Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          JF0gg8JxU3zaw1icq4brb2fmN//KU3XafseIqiyDfaQ=
Subject key identifier:   E2:28:7C:4E:2E:E6:F4:9E:27:62:65:BF:1F:CA:CB:D5:05:49:DA:44
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       0686
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          067F
Signing time:             Wed 20 Aug 2025 22:29:49 +0000
Manifest this update:     Wed 20 Aug 2025 22:29:49 +0000
Manifest next update:     Wed 27 Aug 2025 22:29:49 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: vT/aqGMIc9OkeYAf3tu8wesPRAmc66jAMvwybub1jxc=)
                          2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=)
                          3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
                          rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 22:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Aug 20 22:29:49 2025 GMT
            Not After : Aug 27 22:29:49 2025 GMT
        Subject: CN=68a64c5d-b4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:d8:1f:23:b7:40:78:6f:22:dc:79:44:69:
                    10:44:ce:4c:84:ee:7c:11:36:f2:16:5b:09:42:14:
                    88:79:47:4b:0d:91:75:5e:21:97:a9:d8:ed:df:33:
                    e1:53:92:75:64:d4:38:1c:ee:f7:cb:18:8a:c9:67:
                    34:89:d4:da:87:db:39:cc:41:49:bd:44:b3:18:f0:
                    28:b9:00:bb:3e:ea:7b:0b:ca:4c:05:7c:d8:48:63:
                    84:03:81:08:c4:ee:05:8e:a6:37:fa:04:35:d4:e4:
                    0f:4e:2c:6d:8e:43:ec:4a:ab:4b:46:2e:92:f8:0f:
                    47:42:ba:28:ae:78:0a:92:d0:0d:4b:3c:f9:91:b6:
                    f9:87:64:f4:72:33:8d:6b:9a:3e:50:76:34:23:08:
                    6d:70:a2:42:63:88:d6:dc:fc:34:f0:c7:d4:bd:7c:
                    50:cd:33:93:07:09:30:67:7b:b4:c6:e1:92:8b:68:
                    48:37:e0:98:3d:ac:77:f7:f8:07:77:55:55:25:f1:
                    df:d8:db:b0:d1:62:b8:e0:dd:bd:f6:7f:a1:81:33:
                    3c:5b:c2:85:30:f4:aa:cb:a8:04:08:1c:43:64:3a:
                    30:bc:aa:e9:68:0f:b1:71:42:a6:23:80:2e:c1:cf:
                    5e:1f:32:87:57:03:5f:e4:58:b7:7b:03:73:37:de:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:7C:4E:2E:E6:F4:9E:27:62:65:BF:1F:CA:CB:D5:05:49:DA:44
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:f3:22:a1:ea:b1:32:34:ba:c6:68:6a:09:ff:0b:18:26:
         2f:b8:2f:31:cc:29:eb:ad:d7:94:4d:c4:08:a5:81:ab:88:01:
         9b:68:35:db:d6:54:f4:62:fd:51:77:94:a0:69:9f:ef:db:b9:
         50:9a:50:44:68:fd:07:bc:ce:da:e2:0f:fd:f2:c6:44:f1:ca:
         e9:81:62:56:bb:d5:db:06:6e:a3:64:0e:45:03:7a:0f:32:2e:
         72:bb:71:b0:ff:cf:d6:49:cc:7b:b3:5a:01:55:9b:6f:43:6c:
         19:54:3a:aa:9c:b4:fc:af:da:d6:9c:3a:37:50:9c:62:df:31:
         08:d2:a0:0c:0a:fc:8a:4e:7d:37:ca:18:b9:20:0d:f1:15:ec:
         61:c7:56:20:9b:b7:92:4f:60:ba:5a:3d:e1:31:73:33:51:2b:
         d0:a8:f8:f3:00:59:2b:3b:16:c5:60:6e:6a:6f:c4:68:f3:4d:
         0c:0c:73:ec:49:04:40:21:00:a2:ab:c2:66:73:a6:55:0e:a2:
         7f:a7:b9:d0:a1:65:8b:f1:36:6d:7d:9a:44:d0:bd:eb:2a:2a:
         26:97:12:54:11:8f:89:fe:97:ac:c9:f0:d5:47:24:d6:0d:ac:
         ba:ac:b5:86:0a:ee:a4:1d:79:bc:a4:a5:44:e3:2d:1c:a4:86:
         93:81:6b:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0
MTYxOUZDNDcwHhcNMjUwODIwMjIyOTQ5WhcNMjUwODI3MjIyOTQ5WjAYMRYwFAYD
VQQDEw02OGE2NGM1ZC1iNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyF7YHyO3QHhvItx5RGkQRM5MhO58ETbyFlsJQhSIeUdLDZF1XiGXqdjt3zPh
U5J1ZNQ4HO73yxiKyWc0idTah9s5zEFJvUSzGPAouQC7Pup7C8pMBXzYSGOEA4EI
xO4FjqY3+gQ11OQPTixtjkPsSqtLRi6S+A9HQroorngKktANSzz5kbb5h2T0cjON
a5o+UHY0IwhtcKJCY4jW3Pw08MfUvXxQzTOTBwkwZ3u0xuGSi2hIN+CYPax39/gH
d1VVJfHf2Nuw0WK44N299n+hgTM8W8KFMPSqy6gECBxDZDowvKrpaA+xcUKmI4Au
wc9eHzKHVwNf5Fi3ewNzN94UYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIofE4u
5vSeJ2Jlvx/Ky9UFSdpEMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4
NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx
V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+FfMioeqxMjS6xmhqCf8LGCYvuC8xzCnrrdeUTcQIpYGriAGbaDXb
1lT0Yv1Rd5SgaZ/v27lQmlBEaP0HvM7a4g/98sZE8crpgWJWu9XbBm6jZA5FA3oP
Mi5yu3Gw/8/WScx7s1oBVZtvQ2wZVDqqnLT8r9rWnDo3UJxi3zEI0qAMCvyKTn03
yhi5IA3xFexhx1Ygm7eST2C6Wj3hMXMzUSvQqPjzAFkrOxbFYG5qb8Ro800MDHPs
SQRAIQCiq8Jmc6ZVDqJ/p7nQoWWL8TZtfZpE0L3rKiomlxJUEY+J/pesyfDVRyTW
Day6rLWGCu6kHXm8pKVE4y0cpIaTgWvc
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:33:59 2025 by rpki-client