Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          H8RG1pkMp9kU/oKP/66aheZzkT6dkeLEBwdmZBu/NQQ=
Subject key identifier:   E4:1C:B1:2C:47:29:25:91:EE:21:75:5B:4D:86:8C:44:27:4E:13:DC
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          013A
Signing time:             Fri 05 Sep 2025 04:48:40 +0000
Manifest this update:     Fri 05 Sep 2025 04:48:39 +0000
Manifest next update:     Fri 12 Sep 2025 04:48:39 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: Il+V1gUucdYR6V7LAg0mQTBn18cT3GkbcDP1xDG32s4=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Sep  5 04:48:39 2025 GMT
            Not After : Sep 12 04:48:39 2025 GMT
        Subject: CN=68ba6ba7-6897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:e8:16:29:e6:fa:36:ad:cc:9f:07:d4:ef:
                    3c:29:bf:b0:87:a5:a4:a5:c5:f4:d5:1c:cb:ed:b4:
                    2a:8e:fa:46:4b:b2:6e:ed:5f:22:3d:bd:64:2d:1a:
                    de:0f:e0:c6:1f:b7:3c:6e:49:27:3d:a2:98:cb:c1:
                    10:17:17:17:73:34:47:50:e5:05:57:05:93:58:3b:
                    03:9d:0c:44:bc:65:6d:12:ec:87:58:68:b9:3a:e6:
                    13:24:6b:d2:c2:d9:00:70:3b:a6:0f:fd:7b:04:31:
                    9d:8f:2e:f1:d0:94:51:88:04:d0:48:86:aa:9d:f2:
                    8e:87:0e:03:d7:d4:b7:16:19:67:7b:15:ce:ff:45:
                    52:a3:8d:77:12:5c:8c:e5:0b:0b:e3:fb:13:a0:77:
                    f2:db:e4:2b:e1:cb:74:b1:15:9a:d6:f6:a9:6c:82:
                    b5:c4:20:8b:dd:87:c1:74:03:38:91:93:f8:5d:24:
                    0f:a6:26:9b:4f:19:93:38:67:10:14:0e:31:d9:3c:
                    b4:4a:27:9f:e2:01:47:cc:50:51:49:01:39:38:b8:
                    4c:32:85:9e:f7:c6:d9:e7:86:bb:84:db:90:fd:89:
                    0e:a3:dd:e3:f6:15:00:9d:47:d9:b0:68:98:54:5a:
                    68:fa:f3:ae:54:c1:cc:23:77:c5:8e:89:01:51:e3:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:B1:2C:47:29:25:91:EE:21:75:5B:4D:86:8C:44:27:4E:13:DC
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:38:a0:aa:1d:9c:ba:37:d5:22:33:e0:4a:ec:a8:8a:4f:a2:
         3c:53:dc:c7:9e:35:81:7b:94:2e:c8:04:66:bd:6b:cb:51:3f:
         ad:cf:18:e0:5a:0e:7f:b1:ff:2a:f0:f7:38:ab:b3:1f:46:08:
         40:1e:4e:74:cb:a9:a2:fc:4e:31:06:9b:9a:63:6f:97:28:02:
         62:20:25:58:2d:fc:56:6f:a5:b4:bf:fb:02:46:5b:fa:f1:10:
         90:77:d5:af:8c:46:50:52:a0:fe:ac:2e:ba:72:95:4b:90:e8:
         53:e7:8c:cd:72:ee:43:62:c8:52:ae:dc:32:3b:4b:af:9c:1d:
         4f:57:6a:c3:9b:b6:42:32:45:82:b4:a7:89:9b:2f:43:61:0d:
         01:a0:ed:e7:ad:10:89:29:6d:56:63:55:fc:00:e0:cb:65:31:
         af:7e:03:79:a1:bf:ab:09:b2:47:86:52:f4:32:1d:a6:52:45:
         9f:9a:f0:ac:d3:d2:17:93:5f:f0:cf:bf:2f:73:26:b1:f3:b7:
         9f:c3:42:f4:96:51:12:d5:f4:10:0d:40:73:8a:9c:a0:a0:3b:
         51:53:fa:05:af:81:31:97:f7:cd:52:8f:ae:66:33:8a:e5:7a:
         e2:ce:06:a1:37:38:80:ad:f1:f1:5a:cb:48:f8:7e:98:02:d6:
         c9:6d:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:07:29 2025 by rpki-client