Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File:                     Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier:          8w/1UAzPsrp0iMT5gc0SSSopq952Woz1n5dMdzc1ReA=
Subject key identifier:   7B:81:91:92:BE:BC:25:DD:0C:C5:D3:27:76:1D:52:22:9F:A0:69:AA
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       0901
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number:          08E5
Signing time:             Sat 06 Sep 2025 20:36:59 +0000
Manifest this update:     Sat 06 Sep 2025 20:36:59 +0000
Manifest next update:     Sat 13 Sep 2025 20:36:59 +0000
Files and hashes:         1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: unsqrX7F34ED4TdZ3M8V9htwMGC+7rccIhKqj+0rMKc=)
                          2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=)
                          3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=)
                          4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=)
                          5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2305 (0x901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Sep  6 20:36:59 2025 GMT
            Not After : Sep 13 20:36:59 2025 GMT
        Subject: CN=68bc9b6b-c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:cd:7e:30:ad:36:4a:c0:c0:4f:76:29:2f:
                    91:0f:80:6d:85:68:12:3b:12:5a:3e:26:9b:62:b6:
                    56:2a:8a:9d:41:4b:38:77:7f:d3:a2:d8:80:05:73:
                    33:4a:9c:e0:da:8c:d5:11:52:2e:74:e9:e3:74:a7:
                    03:04:e1:3d:2f:58:3c:c2:b1:e3:b1:25:c3:ef:cc:
                    05:58:8b:f3:d3:e8:c8:e1:cc:cb:58:51:33:6d:9e:
                    f1:8a:b3:73:ae:4c:8e:06:93:04:af:88:a0:57:6a:
                    9b:96:22:41:b0:dd:d5:f0:dc:86:0d:aa:7c:65:1f:
                    1c:97:38:17:8b:2b:d3:67:84:a9:08:a7:66:ca:51:
                    19:5e:8b:a1:53:05:11:2a:96:c1:b2:e1:4b:91:d3:
                    e8:d2:76:cd:1c:40:91:85:d9:42:c5:83:c1:f1:52:
                    52:95:00:8f:92:e2:e0:49:53:c1:7e:14:63:c6:13:
                    16:ba:ba:b3:83:71:19:e2:4a:87:0d:09:ab:7c:6d:
                    c2:54:94:51:43:13:5b:db:53:89:62:03:a3:54:a0:
                    fb:01:50:d2:03:08:12:c3:0b:89:7a:37:fb:ed:64:
                    11:00:f9:1c:bd:f4:0f:56:68:06:4a:95:aa:c3:e7:
                    3d:4e:44:53:54:b6:88:9d:4b:e1:89:6e:33:6c:cb:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:91:92:BE:BC:25:DD:0C:C5:D3:27:76:1D:52:22:9F:A0:69:AA
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:f7:72:c7:24:fe:88:68:45:5b:68:d9:23:bb:34:77:d3:
         a7:78:b9:11:7a:65:2b:32:27:9b:2a:c2:86:fc:7b:88:fc:85:
         90:ad:be:52:03:b6:ab:81:c0:04:2d:9e:0a:76:b4:3a:a8:35:
         5c:07:6f:85:71:c3:cc:8e:51:6d:2b:54:b5:8b:1d:18:76:a2:
         a3:b7:91:0f:30:d1:4c:2c:93:e5:d9:1f:87:83:69:cf:a6:a2:
         c9:4c:de:17:65:9f:10:bb:db:9e:b4:a0:28:df:26:22:05:fd:
         f4:0f:54:8c:e7:59:f0:f5:51:04:f4:aa:ed:c9:d5:21:b9:4e:
         ab:ab:df:9b:c3:f1:6d:87:a9:24:4e:01:6c:4e:95:80:60:98:
         6c:89:dc:2b:34:84:0f:66:8a:48:5e:76:52:69:0b:d8:0e:33:
         0c:66:35:9b:ee:2d:69:17:f1:03:dd:73:bd:9e:d0:a0:95:9a:
         fc:82:fe:87:00:05:b0:d2:05:80:93:f3:d0:06:69:40:94:39:
         0e:68:7c:c9:55:97:01:d3:55:ba:83:60:f6:22:88:dc:d1:d4:
         7e:34:62:1d:80:60:a4:a0:88:38:8d:72:db:7e:87:65:a7:2b:
         96:e1:b5:9b:5c:39:87:a8:7f:d9:13:d9:cf:ec:ca:dd:cf:c7:
         47:a4:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:58:53 2025 by rpki-client