Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File:                     svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier:          cDqPsZjvoopAW+PI8LtvTlKla6USAjotTY32DRxkJuU=
Subject key identifier:   9F:FD:AF:F1:BC:B0:40:26:63:47:CE:34:B7:FD:37:50:38:34:E7:B5
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer:       /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number:          03E5
Signing time:             Tue 09 Sep 2025 00:36:57 +0000
Manifest this update:     Tue 09 Sep 2025 00:36:56 +0000
Manifest next update:     Tue 16 Sep 2025 00:36:56 +0000
Files and hashes:         1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: dOqY2I2PzDbcGVE4OXipSJsl3Ui1MD8py7LX5reExjY=)
                          2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
                          rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
        Validity
            Not Before: Sep  9 00:36:56 2025 GMT
            Not After : Sep 16 00:36:56 2025 GMT
        Subject: CN=68bf76a9-7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:49:75:82:6f:18:78:7a:4c:01:bf:e2:61:
                    42:3d:8d:ac:bc:80:e1:68:83:77:93:25:5a:9a:34:
                    bc:e3:f6:99:e5:5e:dd:00:18:7f:d9:3a:d3:bf:fc:
                    a8:24:60:17:e3:0f:9e:e0:bf:bc:72:cc:db:81:1a:
                    9e:fc:20:5a:69:22:1f:c2:30:c5:5c:4c:6f:e7:b7:
                    09:66:fe:ef:36:ed:b8:03:b3:0d:3e:c2:b0:58:c8:
                    77:07:da:fb:7a:44:7d:7d:38:36:4b:09:7b:87:bb:
                    d9:4b:28:18:d4:b9:99:a5:dd:4a:32:06:75:7c:17:
                    76:c1:ee:f8:64:2e:93:af:31:ab:39:49:90:e5:1d:
                    c6:d8:b1:bd:cb:2a:ef:d5:d2:76:cd:51:c1:5b:4d:
                    1c:f5:66:2a:56:99:7b:3b:e4:cf:ea:ff:fa:07:94:
                    8c:e0:1c:54:fa:9a:e4:3a:f2:98:2a:ef:cc:7d:f1:
                    94:9e:4a:04:fc:00:f0:e5:62:5f:a9:0e:a3:81:f1:
                    a0:48:c0:01:9a:03:a2:b2:5d:8e:ac:d8:ae:2d:dd:
                    6f:c3:ff:42:d6:b4:b2:f3:ca:d7:a7:5d:b6:87:35:
                    4d:aa:ae:5d:56:da:2b:8b:9f:d5:fc:e2:31:0e:76:
                    ea:c1:d3:47:4a:4c:bc:a9:31:de:4b:43:33:c1:fb:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:AF:F1:BC:B0:40:26:63:47:CE:34:B7:FD:37:50:38:34:E7:B5
            X509v3 Authority Key Identifier:
                keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:b5:29:d6:38:09:4f:2a:26:91:c1:09:a0:da:9e:dc:d2:
         55:67:5e:ff:fe:ae:9b:e2:1a:ca:14:06:eb:09:27:38:c1:b5:
         60:8d:20:fb:3c:e8:df:29:8c:2b:bd:7d:0d:b6:f3:bf:1b:73:
         7f:d2:90:7f:cc:26:c8:af:66:7e:1a:72:72:55:92:ab:24:8a:
         21:f0:ec:54:4a:99:5e:1c:6d:ec:a7:17:a9:45:11:11:65:41:
         dd:59:99:ae:8e:2c:a3:50:06:66:16:39:a3:a0:bc:d7:a8:69:
         56:15:88:49:89:c9:67:f0:aa:15:cc:8e:8b:c6:81:30:3b:ba:
         fc:8c:fe:36:fc:58:55:63:e1:40:9c:ce:ab:88:dc:4d:e1:2b:
         be:48:b1:48:28:29:d8:3c:0e:79:93:5b:8a:52:31:cd:1e:38:
         a1:e5:34:d4:59:65:d0:45:93:22:be:18:8e:5e:78:73:25:a3:
         69:36:9b:b4:6b:4f:54:64:48:54:8d:a3:04:aa:ed:5a:c8:d8:
         66:15:fc:84:ed:9b:68:dc:f9:8d:01:fc:4f:94:2b:29:27:c7:
         93:6f:1c:2b:a5:2d:d1:9b:7b:5f:c8:d0:bb:4b:5e:65:fd:bf:
         03:80:31:ff:b1:a7:06:30:93:a4:2d:86:ee:b2:3e:90:b7:60:
         e2:a7:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:24:31 2025 by rpki-client