Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          vP3U/qBdIwi38WnspfCjoSd7WdHiZNl8X+Os2yF8hAA=
Subject key identifier:   27:26:AF:29:7A:34:62:30:35:F3:8B:A4:66:2C:E3:9A:10:FA:F3:23
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       08A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          088C
Signing time:             Thu 18 Sep 2025 20:52:21 +0000
Manifest this update:     Thu 18 Sep 2025 20:52:21 +0000
Manifest next update:     Thu 25 Sep 2025 20:52:21 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: ZhUENtkLM784t37rtZK2EjmO0KxPlHO4J99uGWm9A2E=)
                          2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: d3AVE6MmRgC9f1BP/vAUeg941gkBQiu4la3PQf5xjqo=)
                          3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 69lFJmCSoZqJFnlRVMecyEqrZmFOaweKrojaOmIkHVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Sep 18 20:52:21 2025 GMT
            Not After : Sep 25 20:52:21 2025 GMT
        Subject: CN=68cc7105-88fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:88:f7:77:4a:57:0a:d1:7e:64:16:b0:85:
                    2e:8b:ef:b9:7f:10:c2:b1:fe:b6:9e:b9:3a:82:8c:
                    78:cf:83:49:9c:85:bd:72:03:cf:2a:89:fc:07:4f:
                    bd:d3:42:09:b1:48:8a:0a:47:9c:54:c7:3b:2b:f2:
                    71:18:ff:83:8f:00:34:37:eb:6f:59:da:2d:6a:79:
                    bb:4d:92:57:96:ab:75:1f:e4:6d:1a:bf:6f:f6:e6:
                    d0:79:07:4c:70:8b:21:86:ce:61:1d:36:79:d2:87:
                    da:03:70:24:a5:5d:60:b4:7b:a3:f2:75:1f:46:fc:
                    d6:28:c9:fe:88:20:90:6a:e8:d0:e8:c2:be:4b:4e:
                    ae:78:07:a2:e8:79:e8:6c:9f:a6:38:1a:39:0a:7e:
                    70:83:c9:a4:c6:75:da:2b:d8:2a:09:f5:0b:dd:70:
                    a5:6d:de:8d:e2:29:4a:73:05:a5:3f:a9:59:fc:71:
                    71:44:6f:35:a6:37:27:38:85:ff:0b:12:b1:83:77:
                    bc:ec:1d:17:2a:2a:49:21:af:2b:a0:ba:a8:a8:6d:
                    57:09:59:06:19:c8:ed:61:9a:ad:37:10:f0:d5:f4:
                    50:a8:6d:10:56:ee:f9:e7:ad:cb:8e:5f:96:90:16:
                    94:96:a6:32:c1:88:c7:73:67:d8:8c:98:02:28:35:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:26:AF:29:7A:34:62:30:35:F3:8B:A4:66:2C:E3:9A:10:FA:F3:23
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:11:37:4f:8b:47:b6:0c:e3:dd:c4:d8:bd:36:62:ee:99:52:
         58:ee:4c:8c:b1:0b:fa:7a:a8:31:16:db:3d:e1:83:e9:69:17:
         9f:1b:5b:8c:80:21:c7:fc:8f:f3:d8:46:47:98:de:75:de:a0:
         1e:0e:60:03:64:99:b6:17:3a:be:68:c5:4c:6d:29:60:61:c4:
         df:b6:9d:36:67:7c:71:40:e0:22:12:1e:f8:b8:45:a5:72:b5:
         ec:d8:01:6e:d5:bc:aa:07:a5:e7:f0:ea:34:43:2f:93:7c:7a:
         d3:dc:fe:b4:3a:5c:9b:6a:5c:63:d4:2b:d5:05:02:49:67:47:
         0d:e8:30:86:79:59:87:cc:ec:c7:53:56:7c:52:77:71:1a:71:
         41:18:e8:1c:76:9d:08:33:6e:e2:68:55:48:0f:33:60:6e:dd:
         0a:d4:ff:a3:65:a7:29:1c:26:19:03:35:1c:c4:d4:06:12:aa:
         ef:7a:d6:b6:b7:bc:d1:c3:35:62:24:f3:d0:a6:12:cb:98:f4:
         3e:e4:6b:61:f3:46:65:e7:84:81:e7:13:f6:b1:55:84:cd:73:
         e7:6e:8e:24:bb:33:4a:56:5a:23:dd:fd:0d:9b:89:67:e7:7e:
         09:da:50:62:c9:5f:58:54:75:94:96:7f:8f:59:ed:44:85:f9:
         ec:f5:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:48:21 2025 by rpki-client