Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          /4mDD5fVUoc3jEHGdmlTKEVagb2P8khmgXanaQAjQ68=
Subject key identifier:   A3:EE:D2:DC:A8:2C:37:B7:FF:5F:2E:D1:BF:87:C0:08:AF:EF:18:18
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0DD0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0DAE
Signing time:             Thu 04 Sep 2025 14:22:53 +0000
Manifest this update:     Thu 04 Sep 2025 14:22:53 +0000
Manifest next update:     Thu 11 Sep 2025 14:22:53 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: c7lw2+PlbrFREYJvtwSx3Ch/ARc82ZasaG0FeGuPyAk=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: z3Q0XwSryFlf5ykqdN5Y1TdhtSCfR2jxPCzlYL9e1mQ=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: VRtnd9Tj1mWAfM/JLgDB4PLLpcyhK2ei01M7Ec3zpI8=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: YgDfwoJsux34uSaM5jXKcO0HoCC5yHWaw8GBRqOn1lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 14:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Sep  4 14:22:53 2025 GMT
            Not After : Sep 11 14:22:53 2025 GMT
        Subject: CN=68b9a0bd-2d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:53:7f:7a:13:0c:b3:bb:c0:38:1e:0d:47:
                    ad:7c:88:b1:6d:38:08:cd:02:69:5b:68:dd:56:6b:
                    1d:01:90:13:02:98:e2:b4:c6:25:3d:9e:76:ba:57:
                    d4:0f:17:c8:38:2d:94:d5:98:a1:06:3e:f9:2f:0d:
                    13:49:79:ff:1a:0f:0e:a4:96:2d:3f:be:77:76:9d:
                    28:70:52:8a:6b:df:ea:68:df:cf:52:6f:36:bf:04:
                    de:85:5c:8e:fb:ae:20:07:24:c9:68:a2:b8:85:ac:
                    63:22:d7:48:a2:07:95:fc:f3:6b:32:ec:68:c7:04:
                    de:a5:7e:c5:43:b8:97:7f:21:8b:58:3c:5f:2e:b9:
                    05:93:ac:31:d4:12:67:ca:a8:12:d9:8a:c6:95:93:
                    56:de:44:2c:ef:11:b7:c3:74:b8:9b:e0:ce:56:08:
                    86:d9:d7:a1:26:9e:be:fd:21:8f:c3:02:cc:4a:8e:
                    bd:67:f1:47:55:1d:96:3a:1f:c3:ce:c5:c4:f1:27:
                    f3:72:20:e1:3a:4b:65:df:a3:1c:bc:db:6d:78:9b:
                    7d:89:8f:ab:24:67:2b:bc:f5:1d:ec:37:80:3f:fb:
                    a9:8d:d3:fe:85:2e:31:90:d1:bb:9a:4a:83:01:ee:
                    08:e0:b6:99:0d:87:74:a9:d4:4a:fb:69:1f:18:c0:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EE:D2:DC:A8:2C:37:B7:FF:5F:2E:D1:BF:87:C0:08:AF:EF:18:18
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:46:d2:44:4c:96:28:8e:4a:21:a8:e6:0f:6a:fd:a7:99:
         fd:d3:94:cc:15:62:eb:9d:e8:8d:9b:7b:89:7d:dc:99:54:00:
         3f:db:8f:1e:56:3a:c0:7d:11:d5:b7:77:2e:01:59:2f:73:5c:
         b3:43:72:cb:0c:11:d6:72:7b:e0:e4:ea:28:d5:21:e9:79:54:
         a5:b4:7d:ab:b6:87:2c:ee:d2:d7:a9:a8:ce:b4:fe:bf:07:c8:
         8e:03:a2:de:c9:d2:9f:88:a2:cf:81:02:b6:b9:0a:99:da:16:
         e6:63:2e:cd:e1:f5:60:2f:a7:1b:e1:43:b1:24:6f:2b:6e:81:
         32:b7:7e:b6:0b:a5:e1:4e:d6:b5:ec:10:36:b9:86:a9:4a:4d:
         f0:ed:3b:20:b1:55:b1:e9:4d:e9:ab:92:73:71:fc:e1:94:8a:
         c9:92:80:f4:1c:74:b8:29:7e:70:c8:3b:19:3e:fa:33:48:13:
         1a:10:db:ff:e5:63:c4:dc:12:60:63:61:f2:05:a3:28:0a:77:
         7a:7b:2e:48:79:63:2d:d3:1f:09:2c:89:0f:30:06:47:de:89:
         c5:64:76:1b:da:1c:c2:a4:c4:b6:3f:e5:3c:be:0b:9e:5f:c3:
         97:2e:d5:11:b8:72:a3:26:60:f1:1d:39:a7:18:77:56:d3:44:
         d2:e7:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:25:06 2025 by rpki-client