Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File:                     iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier:          jGHaVSE9Rt6NZe8+dX5S6oP08HZoUXUJeYuLaka0enU=
Subject key identifier:   9B:D4:F9:E9:67:01:AE:2F:74:51:E7:D5:A7:F7:AF:70:07:77:07:0B
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer:       /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number:          081C
Signing time:             Tue 02 Sep 2025 16:06:43 +0000
Manifest this update:     Tue 02 Sep 2025 16:06:43 +0000
Manifest next update:     Tue 09 Sep 2025 16:06:43 +0000
Files and hashes:         1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: yOy209oaml4NKwpYUCNdTWlJOtqcibH8gTrs+82u5lI=)
                          2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=)
                          3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 16:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
        Validity
            Not Before: Sep  2 16:06:43 2025 GMT
            Not After : Sep  9 16:06:43 2025 GMT
        Subject: CN=68b71613-ea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:9d:93:06:14:8f:ac:2a:b6:b8:63:43:3f:
                    b4:9e:a1:b0:ff:58:0d:a7:73:82:d5:51:e8:0f:f9:
                    52:17:a2:c0:18:11:d4:45:f4:21:1d:2d:6f:b1:02:
                    59:ba:22:86:75:89:9c:48:ca:be:fe:76:97:8d:9a:
                    bf:7e:ef:7b:bd:25:c9:84:12:c3:f3:c3:5c:1c:c8:
                    05:fd:22:95:40:49:72:40:a8:9a:4c:49:81:68:5e:
                    da:2f:7c:4a:5e:6d:ea:86:b9:09:77:6f:00:6f:91:
                    6f:81:d7:a5:98:2f:76:64:64:8a:76:df:bb:5d:54:
                    72:b0:24:60:bc:2d:f5:3b:3b:b0:d3:ce:b3:3b:4f:
                    f8:c0:32:40:7a:d7:35:31:6b:c1:b9:e0:56:01:85:
                    45:e7:5f:79:b0:99:30:4e:9c:08:c4:08:18:d6:10:
                    40:e1:21:42:b7:7e:fa:f1:9a:91:72:ef:06:aa:70:
                    b7:85:bd:7a:ed:a1:b5:c6:ec:4a:cd:52:a8:03:79:
                    0a:85:1f:c1:60:38:28:ad:ea:df:63:1c:3e:e7:99:
                    3a:a5:16:d2:09:cb:69:3f:7a:ce:81:fc:a1:32:18:
                    c2:21:c7:8e:e5:31:69:eb:28:a2:93:5d:b8:b7:94:
                    45:a8:cf:cb:60:f1:ad:e1:51:ff:fe:63:01:b6:74:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D4:F9:E9:67:01:AE:2F:74:51:E7:D5:A7:F7:AF:70:07:77:07:0B
            X509v3 Authority Key Identifier:
                keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:17:f8:f7:25:e1:ca:7c:81:48:e1:e2:65:f2:fb:f7:bd:
         00:e2:8a:1f:af:eb:32:77:f4:e7:d6:6c:1e:81:1d:61:10:3f:
         c9:e4:9b:8b:62:e0:dc:5b:57:63:e0:0f:f9:84:53:2d:d2:91:
         9b:9e:87:b9:0a:d7:95:f5:7f:31:70:75:ef:e4:40:11:a8:d3:
         ff:45:51:3d:3e:d3:7c:9e:da:e9:e0:14:b0:90:03:ca:0c:bc:
         49:a9:24:49:a9:e2:7b:11:28:e4:43:bd:6d:7c:ff:42:9e:5c:
         3c:a9:dd:6f:03:f8:91:93:d1:3b:28:65:60:33:0b:ef:48:1b:
         cd:dc:85:c1:65:44:6e:46:1b:9b:34:bc:ba:a2:cb:9a:88:58:
         c1:05:a8:4a:39:c2:c4:68:aa:3d:c7:36:7f:2c:41:24:5e:28:
         8f:83:d4:e1:0c:42:cf:ba:d9:ab:f1:36:ed:cc:5b:58:4c:06:
         b9:44:c3:e7:b1:04:77:81:ab:90:cb:12:c8:7e:05:d9:4f:9e:
         b8:26:9e:46:15:70:c6:2e:c5:b5:30:bb:b3:ba:1c:db:46:0d:
         e7:6f:ee:ad:17:a1:e8:75:c1:b8:20:b3:4a:23:83:1d:8f:95:
         5b:30:f7:75:5b:6a:ef:38:88:0d:02:9b:5d:45:b8:65:47:52:
         b0:f0:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 13:56:45 2025 by rpki-client