Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          ujEiMCFa0uPp3x7MxXha2oig71BdoH6PD/uWo4IhYzY=
Subject key identifier:   14:B5:53:24:41:F6:86:75:E0:E2:4E:A9:6D:3D:2F:E5:D7:CA:AE:86
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          0171
Signing time:             Fri 19 Sep 2025 04:20:58 +0000
Manifest this update:     Fri 19 Sep 2025 04:20:58 +0000
Manifest next update:     Fri 26 Sep 2025 04:20:58 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: DpwXWtD/tTd/2crLcR3OSmVmoe4Wg+lK779kKLmzd44=)
                          2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=)
                          3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 04:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Sep 19 04:20:58 2025 GMT
            Not After : Sep 26 04:20:58 2025 GMT
        Subject: CN=68ccda2a-0fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:96:00:73:58:94:c8:da:ef:af:6f:f0:0b:
                    d6:ed:46:44:d9:97:64:e4:95:0f:79:67:8b:8f:e7:
                    ce:94:0f:d8:30:97:51:de:7c:67:79:ed:5d:c7:65:
                    14:98:2b:4b:7a:49:ed:94:d0:7d:4c:72:ff:a3:ce:
                    83:ea:37:05:96:da:88:db:01:b1:ca:bb:a9:74:2a:
                    ee:37:8b:23:12:d2:a9:4d:29:62:fd:38:79:34:15:
                    ae:a2:0b:3b:d6:94:11:9a:b3:bd:84:91:69:7c:cd:
                    b3:e8:b9:98:09:29:3d:28:b2:90:4b:83:d6:6c:cd:
                    8d:a3:66:ad:af:1c:55:9c:d4:a6:4d:10:39:28:7d:
                    b9:dd:81:24:0d:51:a2:2a:b3:e6:10:e1:aa:94:e8:
                    c2:8c:4e:cb:5c:88:cf:f8:8b:0a:40:93:5a:8f:29:
                    a6:a6:ee:6a:b7:af:a6:c6:7f:18:c0:47:5e:63:b6:
                    6e:89:39:c6:5d:25:11:17:6b:ed:eb:00:84:6d:d1:
                    c6:b9:86:92:bb:8f:71:c5:24:e1:87:30:76:b8:af:
                    a1:97:9a:b4:72:4a:3a:d8:fb:53:33:d6:74:ee:84:
                    c6:2f:f1:22:26:b9:a3:fc:ab:e2:df:80:4c:e1:12:
                    cd:b9:84:89:f4:f1:20:48:84:39:7b:cd:bd:fc:1e:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:53:24:41:F6:86:75:E0:E2:4E:A9:6D:3D:2F:E5:D7:CA:AE:86
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:32:da:6a:98:2e:11:ce:33:32:bd:89:1d:07:96:ba:8d:
         d8:9a:d4:3a:5b:34:d1:f3:57:50:69:82:fb:e4:3f:cf:99:9c:
         0b:4f:0b:bd:d2:9e:24:4b:eb:a4:d4:e1:7e:28:4a:c4:ef:bf:
         dc:0e:a9:39:e5:c7:8b:ef:81:d4:34:8c:55:bc:d6:1a:93:a9:
         d1:94:c6:f4:5b:59:3e:a9:7f:f8:ce:d8:90:cf:1f:50:ff:6e:
         5a:43:d2:b8:7f:af:a9:0c:07:f1:06:dd:a2:83:f8:5d:40:24:
         70:35:4a:a7:ed:55:0d:91:5a:fb:17:0f:e4:97:09:7a:48:24:
         8a:1f:3d:c1:48:4f:0c:3d:9f:b4:a5:ca:de:eb:de:fb:80:3b:
         06:97:ab:e7:a3:93:50:ae:6a:22:93:d4:85:d3:32:ac:fb:ff:
         9c:27:95:a0:26:95:1c:0c:51:4e:a4:57:67:23:b6:ab:b5:96:
         81:86:09:95:46:de:c2:61:b3:82:5d:9a:87:dd:16:e3:1b:28:
         71:b1:fe:fd:fd:1f:ca:cb:5a:c1:d3:47:75:9d:92:f8:72:3f:
         01:a0:26:f3:31:78:f4:1e:d5:bf:e5:50:02:55:6c:f9:08:0f:
         e5:76:dd:1b:34:48:3c:56:4f:8a:46:51:f2:8f:8a:50:05:32:
         9a:ff:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:37:22 2025 by rpki-client