Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File:                     ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier:          Up6P7Gf8RZVNcO+wbmFr7Rdy3xeT4FNZo5hX3O0Z5sk=
Subject key identifier:   42:71:37:8E:C3:AA:B7:77:B3:81:E2:36:51:6C:97:5B:D0:4A:48:32
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number:          03D9
Signing time:             Sun 07 Sep 2025 03:07:14 +0000
Manifest this update:     Sun 07 Sep 2025 03:07:13 +0000
Manifest next update:     Sun 14 Sep 2025 03:07:13 +0000
Files and hashes:         1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: u9KWN8DT4D48vyotEir14HFUYpKfP9S5MCcdS/EhTi4=)
                          2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU=)
                          3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: SIcxhOEIM41kk3geT6tTo6gosphamPrjvTMVkyrZL2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 03:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: Sep  7 03:07:13 2025 GMT
            Not After : Sep 14 03:07:13 2025 GMT
        Subject: CN=68bcf6e2-330d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:47:60:84:c5:5e:f9:d9:b3:b9:bb:83:9f:
                    c1:4e:f0:86:a7:7a:5d:49:22:a4:26:86:92:66:f9:
                    46:97:be:af:15:42:e8:15:50:2c:aa:13:53:70:04:
                    0d:99:b2:f0:ef:fa:00:2a:c3:96:c4:01:6f:ab:22:
                    76:d9:79:78:7b:f8:ea:ab:6b:26:57:01:a9:54:9a:
                    11:ec:4e:ea:be:0d:0a:22:61:2f:07:f5:16:83:f1:
                    36:7d:7c:c8:3d:a1:2f:d3:8b:2f:79:70:9c:da:7d:
                    56:0a:05:bc:4d:57:85:1a:92:7d:60:a0:e8:f5:4b:
                    6a:fd:98:36:5a:83:be:41:e4:2c:b1:ae:90:6f:55:
                    03:cc:b6:1e:29:d8:72:aa:b2:94:08:69:00:3d:a1:
                    72:a3:3a:7f:73:7e:5a:e6:c9:ba:c4:84:32:f3:44:
                    a1:d7:30:d1:8e:02:99:4b:f4:77:5e:bb:38:ea:d2:
                    89:c9:fa:56:5d:e3:e2:f4:e4:c0:b6:b2:6b:98:5e:
                    0e:fe:dc:37:52:8e:0b:b5:07:20:48:a5:38:9e:f7:
                    ad:92:28:cd:90:68:9d:18:9e:71:c4:b7:c1:0c:3d:
                    20:03:28:8b:21:d5:d3:e9:5c:b9:cf:a6:18:a0:85:
                    31:bf:c0:64:ab:cf:0b:6c:05:f6:05:08:b7:02:82:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:71:37:8E:C3:AA:B7:77:B3:81:E2:36:51:6C:97:5B:D0:4A:48:32
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:42:67:70:23:ac:43:37:a5:cb:d3:1f:f3:9b:85:da:d1:
         c3:d2:20:94:81:31:0c:f6:98:08:de:0b:80:34:27:a9:2f:ae:
         d4:1a:dd:8a:d0:2d:de:39:5b:b1:58:7a:8e:ea:e6:a8:13:97:
         98:5a:04:a3:2d:99:09:6c:a3:f8:aa:b2:c4:96:e0:57:f1:80:
         8b:d2:e9:99:80:f6:00:80:cd:b3:dd:f0:38:3d:5b:c6:0d:c1:
         e7:c6:01:3e:42:ab:37:9a:cc:6a:6d:d7:59:33:63:f6:57:ae:
         bb:92:1b:63:03:f5:dd:ea:f9:4f:fc:d9:50:6d:6c:6d:3a:ed:
         c5:b3:de:06:26:ef:ee:5b:40:65:f5:4f:5f:10:1f:52:d3:d2:
         89:78:46:4c:c8:d2:1f:c3:6c:de:d6:a1:94:ed:0b:8f:c9:40:
         22:dd:8c:99:3d:f7:38:37:c8:63:78:b1:2e:07:00:08:e2:67:
         ed:0a:ab:9f:f7:70:e5:fa:7e:30:27:ab:8d:8a:f6:37:13:e3:
         63:7d:33:74:2a:b2:a5:6d:4a:4d:e1:b6:4a:32:43:26:fa:e2:
         17:f9:2f:70:24:01:6d:6b:1a:3d:1d:02:e9:01:bd:bb:bc:bf:
         21:7d:fe:9a:c0:c2:f8:3b:49:07:4f:5b:d1:f2:9e:fa:dc:30:
         70:47:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:03:20 2025 by rpki-client