Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          guaxffpBi88XsUEgHP/rLcZ2nKhhOyE2deBw30/O9mk=
Subject key identifier:   B4:95:20:92:32:E2:52:8E:37:CB:5C:8E:5D:71:82:69:AC:C4:22:2F
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0C98
Signing time:             Wed 20 Aug 2025 18:17:47 +0000
Manifest this update:     Wed 20 Aug 2025 18:17:47 +0000
Manifest next update:     Wed 27 Aug 2025 18:17:47 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: 95pkvkwQ6lu/nJxWimCFnWFnnR6l07ezx3OG5X9Zzz4=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
                          rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 18:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3230 (0xc9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Aug 20 18:17:47 2025 GMT
            Not After : Aug 27 18:17:47 2025 GMT
        Subject: CN=68a6114b-8f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:76:e8:11:0c:2b:d2:f7:56:11:d1:f1:5f:
                    80:20:c5:da:04:e3:62:ef:ca:bf:49:b2:c5:58:4e:
                    bc:e8:f7:50:89:50:f4:9d:fc:a1:81:3a:db:f8:a3:
                    e6:3c:47:b4:a5:22:5c:65:fd:2d:71:a9:5c:f6:10:
                    86:15:ea:bf:7a:c9:d7:f7:87:df:0a:d0:ba:75:7f:
                    a5:ea:bc:e0:28:0d:ca:7a:94:52:57:ea:81:5a:e5:
                    39:27:56:fa:bb:4d:52:cd:57:f2:60:66:17:ca:7d:
                    e8:83:6e:e5:1d:0e:bb:6f:38:47:dd:30:78:88:5b:
                    fa:68:3d:5f:d8:ee:3f:de:b1:95:95:83:d6:b6:e3:
                    fe:43:7a:5c:11:7e:6b:bb:7e:72:c6:70:61:6d:23:
                    86:c0:0e:10:4a:3a:12:97:c4:e6:18:08:d9:6c:0f:
                    66:50:f7:ac:a8:ea:4f:ba:e0:1e:9b:84:f1:a8:90:
                    3a:6e:36:a3:28:35:7e:75:2f:f0:51:21:7e:7e:c3:
                    7e:cc:60:fa:35:65:ca:c6:6f:a7:05:7b:c0:e1:f9:
                    92:6c:5e:8b:72:da:e2:0c:d6:cd:51:38:8e:a9:44:
                    c2:a1:33:5e:f6:9b:36:fc:a3:59:14:47:b1:54:43:
                    36:ec:36:a6:e7:10:fe:57:75:1b:67:12:b5:16:f7:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:95:20:92:32:E2:52:8E:37:CB:5C:8E:5D:71:82:69:AC:C4:22:2F
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b9:86:18:d5:83:85:70:46:0a:c3:80:cb:59:4f:ca:e9:53:
         24:22:0d:d0:cb:b4:5f:69:29:d1:26:bc:c2:83:65:32:9c:56:
         c2:50:30:11:29:26:e3:46:fc:68:8d:7b:21:e1:bc:aa:45:a7:
         4d:5c:da:d0:fe:40:8f:f3:75:ae:94:da:71:1b:56:19:8c:85:
         9a:55:4e:12:44:f6:65:54:63:0e:59:01:9c:64:55:5b:c7:80:
         ad:70:4f:03:c0:54:bd:90:c3:85:1b:fd:02:3d:65:21:3d:90:
         46:66:0e:c7:11:a5:9f:24:fa:c6:6b:0d:8f:9b:00:55:d8:1e:
         02:6a:67:14:7b:4a:48:98:f6:3f:a9:99:c0:e3:7c:22:76:e8:
         2c:ad:a9:74:85:de:3c:25:7a:90:38:d4:88:bb:68:7f:91:e8:
         98:b8:33:ed:02:f5:10:45:e5:7a:c8:2f:61:8a:92:de:d0:b3:
         4b:8a:9d:fc:bb:25:43:ab:ad:dc:23:e2:76:29:3b:ac:e3:2a:
         01:4f:d0:e6:35:be:fa:94:00:b4:b9:a8:e5:65:ad:0e:23:1c:
         a6:37:30:7c:1f:57:10:a4:92:ce:8d:b6:17:b7:6e:bb:48:0e:
         6a:57:cb:05:0b:38:ea:a8:81:c5:a1:11:b1:fe:55:58:66:39:
         3b:58:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:45 2025 by rpki-client