Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
File:                     G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json)
Hash identifier:          ugzxnFK9fUZz2DGIDKDNH7JNYT8cQn4tvQkBsSDi6AQ=
Subject key identifier:   11:EA:41:10:F2:2F:2F:12:21:59:D2:10:10:93:B1:C1:77:33:EF:7B
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Certificate issuer:       /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
Manifest number:          0266
Signing time:             Fri 05 Sep 2025 02:07:24 +0000
Manifest this update:     Fri 05 Sep 2025 02:07:23 +0000
Manifest next update:     Fri 12 Sep 2025 02:07:23 +0000
Files and hashes:         1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: GB2xz5lPynr2PnpawC8xTs70EDcGa5sg7DeeSBnRiNQ=)
                          2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=)
                          3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=)
                          4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
                          rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
        Validity
            Not Before: Sep  5 02:07:23 2025 GMT
            Not After : Sep 12 02:07:23 2025 GMT
        Subject: CN=68ba45db-6e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:39:c1:6c:a9:74:18:6b:99:1c:68:84:98:
                    7f:a5:1c:fa:e9:16:76:81:4c:05:d6:c4:ce:ad:3c:
                    ab:7c:7f:0a:ba:00:28:b6:ac:8d:ea:01:b5:13:d8:
                    42:05:33:0f:aa:61:b8:6a:d2:55:c2:5a:d7:0f:b7:
                    b4:3a:bd:26:f6:f4:97:2d:a2:de:d0:3f:eb:75:91:
                    73:c7:bf:c5:c2:11:bc:1f:20:70:b4:85:37:07:61:
                    ab:22:67:80:0e:ad:e6:5a:7e:00:a2:6b:1e:ae:52:
                    fb:77:31:93:bb:30:61:f0:0d:47:46:ae:95:97:37:
                    91:cf:ad:29:ca:f3:fc:24:48:67:af:f5:c1:ef:86:
                    d8:18:4c:4a:27:2b:ea:e4:51:bc:38:b0:26:2b:de:
                    3b:73:87:f2:7e:8d:d0:ac:f7:1b:87:b5:26:66:d5:
                    3f:be:f1:65:7b:f6:5a:b8:88:26:26:bb:ed:95:78:
                    fd:af:84:5a:1d:cb:b4:7c:d0:c0:19:72:4b:f1:05:
                    a2:7c:b4:16:6a:cc:30:cd:82:57:61:c4:e4:df:73:
                    6e:15:1b:b7:90:cd:63:e7:f2:cc:f4:0a:3a:38:b2:
                    c7:8d:00:03:a5:dd:fe:51:be:a9:29:8e:52:b9:0d:
                    ee:3a:8c:77:70:29:e9:9a:63:0e:43:86:04:8d:a1:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:41:10:F2:2F:2F:12:21:59:D2:10:10:93:B1:C1:77:33:EF:7B
            X509v3 Authority Key Identifier:
                keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:12:2d:d3:c9:bf:65:ac:dd:6c:75:46:9b:3b:c2:d8:50:
         00:df:b1:da:7e:bd:af:42:a8:0b:2f:45:e6:30:1c:2a:9f:00:
         0c:96:19:fe:2c:64:90:35:b7:e3:5f:63:13:e8:76:e4:9d:56:
         ff:a8:b6:1e:f3:a5:65:20:c1:71:0e:2a:20:2f:27:10:6b:ef:
         55:98:2a:6b:60:ec:b9:57:61:59:c8:d6:d0:41:66:87:f3:4d:
         84:d6:da:96:79:40:ec:91:f9:d8:7d:68:a8:92:bb:30:9a:f0:
         4a:ef:9d:e1:e8:81:c7:3e:50:3b:2c:75:e8:e0:9e:ac:23:01:
         39:12:1f:19:66:39:41:b5:13:88:94:11:78:22:55:a0:ce:c0:
         82:c9:a0:7a:a9:6d:77:b1:f9:92:59:10:67:9d:37:ca:6d:a0:
         72:fa:04:ea:96:37:5d:15:4d:49:d9:f4:b1:86:2c:4b:3b:ba:
         bb:2f:ee:bd:58:a5:01:02:d1:f4:48:3e:31:a8:79:28:45:62:
         81:db:2f:93:55:a2:6b:d7:c1:08:a0:f8:ef:76:32:41:73:c8:
         73:3b:c4:29:15:a0:32:1e:3f:16:a7:49:b4:aa:e3:e8:d9:46:
         cc:09:8d:58:85:b9:61:7d:68:c4:5f:67:2b:e9:6b:32:4c:6a:
         c4:48:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:53:39 2025 by rpki-client