Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          2o8/tfxHGKpI3vRTAOD8WEPa/Kewgp1uzjGqRYwsQOc=
Subject key identifier:   AB:76:2B:40:92:A3:77:B1:7D:64:1F:FF:EB:10:41:7E:30:73:ED:6E
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       06DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          06C0
Signing time:             Sat 06 Sep 2025 22:28:20 +0000
Manifest this update:     Sat 06 Sep 2025 22:28:19 +0000
Manifest next update:     Sat 13 Sep 2025 22:28:19 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: V92U0YGNMOM/t6RcPotRDr/jsUxLYTYF2FlssjhGWLQ=)
                          2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=)
                          3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=)
                          4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: 8KuusaWdM7XE0SsLxUanmFi6arr5FObPV+arfCP9uGg=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 22:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Sep  6 22:28:19 2025 GMT
            Not After : Sep 13 22:28:19 2025 GMT
        Subject: CN=68bcb584-c87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:90:4b:a5:07:97:16:5c:55:19:9f:72:50:
                    f0:9a:f4:8d:60:96:98:fc:f5:19:37:c3:07:7a:6a:
                    4a:d5:f9:47:81:22:18:1b:7c:ce:36:b0:73:71:8e:
                    7b:15:e3:12:96:73:84:8c:b4:39:82:9f:5f:de:50:
                    f2:5f:6e:43:7a:5f:b6:73:cc:5b:97:ee:08:cb:ea:
                    de:7a:1c:16:9a:0a:fa:67:ea:63:0d:50:37:6a:1f:
                    5a:91:ab:2a:3a:57:e9:3e:a0:07:c8:d9:d5:bf:2e:
                    c0:20:b7:ea:fb:6e:89:17:6c:63:4e:20:17:2c:d4:
                    15:aa:9f:0e:78:17:80:d1:c3:c2:55:4a:b2:04:e8:
                    d9:30:5a:73:f4:8d:8f:03:2d:58:25:52:d7:f8:df:
                    3b:82:f9:b2:2a:e1:3e:93:fd:12:61:c0:db:dd:70:
                    84:a6:98:bc:0b:5c:83:77:8a:89:83:36:66:b5:b2:
                    09:dc:3c:5d:b2:60:45:db:2b:1e:66:d0:19:50:9a:
                    4d:e9:f1:dc:a0:70:ab:91:68:8d:d6:2f:20:25:d7:
                    0c:3f:d3:3f:32:a7:16:bf:81:c9:ed:5f:e6:c2:4f:
                    ce:44:13:af:3c:43:37:2d:d4:ea:3b:33:8d:c7:7a:
                    70:d5:4b:1e:8d:c4:5b:e2:aa:0f:54:d7:7d:0f:18:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:2B:40:92:A3:77:B1:7D:64:1F:FF:EB:10:41:7E:30:73:ED:6E
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:de:56:bd:b3:1a:d4:41:51:a4:f6:94:19:3d:1a:c6:7e:5f:
         68:c5:b1:8a:83:60:3d:07:0c:ec:83:2c:e6:86:dc:ae:72:a5:
         e5:ad:4a:ba:70:3e:a5:08:ec:b2:c6:9e:ed:77:a2:9b:66:c9:
         66:4f:40:a5:0a:1f:98:31:49:8d:ed:db:36:39:41:11:79:89:
         93:ed:80:22:1e:8e:64:f9:ec:c8:26:a1:9a:0e:af:ae:39:52:
         44:7a:1b:fb:a3:3b:53:18:2a:2d:02:52:cf:a7:9a:ed:41:ca:
         9a:c9:11:6a:65:1f:6d:5c:87:2a:d4:cb:09:b3:d0:c4:7c:6a:
         b0:8d:e2:71:a4:e1:21:86:1b:a0:4e:b7:c1:57:71:29:08:4b:
         2e:74:a2:f2:a8:0b:b6:4d:e6:92:fb:cc:c3:c8:65:4c:c0:b2:
         b9:d9:e4:6a:56:35:45:f8:77:40:bf:11:11:c1:04:a7:42:06:
         ca:39:d7:3f:92:23:ee:3b:e6:29:a1:94:c2:4a:46:d1:18:1d:
         b9:15:43:2c:05:b2:a7:6c:2d:38:2f:5d:34:4e:75:5f:bc:88:
         74:cc:7b:c4:a8:7a:73:d5:43:1d:f6:b1:94:cb:4e:03:b3:2f:
         f3:1a:aa:c9:2f:d5:68:c9:28:81:13:73:f4:7f:2c:f6:8b:d1:
         28:7a:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:59:36 2025 by rpki-client