Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          j931Pr9LAsog+1TkWwaseVOxW0SR2heN2v57Nbns8X8=
Subject key identifier:   02:46:DC:BD:D5:F1:D0:C1:92:26:C5:17:71:10:53:3E:F0:2E:47:47
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       397A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          375A
Signing time:             Thu 04 Sep 2025 14:22:14 +0000
Manifest this update:     Thu 04 Sep 2025 14:22:13 +0000
Manifest next update:     Thu 11 Sep 2025 14:22:13 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: 81RVKkSDhSG4VMoiXt5xx1ztFqbQTeHGxzz4bKcTWnc=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: 7Qy9qXoaY9x4VuN4EZ0lO0nUdpYSzQD6Nyrn1uaVEq8=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: z9HaUp/F2Eb09B4FeQi8go7G2DS9o12Zg3mvwv3IbtM=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: ChYD+dNYyCInKmhyHsi0B1wkTq6FHjT+KDylhmMIQaU=)
                          5: FFB4329A5B9011F0A3ECA351C4F9AE02.roa (hash: ngLPWJnAOp37+VU9f3DQJVToWiTF9NgeRaLixJCdqgM=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: Fum9wynbW46bBWpLsLIRjpqgESZ0wYgIRM9aD5ujlCc=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: C8anzo3wIrPEk1GE8PbP/ejOtinKtiNErIk39oiNvt0=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 2UAmCqv65l0EyrJ8vogZ6XvweSD9Dk8E2FEP81jdWxE=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: evSbADlKi6Aoc1pxAc2NrEs9X2WBgu7ILOt35lu9gm4=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: Xwu2cFcPAEo+elSKxorX+Sf443v4LqtlzkSNNtTquMc=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: mg1teoBc7Boh3ZoLd+5gvaGJaFd/PWcUnxH/SupEHww=)
                          12: 97DE828061E211F0A89DA027C4F9AE02.roa (hash: ZE7ZukYBgBvNYyPPJAzJ612eGNB9AKUYhTrRQDE3DEk=)
                          13: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: MdnVi1OIFkoo0dm/yCy+3NB6G2QdHBGCAwYC8bNp0Zg=)
                          14: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kfvn38ixprZNvoP8sdkWRE4Y87QEhE7Cfyn7D4FPsf4=)
                          15: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: XeOavvZiR3sFlQ/5myU2/vsanQb5X0EfvxEaH+f2fdc=)
                          16: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Ffh0Llbu+aifsZ/PhUzKVAABbwr/NW6qzAkEIXJ6/7A=)
                          17: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: DcHlNA8XpoMoa8j+kjrzppHmEvQSR+3K0O1rUE7HneA=)
                          18: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: 09tGhGYy1EBd0MGX/GluMy6ke+NPb5M4XAtBFpqIk9Y=)
                          19: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: y/ZcKXvRId0MU2jWP2qiUlc9klsFtiDYeSjklRbVi0k=)
                          20: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: LcpUVsxOJi3t+CPRAWzqjfdnmFogw8cF+SJQm5U5O4I=)
                          21: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: qUMKMRxZ99VhDadcacr3UtNm3iVgxflvwhxpIHuV3Uc=)
                          22: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: R3NOwHRvbG4Sj9UJHqKDj+q85wrGI2+UCl4SulBfUw8=)
                          23: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: YitENFm9BCdA92I41DJxpRQ7XMmhtSEQKT0EzpScV8g=)
                          24: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: vFBJDYKINsG7qNbm5o+Za+m+zPuBlKRNX+X12lKjHMw=)
                          25: 52850542A60811EF91FB1113C4F9AE02.roa (hash: M6YB2rmwwkNibJ4OogBvzsryRcCd0Ftm7HHimXMezmg=)
                          26: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: VhA+Hs+q7s+bBv48I0pk72FnDH5rcT3DytwZJAE63fk=)
                          27: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: PlEnsEP21PJC16O7WpqiMN6BCHLW/59u/YvhE9nkz+Y=)
                          28: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: qHE4CVNPl2hfbb1z0WR6L0xNSdCigOSFLS7QO+iIYEU=)
                          29: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: DzJjX26F/6q2iCnJ1sWD2xCr+N10vleN++lLSBNm8a0=)
                          30: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: /SphmDOXIGkmk4Dx70JMdSpOBjmQfa6XPTmojFUioL8=)
                          31: 332F710683A611F0948BAE55C4F9AE02.roa (hash: e7S4iwclcxC/EH6W3bpGFjNP9AVKbSNEYpl6GMJFZy4=)
                          32: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: rowBvIqawxIBDAjrerBCpZz930ir2eOmQUO5U3LzEmQ=)
                          33: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: Cen6H7O/9BMGQfEMnjJkwMjjekXxF8vODlzBKhy+TQU=)
                          34: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: GvJakzzk6/d7G+Vxt5rr4xnMS4OHrqYd4CORSpkPBhM=)
                          35: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: l8Dw0ddBvCAgKUHsutMECKNj1UHJE2k/V9PmgyyUJds=)
                          36: 813979825BB011F0AC78A45BC4F9AE02.roa (hash: y253tv6qx5tZsbZ2c5EC5vtkvkECQA5aV06Pji+pbOE=)
                          37: 5E775F6644CE11F09A370919C4F9AE02.roa (hash: CV0j95RqvFk5vdn0PU1qSmljoaTpS4bQLUN+bT3PTXI=)
                          38: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: rRWG0qYGlcMnQzzd2jOwyjp0JRek+hed3twRZmd9Rfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 14:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14714 (0x397a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Sep  4 14:22:13 2025 GMT
            Not After : Sep 11 14:22:13 2025 GMT
        Subject: CN=68b9a096-1254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:db:3c:2c:18:03:85:d8:ee:86:77:e0:cb:0b:
                    00:2e:ce:f7:f1:48:aa:d6:00:90:42:36:de:9d:f4:
                    13:dd:28:05:db:b7:98:f1:a5:c9:87:60:63:8a:fd:
                    e6:2c:45:44:88:8f:ca:c3:02:43:83:73:5a:27:0b:
                    29:eb:9b:62:ee:6e:af:98:a8:1b:19:81:5e:1d:a6:
                    4f:84:3e:57:8f:8d:f5:31:48:c7:24:a5:1f:58:2b:
                    08:d6:d9:12:c3:ae:28:49:16:a0:1a:4c:d2:8d:48:
                    53:cd:dc:b2:93:31:6c:9f:56:65:d9:a0:2f:0e:ef:
                    a6:0e:aa:ea:ef:3d:0a:b0:64:74:63:7b:ed:cc:dd:
                    ac:fd:a8:cf:43:29:5f:0c:6f:99:d2:cf:d5:f8:0b:
                    a0:f6:07:52:35:7b:e1:a1:44:87:67:fb:2d:f9:70:
                    45:74:62:35:af:53:ef:c2:d8:ea:db:5a:47:bd:89:
                    eb:50:08:66:d3:09:28:9b:5b:68:44:c3:37:64:8c:
                    c3:4e:fb:1a:3a:49:c4:c6:83:8f:ea:61:c6:cb:c4:
                    2e:99:d4:77:74:f4:34:53:c3:fc:9f:3c:f2:26:aa:
                    75:26:7e:54:55:ce:49:fd:a8:af:38:f9:1b:a8:e2:
                    d7:87:1f:6e:76:11:76:22:7b:2c:32:a7:58:aa:96:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:DC:BD:D5:F1:D0:C1:92:26:C5:17:71:10:53:3E:F0:2E:47:47
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:56:2a:65:c2:e0:e4:2b:11:76:06:0a:a8:a8:1f:9e:13:
         e4:02:39:44:a9:fd:a4:1d:c2:cb:d2:af:71:75:4f:80:4c:95:
         ad:f7:46:35:44:aa:ad:e1:25:b8:5c:36:1d:ec:16:19:4c:c9:
         c2:86:96:2a:dc:a6:f0:5f:a4:8a:ee:53:9e:25:ac:9c:b2:b8:
         4f:c1:ac:0e:5d:e3:69:2b:17:63:49:4a:d5:bb:c4:c0:8d:ba:
         d0:de:e9:15:17:c5:09:a2:1a:10:3f:50:1d:d4:62:c4:2e:c7:
         d7:a3:2b:7b:37:67:b6:6f:80:04:9a:0c:0e:93:6d:14:a0:c5:
         37:98:4c:63:86:5b:8d:d0:f7:c2:2e:a1:a0:6d:49:af:2a:1d:
         d4:47:5c:f7:43:5c:ef:c6:fa:a6:b6:a4:0c:c0:66:18:8e:60:
         16:4e:50:1b:40:da:62:f3:27:35:1c:ac:20:10:c9:d1:28:68:
         1a:b8:1b:08:ab:a6:1f:46:51:62:e5:56:4a:c9:06:63:bc:45:
         22:28:63:1e:13:72:4f:94:3e:04:d0:82:22:82:35:85:22:cd:
         cd:f0:77:4f:a6:d2:29:81:db:34:57:64:1c:4d:19:d2:99:96:
         4a:d9:75:99:76:89:d8:1f:c7:81:6e:7e:fa:23:da:c4:c7:92:
         e3:bb:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:36 2025 by rpki-client