Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          l8+wHphQCNheByWdj1jN8yfznz3mEPgpDaVX3z+JjkE=
Subject key identifier:   D4:97:71:05:25:E4:98:A7:3F:96:80:3D:5D:A5:2D:B0:EF:23:08:A5
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          92
Signing time:             Sun 07 Sep 2025 06:58:10 +0000
Manifest this update:     Sun 07 Sep 2025 06:58:09 +0000
Manifest next update:     Sun 14 Sep 2025 06:58:09 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: otfPsXWkSrvncnVexLQrwEz+zazVxPhrn1Bj1hs8/Lw=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Sep  7 06:58:09 2025 GMT
            Not After : Sep 14 06:58:09 2025 GMT
        Subject: CN=68bd2d01-05d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:57:70:9a:2f:f4:21:77:24:55:e6:df:d0:
                    dd:9b:09:e1:04:db:a7:be:af:0c:44:1d:34:80:15:
                    5f:7f:12:24:51:42:78:59:64:33:b6:d8:01:13:ad:
                    bd:5f:b6:67:09:8a:90:79:82:6b:87:3a:70:64:8d:
                    e2:5c:04:ee:5d:b5:1d:3b:6c:1e:50:65:e3:d8:cb:
                    6e:62:fc:9b:f6:6e:d1:30:a2:6c:a5:1b:d6:6e:2f:
                    8c:7b:b7:66:c2:8e:93:68:f6:0e:c0:1d:4a:ce:28:
                    ea:e7:5a:4c:51:e6:54:e3:1f:20:2c:a6:c2:63:f6:
                    d2:16:17:ef:da:5d:47:e8:4b:99:65:2e:94:d8:53:
                    49:0b:be:ec:75:cf:fe:3a:1b:b8:8a:3c:61:16:8b:
                    a7:8c:75:08:96:19:d6:5c:2e:42:2f:d4:f2:0c:5b:
                    63:b4:5c:99:f5:7a:b3:d2:ce:ac:23:0e:7a:62:27:
                    bf:7a:fa:3d:3d:cd:07:26:75:a0:fc:fa:37:4a:fe:
                    2e:14:42:24:26:a3:c5:da:5e:32:b1:ca:33:76:a9:
                    b3:47:fe:fa:ab:c3:58:51:0f:df:e7:10:d0:11:ef:
                    9a:a1:cf:b1:b7:51:b1:ec:3b:c2:db:3b:78:34:0f:
                    3f:39:30:b5:c5:1c:b3:5c:92:6b:3f:20:8c:fe:f0:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:97:71:05:25:E4:98:A7:3F:96:80:3D:5D:A5:2D:B0:EF:23:08:A5
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:df:ac:f0:50:65:ff:c8:28:fe:68:cc:db:04:bf:35:20:e8:
         3b:ec:d0:bf:38:f7:f8:6d:41:5b:b0:6f:54:24:c9:e3:a6:9f:
         a9:64:20:56:92:d8:94:55:ca:a1:34:42:82:1c:62:05:1b:bb:
         59:13:2d:de:6f:ed:e2:df:42:b1:4b:d8:2b:78:5a:05:25:6e:
         e7:e0:cf:10:5b:26:db:f8:5d:3b:49:e5:a9:5b:11:bc:2e:c9:
         0a:8f:77:58:bc:fe:c4:3d:2f:4d:26:7d:ae:fa:d9:b6:74:ba:
         3c:10:f2:15:cd:48:5c:29:90:8b:fe:e8:6b:05:16:cc:13:4c:
         ae:e0:db:57:7f:3b:c1:5f:9c:04:2f:4c:76:58:46:40:00:06:
         ce:03:01:a4:87:89:11:27:fe:b4:71:b0:fc:a3:43:11:f9:89:
         49:a2:d5:d3:35:16:e2:a8:74:b0:a7:51:db:b1:ad:a3:de:06:
         a1:e5:73:2f:eb:c0:31:94:78:9d:89:7b:47:95:e0:11:9b:84:
         86:cf:de:09:79:de:c1:c9:a3:72:bd:0c:46:7d:5a:2a:0b:c3:
         10:2f:a0:a4:24:e5:f9:1a:c2:21:90:99:b1:4e:5d:fb:12:8d:
         4e:48:bd:92:be:9b:62:5f:2c:88:88:15:e4:e9:66:f7:d2:3e:
         28:94:af:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw
NjM0MDJERjEwHhcNMjUwOTA3MDY1ODA5WhcNMjUwOTE0MDY1ODA5WjAYMRYwFAYD
VQQDEw02OGJkMmQwMS0wNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2h9XcJov9CF3JFXm39DdmwnhBNunvq8MRB00gBVffxIkUUJ4WWQzttgBE629
X7ZnCYqQeYJrhzpwZI3iXATuXbUdO2weUGXj2MtuYvyb9m7RMKJspRvWbi+Me7dm
wo6TaPYOwB1Kzijq51pMUeZU4x8gLKbCY/bSFhfv2l1H6EuZZS6U2FNJC77sdc/+
Ohu4ijxhFounjHUIlhnWXC5CL9TyDFtjtFyZ9Xqz0s6sIw56Yie/evo9Pc0HJnWg
/Po3Sv4uFEIkJqPF2l4yscozdqmzR/76q8NYUQ/f5xDQEe+aoc+xt1Gx7DvC2zt4
NA8/OTC1xRyzXJJrPyCM/vCK/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSXcQUl
5JinP5aAPV2lLbDvIwilMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk
SjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB236zwUGX/yCj+aMzbBL81IOg77NC/OPf4bUFbsG9UJMnjpp+pZCBW
ktiUVcqhNEKCHGIFG7tZEy3eb+3i30KxS9greFoFJW7n4M8QWybb+F07SeWpWxG8
LskKj3dYvP7EPS9NJn2u+tm2dLo8EPIVzUhcKZCL/uhrBRbME0yu4NtXfzvBX5wE
L0x2WEZAAAbOAwGkh4kRJ/60cbD8o0MR+YlJotXTNRbiqHSwp1Hbsa2j3gah5XMv
68AxlHidiXtHleARm4SGz94Jed7ByaNyvQxGfVoqC8MQL6CkJOX5GsIhkJmxTl37
Eo1OSL2SvptiXyyIiBXk6Wb30j4olK+f
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:58:39 2025 by rpki-client