Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          6ZudNHkH8suhOGJzHZUPviSf0pNbkwxPmSAgZfnR6Pg=
Subject key identifier:   AB:53:63:1E:B4:33:E0:26:95:37:53:32:D9:2E:B8:11:9A:09:4F:FD
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          0531
Signing time:             Tue 16 Sep 2025 23:52:52 +0000
Manifest this update:     Tue 16 Sep 2025 23:52:52 +0000
Manifest next update:     Tue 23 Sep 2025 23:52:52 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: QVjHvs6mAV+elNQQMoD+t8FahUacf0XwEyvpMDIs3To=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: +BX7RaNNlsglW/BB60o8n67yb/21GqaNOP3+xpToWWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 23:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Sep 16 23:52:52 2025 GMT
            Not After : Sep 23 23:52:52 2025 GMT
        Subject: CN=68c9f854-0f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:8f:46:5b:f6:de:a6:7d:b6:95:a9:d3:2a:
                    11:3d:1e:4e:b6:6a:ca:32:32:36:88:b9:e3:ce:ff:
                    f8:b2:89:fa:b7:52:55:6e:c6:d5:6f:c7:e4:f4:c2:
                    30:3c:15:d8:59:79:8a:7c:23:e9:b8:e0:d4:7f:1c:
                    ba:70:0a:ac:19:3e:e8:0e:0c:1b:a8:66:f6:e1:a9:
                    86:fb:00:00:0b:13:ce:19:2a:f1:d6:fd:d6:9d:81:
                    9c:6a:72:cc:b0:18:b6:74:f4:43:1a:31:a7:3a:07:
                    ab:96:08:82:2a:0c:55:37:13:f7:72:27:3d:a6:36:
                    a2:bb:e9:44:c7:c0:47:91:02:8e:d6:42:3a:6e:12:
                    ec:7e:7b:10:89:2c:f0:9f:34:0e:33:1d:8e:b0:07:
                    ee:dc:0d:d3:7b:d1:a0:58:9f:ba:7d:f8:fd:13:1a:
                    70:fb:7b:95:44:7f:bc:76:9a:fb:2d:db:c4:de:8e:
                    70:a4:f5:d6:50:93:2d:b7:0b:06:d8:2a:e1:e4:80:
                    6c:8f:7e:d1:f3:63:24:81:11:ba:07:1e:41:30:6d:
                    06:70:33:e2:d1:db:7f:63:49:88:de:3a:28:5d:ee:
                    30:eb:a2:ad:07:d9:ca:44:0a:da:c3:ef:72:cd:5c:
                    ed:ca:2b:61:b2:8d:77:39:9e:d3:67:38:85:ab:02:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:63:1E:B4:33:E0:26:95:37:53:32:D9:2E:B8:11:9A:09:4F:FD
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:36:94:f8:48:56:87:90:5d:2e:bc:f7:bb:f4:9d:ea:96:
         8a:98:91:f9:88:61:56:75:ef:68:9e:91:e2:41:ee:d0:d7:f5:
         f1:62:ba:e1:6c:d3:2c:8e:1e:dc:b1:66:63:4a:e5:98:ef:f6:
         62:ee:ee:03:29:0b:0f:18:d3:17:89:ee:b1:bf:fc:00:26:93:
         41:de:4a:13:f0:f4:53:8b:7b:ce:cd:b1:a1:05:d7:df:3e:f1:
         c2:43:d1:3d:89:82:29:68:be:a9:31:51:bb:99:bd:b1:27:ca:
         21:2a:95:90:32:39:f9:cd:2a:32:d0:6c:55:59:ce:7b:f8:59:
         00:00:f0:36:20:3f:97:89:f4:7d:bb:c9:a9:9c:46:da:85:af:
         e9:bf:ec:2b:6d:b6:46:f5:26:6b:31:e8:7d:9c:1e:f0:ae:b1:
         86:fb:c8:1f:d3:54:a9:81:d2:1d:61:cf:58:75:f8:3d:ff:22:
         7d:e2:cd:e3:2e:4d:1b:27:59:ee:90:0b:72:68:cc:c0:42:35:
         cd:14:67:d5:c1:b7:5d:1a:4b:f7:28:bf:04:1d:9e:61:85:40:
         21:c4:13:c6:cb:8b:06:ee:15:1d:f1:2f:ef:be:ec:5c:fc:79:
         8f:a3:f8:cb:3a:3c:d8:1f:ca:42:39:66:dd:45:bd:d2:23:f4:
         26:f3:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:53 2025 by rpki-client