Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft
File:                     V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json)
Hash identifier:          6n20xPgaKh/Sox9nJcSCO1Jy4EKa7nwV1yjpL/9KBnU=
Subject key identifier:   42:48:FD:AA:87:A7:FD:BF:76:F9:D6:70:C9:37:C5:41:92:AF:A0:93
Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07
Certificate issuer:       /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
Certificate serial:       10D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft
Manifest number:          10C7
Signing time:             Wed 20 Aug 2025 17:24:08 +0000
Manifest this update:     Wed 20 Aug 2025 17:24:07 +0000
Manifest next update:     Wed 27 Aug 2025 17:24:07 +0000
Files and hashes:         1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: +cXPhJPA3g7lSZ/iMn23VRLJZjEW6vFbTH5Z9wIm2aQ=)
                          2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: qxrPSY85HQzoS5SwzTHbqWN+Z7CNWTWllsLf46VBiDQ=)
                          3: A2BA75081C1211F099751029C4F9AE02.roa (hash: hcW1O4hMbQJ9D96SY/+mKlNT2B+dI5MJ4LZJbYGgdIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl
                          rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 17:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4306 (0x10d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E05B, serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
        Validity
            Not Before: Aug 20 17:24:07 2025 GMT
            Not After : Aug 27 17:24:07 2025 GMT
        Subject: CN=68a604b7-5378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:0c:fe:5b:40:39:7c:61:5c:fc:45:b6:06:
                    59:4f:50:f1:77:0c:3e:13:6d:f5:7d:7c:9c:5c:f8:
                    39:54:50:16:7b:3d:ec:40:97:80:12:bb:65:88:18:
                    e5:c9:6c:3b:e4:56:23:02:b1:88:e0:73:42:53:6c:
                    8a:1f:04:93:e7:51:75:31:40:cc:6a:c9:a3:c5:c1:
                    68:57:12:f5:ad:c9:ae:24:55:89:d5:2f:a2:ea:56:
                    7e:64:0f:d9:6d:ce:93:a6:c9:86:5a:46:40:f4:bb:
                    96:37:9f:a1:24:ad:a6:7a:51:1f:4d:71:e8:48:10:
                    8f:35:0d:a6:9a:d1:27:35:92:e3:02:0d:53:1e:49:
                    00:03:31:2d:cf:68:35:33:3b:8c:c6:71:d1:81:7e:
                    77:0b:20:0d:91:f1:4c:9a:69:c1:0a:86:3a:5a:6b:
                    0e:0a:4a:59:06:49:79:8d:9d:17:6a:ad:11:42:f4:
                    90:f2:63:ed:92:8f:67:c6:ae:60:05:28:9c:83:49:
                    e1:67:03:59:97:46:bc:94:1f:7d:96:9f:d7:10:0d:
                    05:d0:08:60:f6:80:f5:8a:9d:55:cf:d9:1a:03:8b:
                    5d:a3:40:f5:78:5d:0c:b0:50:f3:28:2b:96:2b:30:
                    50:9d:74:3c:35:41:0d:f1:87:0c:91:b8:52:9b:77:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:48:FD:AA:87:A7:FD:BF:76:F9:D6:70:C9:37:C5:41:92:AF:A0:93
            X509v3 Authority Key Identifier:
                keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:74:80:d7:f4:0a:96:08:b9:2a:fe:37:a0:8f:cc:18:a5:
         60:ec:a1:2d:f7:31:2d:52:74:ec:33:1f:dc:26:ac:6c:28:cd:
         4e:e0:f2:d1:53:52:d3:b4:55:1d:0d:01:e4:2d:e8:0b:c6:df:
         07:68:77:92:5d:25:02:da:d6:e8:b2:e7:82:88:57:05:5d:cf:
         e9:bc:23:da:4c:1c:58:ef:09:eb:a9:1f:26:c3:ba:6c:4f:03:
         90:80:26:1e:51:b2:39:65:89:d7:36:6a:b4:ee:97:be:db:db:
         fe:6b:d3:50:14:36:ea:3e:9c:37:ef:03:02:ab:4d:80:ea:02:
         e5:96:29:fe:b3:79:63:0e:95:d0:26:0f:52:2a:2e:19:b0:13:
         76:86:39:5a:c1:c1:46:13:97:3b:0f:17:ac:2a:7d:5d:e7:2e:
         d7:92:b9:b9:94:e6:52:f2:24:88:bf:ca:df:33:cd:c0:ca:11:
         11:24:67:bc:25:2b:90:7c:de:3b:61:f1:53:9c:ea:33:44:1b:
         89:7e:db:5f:fa:02:bf:0e:49:70:c4:c2:fb:17:2f:0b:e9:12:
         5f:e8:36:f6:f1:8b:3f:82:ec:6b:6a:1e:cf:2b:65:21:18:75:
         c7:73:4b:98:c6:7a:9f:6c:f2:e7:49:85:0d:26:9e:6c:a7:d6:
         af:d1:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:36:07 2025 by rpki-client