Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
File:                     8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json)
Hash identifier:          4l8LAHZUtq70u6QPLWorsJKvEyAxEBLPVWogTbI5qL8=
Subject key identifier:   00:1B:6A:1E:EF:2B:08:50:60:3E:3B:2E:DD:65:C8:04:44:38:4A:82
Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4
Certificate issuer:       /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4
Certificate serial:       0D84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
Manifest number:          0D76
Signing time:             Mon 18 Aug 2025 18:13:33 +0000
Manifest this update:     Mon 18 Aug 2025 18:13:32 +0000
Manifest next update:     Mon 25 Aug 2025 18:13:32 +0000
Files and hashes:         1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: gjTBS0rZq4zjZZxTedrVfvrR9TMHG9vtqsoCRlEYuXc=)
                          2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=)
                          3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 18:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4
        Validity
            Not Before: Aug 18 18:13:32 2025 GMT
            Not After : Aug 25 18:13:32 2025 GMT
        Subject: CN=68a36d4d-a308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:12:ca:22:d8:ec:c6:b8:7e:8e:ab:b7:3e:
                    33:83:9d:64:b7:46:cf:f1:dc:bc:d0:15:0f:9e:af:
                    98:55:5f:42:52:7d:0f:36:f4:90:dd:54:87:2f:5f:
                    d9:aa:ba:3a:3d:73:e2:4e:b2:22:59:f9:97:0f:fb:
                    00:39:a5:09:f1:9a:e3:97:1e:db:5e:52:5e:93:19:
                    2d:05:46:56:27:91:46:52:b2:54:bc:96:14:d7:81:
                    95:03:6b:85:b1:08:ed:31:81:c7:2e:41:64:b8:18:
                    6c:dc:be:7b:ca:0c:4c:f1:2b:f0:42:bd:69:7d:d5:
                    e2:4f:d2:33:ea:b0:32:60:73:fc:8a:30:4e:0c:37:
                    e9:1e:f8:0b:50:2e:b1:b1:45:da:6a:4f:12:34:25:
                    8a:f0:70:a3:e9:15:5d:68:dc:2d:d6:4e:89:a2:3f:
                    20:09:c6:98:20:de:21:47:e4:2a:03:28:67:7e:0e:
                    5c:62:06:df:a1:1a:a3:53:72:aa:0e:b3:bd:16:f8:
                    84:e4:ce:6b:67:5f:e9:52:55:cf:19:a3:ff:a6:07:
                    dc:25:71:c3:7b:e8:48:83:c0:e1:5d:a8:70:53:66:
                    7f:c7:f0:25:6f:55:04:1d:d3:39:ff:3d:a7:d9:5b:
                    75:21:f2:ec:b0:f8:1b:da:e6:d2:a4:a4:16:31:8f:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:6A:1E:EF:2B:08:50:60:3E:3B:2E:DD:65:C8:04:44:38:4A:82
            X509v3 Authority Key Identifier:
                keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:78:a1:18:dc:a0:e8:f7:9c:fb:22:4c:c5:c9:c3:80:89:94:
         d0:54:1d:9a:f5:14:79:59:aa:a1:8d:de:70:c3:8e:2c:b2:09:
         3e:ab:bb:9b:12:03:84:cd:cd:34:66:23:95:4d:77:bc:08:cd:
         e1:26:9c:47:bf:fe:03:2e:0b:af:7d:32:36:5c:49:6b:fb:34:
         c9:f5:dc:e7:af:78:f4:e1:a9:42:38:cb:be:0e:20:81:a9:e3:
         4a:0f:f8:c7:e2:f1:18:ee:3c:f3:89:f8:db:1e:f8:e7:02:b9:
         6b:d3:7c:d7:06:56:d8:ed:ea:c7:62:b0:68:01:45:fe:e0:96:
         12:89:c1:c8:c1:9d:96:4e:d8:26:f5:78:72:6f:78:56:cc:8c:
         bf:26:27:c5:98:de:16:71:fa:04:2f:aa:6a:1d:2e:28:f7:2c:
         d7:bf:e7:73:fc:12:6a:5c:05:58:0a:e5:08:60:aa:55:f0:1e:
         1f:c8:d9:ac:ed:7b:d0:78:a6:f7:79:90:ea:8f:9a:50:1a:9a:
         4a:9a:66:4b:a6:a7:8c:79:9f:91:04:08:04:3a:bb:d6:7e:6a:
         9d:c4:e2:79:fd:e8:6d:dd:ed:04:b3:1f:52:81:fe:b9:d7:fd:
         e4:98:5b:3c:44:5c:14:82:74:d4:92:f2:a9:b6:a8:77:16:26:
         6a:51:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:53:25 2025 by rpki-client