Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
File:                     IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json)
Hash identifier:          vi0Y0y+Ne0rsY9xqTF8yiLyhVYozKFYtdMfCfq7W4Xg=
Subject key identifier:   AD:AF:48:3F:2A:D1:12:8B:A4:FF:C7:EB:53:CD:1B:7F:92:D8:FC:37
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Certificate issuer:       /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
Manifest number:          09B1
Signing time:             Thu 18 Sep 2025 20:17:01 +0000
Manifest this update:     Thu 18 Sep 2025 20:17:01 +0000
Manifest next update:     Thu 25 Sep 2025 20:17:01 +0000
Files and hashes:         1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: TKC0vLeZhstRoVftT9bxBV+cl0zrvazqNEeHibDgE04=)
                          2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=)
                          3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
                          rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
        Validity
            Not Before: Sep 18 20:17:01 2025 GMT
            Not After : Sep 25 20:17:01 2025 GMT
        Subject: CN=68cc68bd-9373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3d:11:80:7b:37:de:55:3e:99:a1:29:83:59:
                    1b:ca:34:fc:fb:3f:db:12:b6:87:f4:8c:f1:ff:59:
                    04:32:be:55:00:c1:6a:f6:2d:b7:ed:f8:4c:71:db:
                    d7:10:5c:ae:c3:95:40:0e:7e:21:f3:52:34:ec:3f:
                    db:eb:26:ea:40:ff:22:cf:d6:0e:cc:a2:fe:3b:c2:
                    40:bf:b9:ae:75:3b:64:62:bb:c9:da:31:34:c0:b1:
                    18:b6:a7:57:62:45:2a:14:01:2c:f6:2b:32:00:ef:
                    50:50:a2:5f:a2:b3:75:d3:41:cd:8a:46:41:6d:1b:
                    c7:b7:05:14:64:8e:66:9f:84:5e:e3:34:33:ac:30:
                    da:c8:9d:25:6d:09:89:f9:2b:3d:fa:b8:18:de:23:
                    5f:a5:f2:6c:21:4d:41:9d:14:d0:ba:1b:a4:95:25:
                    99:c8:c0:1f:8e:2a:82:f1:a4:14:e4:29:f2:0f:a7:
                    b1:c6:42:55:2b:c6:0b:7c:34:7d:16:00:61:1e:1d:
                    3a:6d:ea:db:41:bc:62:fb:f8:57:c1:02:e6:83:09:
                    51:f0:d5:55:1a:75:7c:a7:d4:c9:29:5e:d5:75:13:
                    30:1d:03:ae:5d:39:4c:e2:ba:ab:c5:8f:a3:d4:bc:
                    9c:8e:97:f5:5a:8a:32:5c:cf:39:5c:64:1c:6d:19:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:48:3F:2A:D1:12:8B:A4:FF:C7:EB:53:CD:1B:7F:92:D8:FC:37
            X509v3 Authority Key Identifier:
                keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:6e:5c:64:d8:5b:79:98:da:e6:eb:18:f0:d3:d8:71:eb:3d:
         b4:95:7f:94:18:75:37:e9:9e:c6:36:8e:e4:27:db:74:b3:17:
         af:84:c6:99:15:70:5c:94:d0:54:1e:d6:9b:5f:20:4d:b0:df:
         08:af:5a:48:14:7d:66:b9:03:ac:3e:14:7e:f0:87:8a:03:14:
         86:06:6e:35:cd:5e:2c:72:5e:3a:4b:4b:28:c3:08:77:51:41:
         ee:1c:37:8a:bd:f9:e7:55:9f:15:ab:41:e6:6f:c9:11:e8:8c:
         57:e9:b0:ff:1d:83:dc:6f:0a:0f:c3:06:43:c4:88:87:d7:3d:
         ec:d4:b4:2f:8d:6d:04:fb:96:4b:37:81:7e:b0:4b:3d:c0:b8:
         a1:1a:d9:23:f3:56:f3:e2:c9:0b:d1:3c:47:39:25:2b:df:64:
         d8:91:7f:e0:f2:eb:a7:fd:53:b1:5c:f8:86:cb:4f:56:cd:d1:
         32:4e:75:92:fc:bb:8a:dc:fd:6a:d7:db:7e:cd:c6:3b:71:4d:
         49:d9:81:c9:11:61:d8:9c:99:3a:ee:cd:24:b1:2c:39:e1:02:
         2d:e0:9b:5a:31:b4:c0:68:40:10:c1:f5:38:b5:fb:f3:4f:e7:
         95:05:bc:5a:c9:84:d3:6b:ef:b5:c6:9c:cf:89:f1:3c:31:24:
         e0:b5:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:47:38 2025 by rpki-client