Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
File:                     sae05J_PFfDFALickX8mZHJQ8K4.mft (raw, json)
Hash identifier:          j5I2pMC/vFOFPzVShEo65Oxa77ym95aqMvLZomWvVf8=
Subject key identifier:   E3:ED:C3:A0:20:74:DC:A2:2E:7A:6F:69:9D:75:84:77:95:10:BA:B1
Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE
Certificate issuer:       /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
Manifest number:          32
Signing time:             Thu 21 Aug 2025 07:51:44 +0000
Manifest this update:     Thu 21 Aug 2025 07:51:43 +0000
Manifest next update:     Thu 28 Aug 2025 07:51:43 +0000
Files and hashes:         1: sae05J_PFfDFALickX8mZHJQ8K4.crl (hash: xl/RFh6jZMOLAy/8wfzijOv3/3euMsNF1wHcL7ROLkA=)
                          2: BA4C0E94330911F08D233546C4F9AE02.roa (hash: dP93uYFjOQGVmzTzM0xXMIjOeOKOZofW9HJX5/7YBks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 07:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
        Validity
            Not Before: Aug 21 07:51:43 2025 GMT
            Not After : Aug 28 07:51:43 2025 GMT
        Subject: CN=68a6d00f-ebc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:fa:b5:6b:94:e8:33:b3:14:8a:1d:56:00:
                    2b:fd:7e:43:7a:83:29:54:24:e9:03:35:ec:9b:5a:
                    7b:b1:e0:a6:7a:82:2c:62:16:25:5d:f3:68:b5:b9:
                    5f:24:c9:ed:38:b1:d0:56:e8:9d:7d:ce:dc:39:35:
                    e5:95:d5:a7:2e:21:a9:6f:30:59:d9:74:63:3e:1c:
                    35:7c:5b:16:8f:36:04:ed:87:0c:b1:59:d1:ce:ef:
                    9a:5a:08:3b:1f:f4:dd:43:1a:fe:01:0e:ad:96:30:
                    fb:17:0e:58:7c:67:11:62:8a:a3:fb:18:6a:e1:cb:
                    b9:c3:05:b5:40:5f:00:f0:6b:ca:0e:f7:b9:e7:5e:
                    06:9f:be:b8:a2:c7:cb:f8:c5:24:c4:a8:5a:ad:99:
                    41:f9:26:1f:c5:e7:b5:4d:a9:45:a6:77:c6:78:16:
                    9e:57:a6:64:69:40:48:7d:0f:6b:49:a6:58:c2:93:
                    9a:e1:4a:64:ea:1e:48:73:a8:e6:83:24:85:68:07:
                    dd:10:05:9b:77:cb:09:27:3f:07:52:f9:93:5c:5e:
                    07:2c:0e:b8:33:da:38:eb:58:3a:4f:58:3a:2d:52:
                    68:48:a5:c4:14:2b:22:a6:6c:10:b6:bd:32:00:89:
                    d5:7b:8c:24:34:2d:bb:1f:e4:ae:64:a1:e0:d2:c8:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:C3:A0:20:74:DC:A2:2E:7A:6F:69:9D:75:84:77:95:10:BA:B1
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:a7:49:0e:4a:31:53:6e:d5:dd:29:e2:c7:31:15:a8:7a:
         0e:0c:cc:3f:5c:80:dc:1f:4c:64:d2:4e:99:35:9f:92:53:c8:
         75:84:70:d1:a2:6b:4b:8e:bd:34:d6:f6:a1:d3:b1:e2:18:ec:
         db:4b:af:0c:0f:8a:84:e8:c1:ed:8f:a1:2e:84:e1:21:90:a0:
         89:86:18:ae:d5:13:a3:65:46:9d:ab:a1:0e:27:74:9f:24:59:
         f7:f9:6e:c3:54:fb:43:34:1a:b0:57:62:e7:1d:a4:62:bc:dc:
         82:33:77:0f:e5:79:42:28:08:47:58:f3:63:bc:97:b4:50:c7:
         35:52:03:0d:5e:f6:f5:04:23:ca:60:4f:40:e3:7b:29:bc:d8:
         3d:89:51:cf:ff:c4:da:52:11:86:43:51:fc:ca:6b:0c:9e:cf:
         21:35:e5:d5:ca:df:d3:dc:d7:e2:1b:37:f4:e9:2e:79:64:47:
         e1:52:e2:39:7f:76:53:d3:05:13:48:77:e1:e3:c1:00:45:97:
         2b:4b:2c:1d:fb:8a:03:44:07:4f:aa:56:0d:0a:51:6e:a7:5f:
         cc:1c:48:77:50:9e:8d:09:3b:10:b2:15:87:9b:0a:c5:6d:9c:
         47:04:4c:49:40:b1:87:77:15:02:c5:fa:6a:5d:94:76:f4:db:
         0f:ad:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:25:12 2025 by rpki-client