Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File:                     eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier:          fpQSqlC6tE15NuRZnPP3j/1Vjrwnu92H5GfyCg1g/TY=
Subject key identifier:   DE:51:D2:26:74:7B:31:98:45:CC:B4:55:5F:1A:40:00:B3:8B:72:F5
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer:       /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number:          0180
Signing time:             Wed 17 Sep 2025 04:13:21 +0000
Manifest this update:     Wed 17 Sep 2025 04:13:20 +0000
Manifest next update:     Wed 24 Sep 2025 04:13:20 +0000
Files and hashes:         1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: BEO5LuD0txwpTdfYWOTJInGUHikm2sv0SmHfZkAlkBU=)
                          2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
                          rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
        Validity
            Not Before: Sep 17 04:13:20 2025 GMT
            Not After : Sep 24 04:13:20 2025 GMT
        Subject: CN=68ca3560-1b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:9d:9e:d1:00:85:43:a3:13:51:05:16:e5:
                    a6:ed:f3:c0:22:fa:c6:ac:17:b0:b3:c4:b6:c4:8d:
                    7d:d5:74:75:12:5d:64:40:c9:b8:bc:f0:29:a2:4d:
                    f9:5b:4a:84:74:cf:52:0b:55:89:c5:43:62:44:53:
                    e3:5a:25:e6:d1:5e:b3:4c:1e:3e:e1:35:b5:cb:5e:
                    08:ca:83:b7:b0:89:68:73:06:68:62:f7:d8:93:90:
                    9d:61:e3:cf:4a:6f:e2:f6:b2:3f:b2:8a:9f:2d:d9:
                    2a:a6:4b:10:32:b0:4c:c0:9e:cf:a0:8c:fd:47:38:
                    0e:52:e1:8b:81:2d:fc:43:47:28:5b:22:03:00:3c:
                    5f:a5:e7:1b:34:3b:69:b8:aa:c1:61:ef:41:2f:ab:
                    e1:64:9c:29:c1:79:8d:97:88:b5:11:a0:0e:ad:8f:
                    1a:22:0d:97:e3:ee:71:ee:ab:e4:dc:19:47:5e:9c:
                    28:8e:fe:16:5c:8f:86:b9:02:a0:3a:1d:e5:8b:b7:
                    47:0a:74:84:75:02:f2:ae:91:30:22:bb:e6:5d:ae:
                    c2:ce:96:bb:34:8c:8a:5d:cd:39:6b:40:d0:da:94:
                    a1:d0:12:87:cc:4b:8f:7f:17:c1:10:45:77:53:c3:
                    be:dd:3d:f5:f4:48:f1:00:32:32:42:a3:1b:92:82:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:D2:26:74:7B:31:98:45:CC:B4:55:5F:1A:40:00:B3:8B:72:F5
            X509v3 Authority Key Identifier:
                keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:18:1c:3e:c1:8d:56:9f:ee:da:e9:c1:ef:dd:a2:6c:98:d8:
         39:8e:d8:b8:ec:3b:8a:18:85:48:16:3d:82:a1:39:aa:f6:37:
         5e:d2:ad:88:d7:11:89:f0:61:b1:4b:07:a2:20:6e:58:77:b7:
         7c:76:05:af:21:d1:bd:a7:37:f5:9f:19:ed:9b:7b:f3:ea:0e:
         91:b6:21:02:0f:7a:e1:ee:de:ce:20:07:25:86:d7:50:eb:f9:
         26:2e:70:ac:23:c2:57:33:0f:d4:5d:34:d8:be:d7:45:58:41:
         2e:46:4e:29:21:81:9b:45:58:ce:83:23:d9:2f:6d:cf:72:6d:
         87:32:e3:3a:04:5c:4d:61:74:f4:5e:54:70:69:82:37:12:6c:
         d1:60:9b:71:ee:ab:2e:22:46:41:59:d6:fa:1c:a7:3f:43:1e:
         0d:11:c4:4d:f1:1c:cb:c4:fd:42:13:76:c1:b1:ac:83:27:26:
         04:95:f1:c2:0c:00:98:47:54:f8:e4:6e:50:4d:81:78:c0:39:
         72:b2:ad:17:67:47:d9:8e:5b:41:29:4e:e7:83:52:d9:c1:03:
         f5:d7:3d:78:88:4b:2d:48:52:ec:60:94:00:3f:0a:17:39:25:
         7f:50:39:4a:05:38:2f:79:22:93:06:9f:d7:10:d8:69:c0:96:
         89:ad:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:11:01 2025 by rpki-client