Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          Nvb42w27w6bXKeZw6B/MNDoP/fCnwkvDtVrAmpaTgt0=
Subject key identifier:   10:AB:5B:CA:66:95:95:93:4A:8B:93:CF:E6:91:45:F3:03:F1:94:D3
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1345
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          12C7
Signing time:             Thu 04 Sep 2025 17:13:36 +0000
Manifest this update:     Thu 04 Sep 2025 17:13:35 +0000
Manifest next update:     Thu 11 Sep 2025 17:13:35 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: Ys/r1UoR4b5GsNlYdi2zUh4HjEwZ3StjusVAZRzeG18=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=)
                          7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
                          11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
                          15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 17:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4933 (0x1345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Sep  4 17:13:35 2025 GMT
            Not After : Sep 11 17:13:35 2025 GMT
        Subject: CN=68b9c8bf-be13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:d3:b4:d9:3a:58:a6:94:25:1f:9f:e8:08:
                    84:03:db:6b:72:a9:56:87:24:16:ac:02:15:44:24:
                    8c:67:a7:60:61:87:49:cc:ca:65:65:3b:3d:c5:32:
                    db:69:c5:b4:2f:96:b6:31:4e:69:72:49:5a:91:05:
                    eb:14:e2:f2:06:ea:00:74:d0:fa:78:08:0d:bc:99:
                    b6:e8:e1:2a:61:96:c0:37:ac:fd:51:c5:73:66:18:
                    60:9d:3b:bf:97:2a:a8:0c:87:f7:9e:66:9b:ca:80:
                    4a:92:76:d4:d1:4e:c3:2a:95:80:b8:63:fc:56:76:
                    50:32:6e:0c:f4:ca:0f:8c:34:b9:6a:27:32:38:e6:
                    f1:ad:ac:6f:68:3c:2d:c6:76:9d:62:1b:2f:0e:d1:
                    1a:d3:e5:1e:c4:ad:6d:d2:87:d3:16:4e:af:71:38:
                    bd:bc:fe:75:9f:9d:b4:5e:03:45:39:f2:e7:6c:b4:
                    8c:3e:53:3c:6a:22:b5:8e:a7:06:c0:26:d9:7b:48:
                    44:68:bb:57:7e:e8:88:a0:ae:2f:7f:0f:f0:94:c4:
                    ca:9a:62:10:42:ce:b8:38:88:c6:82:43:4f:ae:f6:
                    ce:63:76:f4:f8:c5:9c:56:6a:30:76:3c:51:8d:94:
                    3f:d4:cf:62:ed:0e:5b:fb:45:2e:4f:ce:90:97:b5:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:5B:CA:66:95:95:93:4A:8B:93:CF:E6:91:45:F3:03:F1:94:D3
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:20:05:37:2a:23:d9:9b:d9:48:3c:ae:dd:b5:af:cf:91:
         36:80:cb:49:f7:9f:8f:66:42:53:8d:b8:fe:ba:e0:a6:88:36:
         3d:d0:20:7b:30:44:bc:87:1f:ad:18:4b:d0:d6:42:95:da:ce:
         ae:51:ad:a1:36:5f:ee:f6:1d:98:71:2f:f5:07:9e:32:8d:84:
         8c:63:77:ec:18:41:2d:7e:ca:29:95:34:10:c1:43:ba:8d:80:
         c8:2c:ef:01:68:0f:25:71:28:ef:54:92:42:af:5f:46:91:26:
         f9:52:83:86:b9:2a:a9:e2:e3:e8:19:da:5c:d3:6c:39:fe:e1:
         df:44:1b:e1:e9:79:b9:0b:c9:9a:ff:81:2a:02:fc:0f:c6:c4:
         c7:9a:1a:c3:6d:e8:3d:91:50:b2:a1:a3:b9:0e:8e:21:3f:68:
         2e:3e:6e:d3:e0:04:03:47:47:09:e1:95:d3:1f:89:cf:4e:c1:
         c6:08:8d:26:a3:91:9f:ae:b1:d0:f3:8e:07:c9:fa:58:15:6c:
         85:cc:e3:10:c9:af:8c:f5:44:8c:80:06:e2:ec:ae:78:73:1d:
         da:be:4c:ad:5d:ff:74:eb:3d:f8:12:54:19:b4:b0:e0:7f:01:
         86:c2:f1:ba:07:e6:0c:e3:c6:f1:0c:fe:36:0b:46:4c:cc:78:
         be:c5:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:18:48 2025 by rpki-client