Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File:                     mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier:          YI0o1r358jcg9/uiM2AcpZdnuBTVVOnnpvrnFrWF9TI=
Subject key identifier:   C2:69:A5:14:F6:A1:80:F2:FD:4D:99:2A:62:13:54:A8:19:D2:23:B4
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number:          0170
Signing time:             Fri 05 Sep 2025 04:09:45 +0000
Manifest this update:     Fri 05 Sep 2025 04:09:45 +0000
Manifest next update:     Fri 12 Sep 2025 04:09:45 +0000
Files and hashes:         1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: 6NhUsS8B/4qA4SB9t+PMBAe/1+Remuce+PdLZXF7FvM=)
                          2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 04:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: Sep  5 04:09:45 2025 GMT
            Not After : Sep 12 04:09:45 2025 GMT
        Subject: CN=68ba6289-049c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:cf:cd:80:09:35:79:17:ee:15:93:c7:0a:
                    36:4b:7b:91:43:dc:bd:de:24:95:a3:2d:dd:a0:79:
                    41:bb:68:f7:6b:80:00:c5:89:23:a7:06:b4:74:05:
                    e9:cc:d4:81:1a:76:2b:0e:22:89:ab:22:b2:57:9a:
                    2d:36:26:c4:a6:88:1a:96:ac:c0:1c:c5:a5:8d:b6:
                    33:19:59:fb:70:36:a6:5c:85:bc:db:12:cd:54:2f:
                    61:93:92:47:bf:87:d0:cd:28:28:6f:cf:f4:62:aa:
                    cf:57:75:21:24:1a:f2:ec:4c:1c:c7:e8:0f:e4:d0:
                    80:d1:50:c4:17:9d:60:b9:2c:54:c2:6e:57:fb:c7:
                    58:48:dc:4f:98:3b:01:c3:d5:d4:81:7d:2b:4d:36:
                    2a:cf:d8:92:79:69:01:61:e9:b2:34:67:0a:21:d2:
                    a5:be:e3:98:be:88:a7:a9:25:59:3b:62:24:ed:bf:
                    70:01:a6:47:e0:29:a3:60:d2:f5:96:fa:d3:49:6b:
                    85:28:a8:e4:28:ce:77:30:84:f5:ed:ed:cb:df:21:
                    8a:7f:cc:61:4c:42:24:ea:eb:b0:2f:27:82:d5:b5:
                    fd:0c:9b:23:bd:21:31:cb:b1:ea:6c:6a:05:51:a9:
                    00:05:f4:d6:e4:0d:83:cb:50:5e:50:64:61:0c:1d:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:A5:14:F6:A1:80:F2:FD:4D:99:2A:62:13:54:A8:19:D2:23:B4
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:31:1e:77:a7:c5:c6:49:ed:15:ce:0d:90:66:0e:99:d5:
         37:06:01:19:2e:a1:a5:11:a1:c8:48:46:51:1d:58:0c:b8:ee:
         9b:6a:12:91:9c:69:b4:32:dc:bb:71:9c:21:11:5a:68:be:86:
         31:43:07:31:f3:2a:a1:85:af:20:4a:b4:82:c5:ee:44:af:ff:
         29:74:c2:b0:f8:fd:dc:11:c5:91:40:7d:e3:0e:e7:b6:8a:88:
         67:0a:84:6a:28:9b:f6:59:bf:96:7a:e1:3f:29:1a:50:58:ee:
         ac:b4:4d:f0:5a:95:37:fb:b5:51:d5:bf:91:d7:41:b4:62:06:
         69:4c:14:cb:c7:25:58:45:31:4b:9f:e7:e7:9f:7e:96:89:a1:
         f5:6a:60:ad:46:c8:b2:4a:f7:b9:04:45:c6:b5:f6:d5:ba:ed:
         6b:18:f0:7a:31:00:07:ab:88:92:1a:ee:21:01:e0:4e:47:0b:
         05:08:e9:e9:78:20:9c:53:8b:9d:06:88:78:88:e9:d8:16:96:
         2a:c9:f8:63:65:3d:30:e1:99:97:94:77:e8:64:6a:83:5f:81:
         b7:0d:f6:e2:c1:bc:fa:7e:f2:88:8a:ce:bd:a6:dd:d0:16:fa:
         8d:5d:16:4d:36:a1:d2:4c:42:d4:55:5d:9c:88:52:a8:26:fe:
         f7:f2:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:32:04 2025 by rpki-client