Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File:                     iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier:          1Y78bLAcoD7+2q9jAbQjg9gWEDAEtlnPkxR5vcF3upM=
Subject key identifier:   A4:B7:78:4B:48:41:50:0F:75:58:3C:0C:3C:4C:C4:B4:56:10:E9:D8
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer:       /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial:       07D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number:          07D0
Signing time:             Thu 04 Sep 2025 21:23:10 +0000
Manifest this update:     Thu 04 Sep 2025 21:23:09 +0000
Manifest next update:     Thu 11 Sep 2025 21:23:09 +0000
Files and hashes:         1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: CnghmUxTQgbQ0sWUd5qTLqmx05pqIvncwxtpbmZB3CQ=)
                          2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: IGUI6ypPN1raHp9GKwNU8LZ6l1B0WS2Xv77ok6Yzg+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
                          rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
        Validity
            Not Before: Sep  4 21:23:09 2025 GMT
            Not After : Sep 11 21:23:09 2025 GMT
        Subject: CN=68ba033d-bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:ad:9e:8d:14:ae:53:a2:6e:4d:6c:94:23:
                    fc:19:b7:38:f5:5a:64:1d:3f:70:b8:d7:ba:1f:de:
                    8f:c4:20:3c:92:47:6b:8f:93:6a:1b:11:fd:23:6b:
                    c4:eb:d0:94:a3:96:a2:83:3d:45:c0:57:af:38:57:
                    0c:f1:f0:2e:75:55:86:cb:d9:9f:e1:0d:29:8f:a9:
                    77:7b:73:2e:09:22:58:fc:6b:98:64:1b:ac:e2:90:
                    9a:50:46:e3:56:0c:0a:f2:20:c8:34:10:e4:e0:cb:
                    38:31:a5:cc:e6:6c:21:1b:bc:ac:68:63:13:39:f3:
                    4a:8a:06:9c:83:ab:99:d2:8e:02:dc:88:a5:fe:32:
                    80:97:d4:d7:2d:1e:4a:0f:f3:50:12:0e:6b:4c:59:
                    16:24:25:00:07:f7:e8:b4:45:80:d3:d0:47:26:c7:
                    ae:aa:cb:90:49:f6:46:e7:2a:91:7d:5e:72:00:f4:
                    ce:47:98:dc:a4:b5:eb:10:88:d8:26:d5:8e:50:e9:
                    62:ac:02:0a:df:9c:df:24:40:b5:30:72:f3:60:50:
                    74:1c:38:56:4d:d9:67:76:b8:b9:44:a6:66:02:b7:
                    77:9e:19:86:84:67:08:c0:e4:4b:74:78:d2:58:30:
                    e2:7e:8f:d8:e5:03:aa:82:22:66:36:65:85:b9:f5:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:78:4B:48:41:50:0F:75:58:3C:0C:3C:4C:C4:B4:56:10:E9:D8
            X509v3 Authority Key Identifier:
                keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:58:18:d9:a5:2f:b5:61:90:c4:6c:34:39:fb:e8:50:bc:53:
         62:ee:a3:ed:7b:25:9d:48:0f:f6:0a:6f:52:3f:e5:1d:fd:d3:
         f6:e4:df:5f:cc:ae:cb:fa:ff:33:2f:5f:08:93:67:d2:c2:1f:
         90:50:0f:d7:f3:20:91:9a:c2:9b:e5:35:62:f9:bb:e1:3e:bb:
         b6:cc:3b:ef:03:96:92:3c:d0:55:a4:71:28:56:dd:1f:7c:9b:
         a1:32:98:b8:7b:27:57:ee:65:c9:8b:64:5e:c9:c6:f0:4e:4e:
         81:62:ca:3c:7c:51:50:17:07:02:c5:02:62:b2:1d:09:5f:8a:
         9e:c5:2d:20:cd:c9:1d:47:b7:dd:31:40:48:af:f6:f6:c2:fd:
         db:0c:5e:4e:62:e0:aa:49:32:83:b9:69:72:88:49:72:6f:de:
         a1:6f:e8:80:fc:97:f1:c5:39:27:76:3d:00:50:b9:79:1a:37:
         76:7f:be:13:71:e6:8f:d2:e5:b5:7d:c8:09:1d:6b:13:0f:85:
         68:be:47:77:64:cc:ef:95:51:5a:67:58:1a:64:d7:26:76:13:
         3f:53:19:c3:5e:41:b4:c7:42:74:b8:9b:68:b4:59:83:6c:6d:
         4d:d6:ae:06:39:01:cd:b7:e4:b7:d4:dd:c2:e3:36:76:de:42:
         e9:bf:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:26:45 2025 by rpki-client