Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          4ywdl74daJrAE1w8nxq5hh8W4ogXTPoSIUyZGxWqfX4=
Subject key identifier:   3D:99:06:9E:6B:30:E3:21:9A:14:4F:6C:4D:52:4F:81:0A:4D:E0:CA
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          03BC
Signing time:             Fri 05 Sep 2025 01:07:04 +0000
Manifest this update:     Fri 05 Sep 2025 01:07:03 +0000
Manifest next update:     Fri 12 Sep 2025 01:07:03 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: pJItGbwCTf+fwEorqmZhg4sLNy0bqL8fHjiQxtS28v0=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: TZX6iCaGTET/XkjNDNPgsGO7RoUWp3+g1zMXW4uPEG4=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: cJ5CaqkCjpSXdB1wP+KzBN/A46Qp5fiaM1/MskW6UdA=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: LegWRIHcFoKxOTl/RoZPTqnhGh7caDlHuymj8lMlN4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 01:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Sep  5 01:07:03 2025 GMT
            Not After : Sep 12 01:07:03 2025 GMT
        Subject: CN=68ba37b8-b665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:d3:40:a5:81:db:7a:30:e5:71:3e:a5:69:
                    f1:8d:40:18:82:b2:8e:56:3f:58:19:2f:9f:68:78:
                    61:2f:89:b2:0d:66:2e:f0:16:58:3a:02:d5:9c:a2:
                    e4:b3:4b:22:ba:98:63:3c:2a:27:a1:49:2d:d3:fb:
                    44:8b:9d:2c:98:2b:3b:97:a9:5a:18:31:68:68:44:
                    80:70:cd:1b:d0:56:77:d1:12:65:69:36:d9:27:00:
                    9b:8d:04:0b:59:d2:38:44:37:98:c7:4b:a8:17:64:
                    8d:5a:60:c8:84:85:b4:fa:dc:2f:8b:08:85:6b:dc:
                    46:5e:68:ac:bb:3d:5d:66:c2:33:70:ce:ae:26:67:
                    02:79:05:f4:15:73:0e:60:09:62:3d:c4:c4:d0:c6:
                    dd:21:28:39:63:bd:01:33:14:48:f3:35:89:19:61:
                    99:59:cc:af:98:9d:9f:ec:49:d6:1b:15:f3:61:d5:
                    de:ed:97:91:1a:8f:97:50:b2:75:db:34:90:4f:16:
                    69:c2:5a:4f:5d:25:ca:e4:52:71:e4:12:30:22:94:
                    d8:27:8f:9b:7f:3d:d3:c1:d2:30:96:4b:60:d0:12:
                    29:fe:79:23:ad:57:19:3a:1c:a8:76:d5:3e:6a:14:
                    c9:54:1c:a0:e1:3e:f9:17:9d:4c:fb:fe:0c:26:25:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:06:9E:6B:30:E3:21:9A:14:4F:6C:4D:52:4F:81:0A:4D:E0:CA
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:36:f0:02:81:08:69:e0:3e:7c:22:66:ab:7a:61:b9:29:
         02:ed:8c:2e:58:1b:fa:c2:14:27:67:5d:92:b5:1a:0c:b7:43:
         8d:16:64:b7:f7:ce:f8:ee:ce:a2:ea:29:14:ac:5d:16:f3:95:
         dd:97:8e:80:c7:3c:e6:1d:ee:68:c6:3c:dd:73:40:e1:a9:b4:
         0d:5d:77:5a:f8:e4:54:2b:ea:a8:ed:12:f0:be:0b:cf:8e:5a:
         56:c8:38:42:81:43:ee:73:52:0d:86:36:9c:ff:ac:0e:ec:12:
         44:44:13:06:44:39:60:f1:47:aa:10:b9:64:45:be:8a:50:59:
         52:cf:07:6a:b7:11:06:71:ed:7d:90:75:ba:f5:0e:af:b2:dc:
         69:be:e8:b8:71:6f:c8:c9:da:86:ac:0e:18:89:fe:d1:ca:d5:
         43:c8:98:a2:ad:b0:6b:ff:3d:e0:4c:3b:e5:d3:c6:6a:9c:59:
         eb:5c:2e:7a:d1:97:0d:11:be:a1:2a:b1:ce:f1:85:a0:b1:1b:
         56:04:b6:10:a6:9d:1e:31:eb:b3:0c:01:a8:07:c8:37:bb:2d:
         31:01:92:d9:dd:2e:d2:91:1c:52:71:43:12:96:ff:19:9f:0e:
         6b:6e:39:ae:31:33:36:b3:0a:64:92:d4:92:14:26:d4:f9:ba:
         a3:84:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:39 2025 by rpki-client