Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
File:                     15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json)
Hash identifier:          hUEg3KKYkwihjW7zYYt1tQvI2n1cVLSepnMaBT3DeZU=
Subject key identifier:   97:92:26:E7:C1:E9:4C:0D:FA:8E:FC:FE:33:2A:E9:31:18:11:CB:5F
Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
Certificate issuer:       /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
Manifest number:          3D32
Signing time:             Wed 20 Aug 2025 15:13:39 +0000
Manifest this update:     Wed 20 Aug 2025 15:13:39 +0000
Manifest next update:     Wed 27 Aug 2025 15:13:39 +0000
Files and hashes:         1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: BdCterDGPqN3G2Lh99BI9DCuzZwCqHe8XK5L9pkFgFc=)
                          2: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: bjYMDtpJZNg5Y2L6Uj46FEgAtSCkkttriVFUrF2NgNE=)
                          3: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: luZqCIjqnlKYbUcpH0XD0h67wo+vIREwLR7SC2P9HUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 15:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
        Validity
            Not Before: Aug 20 15:13:39 2025 GMT
            Not After : Aug 27 15:13:39 2025 GMT
        Subject: CN=68a5e623-8b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:d8:4f:88:88:f5:81:8f:e4:99:22:81:1d:
                    0e:b1:10:b8:6e:26:19:99:e1:65:b0:9b:3e:06:ee:
                    96:fc:a6:cd:3c:fd:63:24:07:c1:94:56:96:00:2e:
                    ed:3f:b9:ae:6a:39:d6:69:b3:49:9a:bc:0c:7a:05:
                    5f:3f:95:47:79:6d:8e:0d:77:33:92:44:3e:6f:50:
                    d6:d3:12:9a:d5:4b:06:32:3b:aa:54:84:d6:91:17:
                    85:43:46:33:ea:fe:57:97:bf:76:2e:38:b8:54:da:
                    33:33:1a:34:f4:54:d7:df:bc:14:d4:2d:a6:ff:27:
                    6b:3d:47:43:8a:ec:f5:f0:8b:51:3c:8d:d7:2e:aa:
                    da:ad:31:41:66:18:12:f5:76:92:51:e3:36:38:61:
                    4d:36:44:a2:8e:6b:3b:8f:fe:4a:28:79:ea:21:7c:
                    56:23:29:bf:c6:f0:46:0f:5f:da:22:ff:2b:42:ea:
                    f7:6b:d3:10:91:90:9a:12:00:1f:91:8f:50:16:d7:
                    bd:3e:45:fc:1e:8d:e9:0d:3c:aa:b4:7b:7a:8a:44:
                    1b:43:a2:df:d9:d9:77:15:40:64:5d:b0:9b:b4:a9:
                    b5:7c:87:14:7a:0d:b7:f5:7c:1a:4e:ea:af:f1:67:
                    9a:52:05:91:f3:99:bb:df:6a:d5:b1:15:4c:40:58:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:92:26:E7:C1:E9:4C:0D:FA:8E:FC:FE:33:2A:E9:31:18:11:CB:5F
            X509v3 Authority Key Identifier:
                keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:46:10:d0:4c:97:f3:36:b7:50:41:ae:88:19:58:36:39:
         90:56:9c:34:86:1e:31:e1:83:77:bd:77:05:75:70:e9:29:1d:
         3c:c7:b7:c9:e0:88:29:2e:15:20:47:a9:4c:43:ed:fd:20:58:
         d6:0d:a6:72:b7:4d:84:e5:40:cb:0a:51:bb:24:31:9e:89:57:
         f4:2b:9f:3c:58:ae:f6:22:e3:26:65:8e:7f:89:80:75:59:fd:
         3a:27:e9:00:ab:ef:91:2f:f2:26:54:fd:ce:dc:dc:d1:d1:df:
         94:15:f1:aa:b3:ab:35:d0:d5:39:7a:85:9c:24:83:0a:c8:5e:
         fd:52:07:5e:f8:28:cb:9b:0c:b7:ce:ec:20:2c:44:24:5c:34:
         53:9e:8d:63:6f:17:10:61:44:32:2a:e6:87:07:12:27:68:b5:
         bb:06:a9:74:38:5e:c3:11:64:ec:2d:fb:0c:9c:c3:4b:4e:92:
         e5:6d:66:bb:47:e3:8e:b3:52:ee:da:e4:d5:ef:2e:72:87:8f:
         43:4b:24:9f:bf:7d:49:e6:a1:ea:b7:6b:3b:28:b7:34:aa:bd:
         44:18:3c:27:28:1c:8c:cf:46:43:ad:49:24:91:6e:29:25:14:
         e4:77:cc:fb:18:a6:d8:a9:b0:4b:e9:c4:7f:8b:b2:15:4d:8f:
         7c:1d:84:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB
MzI1OTI4RkQwHhcNMjUwODIwMTUxMzM5WhcNMjUwODI3MTUxMzM5WjAYMRYwFAYD
VQQDEw02OGE1ZTYyMy04YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAly/YT4iI9YGP5JkigR0OsRC4biYZmeFlsJs+Bu6W/KbNPP1jJAfBlFaWAC7t
P7muajnWabNJmrwMegVfP5VHeW2ODXczkkQ+b1DW0xKa1UsGMjuqVITWkReFQ0Yz
6v5Xl792Lji4VNozMxo09FTX37wU1C2m/ydrPUdDiuz18ItRPI3XLqrarTFBZhgS
9XaSUeM2OGFNNkSijms7j/5KKHnqIXxWIym/xvBGD1/aIv8rQur3a9MQkZCaEgAf
kY9QFte9PkX8Ho3pDTyqtHt6ikQbQ6Lf2dl3FUBkXbCbtKm1fIcUeg239XwaTuqv
8WeaUgWR85m732rVsRVMQFguPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeSJufB
6UwN+o78/jMq6TEYEctfMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE
QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy
UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxFEYQ0EyX8za3UEGuiBlYNjmQVpw0hh4x4YN3vXcFdXDpKR08x7fJ
4IgpLhUgR6lMQ+39IFjWDaZyt02E5UDLClG7JDGeiVf0K588WK72IuMmZY5/iYB1
Wf06J+kAq++RL/ImVP3O3NzR0d+UFfGqs6s10NU5eoWcJIMKyF79Ugde+CjLmwy3
zuwgLEQkXDRTno1jbxcQYUQyKuaHBxInaLW7Bql0OF7DEWTsLfsMnMNLTpLlbWa7
R+OOs1Lu2uTV7y5yh49DSySfv31J5qHqt2s7KLc0qr1EGDwnKByMz0ZDrUkkkW4p
JRTkd8z7GKbYqbBL6cR/i7IVTY98HYRa
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:17 2025 by rpki-client