:0b:e3:35:1e:e5:a9:4b:2b:1d:7f:fb:
         64:de:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:08:13 2025 by rpki-client