Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
File:                     9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json)
Hash identifier:          wB/Z9zOgXaLDADfMb2URzWdmGUr4pjOQVv2NiMVVIRo=
Subject key identifier:   F0:93:D8:C0:72:FF:B9:3F:3E:2C:3A:91:24:33:53:41:C9:E9:15:79
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       35F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
Manifest number:          3577
Signing time:             Thu 18 Sep 2025 14:23:11 +0000
Manifest this update:     Thu 18 Sep 2025 14:23:11 +0000
Manifest next update:     Thu 25 Sep 2025 14:23:11 +0000
Files and hashes:         1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: R75STJD825LUXddpD1D6zQ57MBJ66HX49WwVPhVfwds=)
                          2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=)
                          3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=)
                          4: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: MNI6wSEESEbHrkvuX9WUxP9QninqH4z0ey0y6anlGpE=)
                          5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=)
                          6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: XHgWXPYofK0UqDGJyFt5vqak/B9drtR7oomIl0a3mgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 14:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13817 (0x35f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Sep 18 14:23:11 2025 GMT
            Not After : Sep 25 14:23:11 2025 GMT
        Subject: CN=68cc15cf-29ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:df:17:15:c7:16:22:39:45:4f:c7:cc:7e:
                    f4:be:5b:0d:9b:69:4d:e2:94:7c:e7:18:b8:a8:f1:
                    f5:56:bb:ae:9f:5f:07:bb:fc:73:1f:c5:80:be:e0:
                    1d:92:2b:bf:c5:a8:2b:ee:1c:48:ad:27:8a:65:3c:
                    2d:49:a1:bb:07:0e:fa:5a:b7:49:a4:cf:7b:d5:4b:
                    97:1b:b7:71:17:50:1f:85:61:72:f9:9c:ba:f2:cf:
                    a6:97:9e:82:30:1a:2b:7b:da:d3:cb:f0:ff:b3:b7:
                    df:aa:f0:38:29:71:f5:34:5f:04:28:25:cd:20:71:
                    7e:3a:bd:38:87:46:5e:fa:d1:df:94:77:48:8d:25:
                    ae:26:66:17:fa:c6:ef:1c:38:7c:a5:b4:25:54:e7:
                    9e:42:57:3d:58:0f:10:14:83:00:98:db:20:18:51:
                    1a:3d:c4:9c:1d:aa:57:11:c7:1d:5b:20:82:6b:db:
                    14:dc:d8:79:90:a6:60:d5:0a:44:0e:90:92:52:cb:
                    bf:17:2a:c0:8a:79:bb:97:4b:ad:ea:8e:27:7b:4a:
                    15:0b:28:34:c2:8c:40:35:eb:b2:a0:01:3a:f9:60:
                    62:93:19:07:c5:24:47:46:ec:3a:ea:4a:dc:00:5d:
                    91:fd:2c:20:87:da:dd:57:21:ee:b1:e1:26:d5:15:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:D8:C0:72:FF:B9:3F:3E:2C:3A:91:24:33:53:41:C9:E9:15:79
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:64:3a:c5:39:e0:a6:ee:51:62:54:a0:08:1a:f5:4b:23:05:
         bb:de:31:bb:05:3e:1a:2c:32:c6:35:43:69:4a:f8:c1:00:a1:
         07:f7:93:09:8a:ef:f0:fa:7d:23:ae:d9:6c:17:39:42:b6:51:
         fd:21:d1:3b:db:c2:9b:6c:1c:8a:46:18:fa:02:b2:e2:dd:5e:
         f1:4f:47:20:5e:50:38:d9:81:99:68:1c:e1:6d:99:a2:06:0d:
         ac:7a:36:d0:0a:92:fc:87:88:7d:86:78:2d:e8:05:23:00:a0:
         9c:b6:e3:69:09:d2:45:6e:b1:d8:f0:8b:b1:1c:e2:e4:0d:74:
         14:a4:24:ee:55:74:17:1c:49:c1:51:27:03:e6:41:fc:e8:74:
         0f:ff:ab:5f:e8:27:cf:71:95:32:6b:6d:06:8b:ea:7f:5c:c3:
         96:e4:e9:4c:3f:4c:ec:b2:f1:b1:38:a1:7e:9b:8c:45:03:2a:
         46:c9:0c:59:4d:3f:be:be:df:a8:5f:83:23:db:8a:0d:74:a6:
         b6:92:b0:46:4d:f2:0a:60:c8:85:4e:f9:aa:91:8c:32:49:77:
         6a:b4:c2:7e:57:d9:12:5e:50:fe:c5:0c:dc:ee:af:bd:62:a1:
         4d:a5:5c:a2:bf:e2:96:2b:d0:8e:48:b5:7a:31:66:ac:14:02:
         93:b6:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:25:21 2025 by rpki-client