Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          UaQ8WhIFqgBFffgCb4XjqchLgvFq1wop23zgZHMg3UU=
Subject key identifier:   5E:E2:B1:63:9D:B0:93:98:38:8E:35:E1:AD:07:E3:D3:2B:BD:CE:89
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          050C
Signing time:             Thu 04 Sep 2025 23:55:16 +0000
Manifest this update:     Thu 04 Sep 2025 23:55:16 +0000
Manifest next update:     Thu 11 Sep 2025 23:55:16 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: +b0TtLmzwWHK9iToz0Bg+JSgtmHGwSqXR7db7i8q2mA=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: lu1tvmrK1UL4Y/2Rq1YIX+Lb2/NNmqFCgC6huHfwCqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Sep  4 23:55:16 2025 GMT
            Not After : Sep 11 23:55:16 2025 GMT
        Subject: CN=68ba26e4-bec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:43:bc:c1:54:a3:ff:b9:ff:c9:36:65:fe:
                    8b:60:47:60:df:8f:ca:c2:9a:f6:0f:f9:ac:5c:f2:
                    19:89:47:0c:09:09:9a:0d:0c:d9:19:fe:14:c0:ff:
                    a0:a8:aa:8a:86:8f:74:e2:7c:5b:a6:27:c9:6c:da:
                    fc:9c:e5:a8:0f:ae:1f:ed:66:f8:74:13:7c:57:5c:
                    19:d1:70:e0:19:e3:a9:6a:1b:f4:d4:87:27:c1:5f:
                    1f:cd:06:12:34:20:45:d6:d2:ea:36:61:14:0a:b2:
                    18:b2:2f:de:ec:cc:28:6e:68:eb:af:7e:6f:b3:6d:
                    0c:fc:0d:f8:e6:c6:37:a1:47:0a:0a:06:1e:52:28:
                    71:69:f3:8f:30:19:59:ac:32:cd:fd:a7:ca:ab:55:
                    d1:d4:a4:5a:60:9e:6b:ac:f8:2e:09:e5:38:f9:6b:
                    ca:4b:32:41:6f:77:92:03:ad:4c:e2:44:a0:9d:24:
                    28:9d:c7:c9:6b:cc:a4:c2:70:ea:30:a5:58:55:10:
                    32:7b:65:dc:7f:6a:5e:78:10:32:7d:d5:f9:06:76:
                    27:f9:18:f7:33:59:9b:d6:21:1f:3c:46:61:89:2b:
                    b6:b5:70:29:38:03:70:5b:f1:06:13:c2:50:72:b1:
                    72:6f:57:f2:f7:d4:e5:f6:db:73:58:e1:72:17:f9:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:B1:63:9D:B0:93:98:38:8E:35:E1:AD:07:E3:D3:2B:BD:CE:89
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:bd:a8:22:c1:44:16:8c:4f:20:bd:a7:3d:9e:ae:06:46:
         78:e7:a6:e9:10:a5:2e:a8:22:77:aa:76:07:c7:e1:03:58:ef:
         f4:cf:17:95:f9:94:20:75:cf:ea:15:cc:b6:38:de:9c:c8:4d:
         98:ab:bc:2f:f8:4d:b2:d3:2f:3e:bc:80:a4:fa:71:dd:0c:82:
         d7:a2:e9:83:f0:53:ab:94:1c:87:c5:d6:e6:33:d1:31:a5:3c:
         9c:c0:23:d0:07:67:4d:6e:ca:10:2f:87:28:65:ba:38:35:06:
         86:bb:bf:04:2e:4f:fc:99:db:88:de:fe:72:c4:ab:4b:01:cd:
         8c:dc:a2:3b:ec:a7:4c:fa:10:e7:00:d5:cb:5e:96:4a:53:a5:
         38:e7:ac:86:99:09:02:a3:b4:0b:3c:28:1c:88:24:37:4c:6b:
         17:bc:44:89:4e:e4:b2:b6:99:7a:a1:33:5f:8d:27:e2:7a:26:
         ba:22:fa:51:07:89:12:71:ae:d0:55:f1:8b:f3:c3:e2:a3:2e:
         b8:d4:75:ec:c0:65:28:2a:ee:a5:84:c2:bc:05:ec:50:1c:70:
         78:b4:c0:7b:4e:d8:10:5a:5f:ce:ac:d8:47:03:73:14:c4:75:
         95:d3:29:d5:a3:01:ef:a9:6b:1b:47:3b:13:fa:b6:ec:08:8c:
         26:30:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:04:28 2025 by rpki-client