Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File:                     _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier:          Ful6oy8ztIQJEG7a4j08iwDGZ+tMvhkr0tIPARUN+dg=
Subject key identifier:   07:9B:1D:A2:54:B9:E6:C2:AC:F1:70:25:5B:08:1C:79:E9:75:59:05
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer:       /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number:          E1
Signing time:             Fri 25 Jul 2025 05:44:40 +0000
Manifest this update:     Fri 25 Jul 2025 05:44:40 +0000
Manifest next update:     Fri 01 Aug 2025 05:44:40 +0000
Files and hashes:         1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: OtPSui3sdytOdYvjOvWHz2P+de9hLuH29CaRcmbiQtA=)
                          2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=)
                          3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 05:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
        Validity
            Not Before: Jul 25 05:44:40 2025 GMT
            Not After : Aug  1 05:44:40 2025 GMT
        Subject: CN=688319c8-3c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:ac:4e:43:f6:ed:32:1c:d2:f2:50:f3:cf:
                    05:07:14:07:05:76:c3:b7:b0:26:d7:26:9c:a8:4f:
                    2f:25:cb:b9:0d:a2:e2:68:01:67:af:67:0c:42:42:
                    c9:4e:a2:3b:0f:44:c2:a9:ab:dc:7b:1c:d4:c9:53:
                    42:df:49:87:76:e9:2c:11:a0:d7:23:01:ca:0a:6e:
                    51:3e:57:33:64:32:71:5e:c5:70:7e:6c:f5:47:c9:
                    32:50:ff:b8:79:00:b8:57:51:29:61:df:39:5b:9b:
                    ee:39:4a:c4:d2:ee:2e:88:fa:02:4e:24:ca:c4:bf:
                    84:f4:3f:95:1e:7b:ad:3b:2e:64:70:37:29:33:82:
                    37:7d:62:39:45:82:68:73:8e:c7:bb:16:14:1b:c5:
                    1c:b9:7f:75:09:f8:46:1d:4c:cb:80:37:07:6f:36:
                    2b:ac:20:bc:a2:cb:06:2e:9b:0c:7c:78:06:f4:33:
                    ae:ca:aa:22:16:85:1c:45:7f:74:68:fb:37:62:2c:
                    3b:07:57:a0:35:76:f3:2c:9a:5c:3a:7d:75:5a:24:
                    22:f6:16:f8:12:77:f3:0d:df:b7:f5:11:73:4c:e6:
                    c7:eb:99:67:cb:b5:a1:e0:24:f5:af:99:1f:5e:39:
                    57:ea:0c:7d:a3:1e:46:e0:1f:52:7d:54:5d:7f:c7:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9B:1D:A2:54:B9:E6:C2:AC:F1:70:25:5B:08:1C:79:E9:75:59:05
            X509v3 Authority Key Identifier:
                keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3e:1f:a3:cb:5e:42:0b:33:9e:1a:f9:95:d3:58:51:58:c8:
         37:b1:a6:e7:0b:19:45:b1:4e:2a:78:6f:4e:24:f7:65:d6:12:
         4a:3c:b3:33:2e:07:e2:1c:a3:bc:0e:9a:3e:97:dd:e5:b7:7a:
         f5:a7:2f:05:4e:d1:06:00:35:f6:c9:ed:d7:97:a0:7c:e1:dc:
         d6:f8:04:17:e6:00:5f:d1:e7:22:62:8c:ab:b3:4c:95:45:db:
         f1:aa:0f:1c:b8:b7:23:90:63:25:5d:39:d6:e3:11:8b:14:a6:
         96:de:e6:71:4a:38:63:a9:cf:24:f9:40:cf:3e:ed:d5:b5:c9:
         4e:d1:73:79:f2:8d:c0:7f:33:21:36:28:00:e6:eb:7d:e4:6a:
         c0:0a:26:b2:8b:1b:fd:37:7d:35:1e:5e:61:7c:37:a4:5f:f6:
         01:72:c3:49:16:da:b0:7b:52:ee:c0:da:5e:36:4e:0d:24:ef:
         c1:49:e4:ca:64:42:10:e7:75:ba:33:20:41:55:f8:2c:4f:fb:
         3c:08:bd:20:a8:2b:47:3d:eb:b7:3e:a6:93:0c:55:90:3a:c8:
         35:41:b2:d5:b8:36:ee:76:70:a2:fc:be:36:36:c1:74:f1:42:
         fb:e0:af:b3:99:42:8f:e7:a9:08:31:f3:e7:fa:ec:6f:f9:fd:
         3a:d8:3b:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy
NUEwMEJGMUIwHhcNMjUwNzI1MDU0NDQwWhcNMjUwODAxMDU0NDQwWjAYMRYwFAYD
VQQDEw02ODgzMTljOC0zYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hWsTkP27TIc0vJQ888FBxQHBXbDt7Am1yacqE8vJcu5DaLiaAFnr2cMQkLJ
TqI7D0TCqavcexzUyVNC30mHduksEaDXIwHKCm5RPlczZDJxXsVwfmz1R8kyUP+4
eQC4V1EpYd85W5vuOUrE0u4uiPoCTiTKxL+E9D+VHnutOy5kcDcpM4I3fWI5RYJo
c47HuxYUG8UcuX91CfhGHUzLgDcHbzYrrCC8ossGLpsMfHgG9DOuyqoiFoUcRX90
aPs3Yiw7B1egNXbzLJpcOn11WiQi9hb4EnfzDd+39RFzTObH65lny7Wh4CT1r5kf
XjlX6gx9ox5G4B9SfVRdf8eLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAebHaJU
uebCrPFwJVsIHHnpdVkFMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz
NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF
OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6Ph+jy15CCzOeGvmV01hRWMg3sabnCxlFsU4qeG9OJPdl1hJKPLMz
LgfiHKO8Dpo+l93lt3r1py8FTtEGADX2ye3Xl6B84dzW+AQX5gBf0eciYoyrs0yV
Rdvxqg8cuLcjkGMlXTnW4xGLFKaW3uZxSjhjqc8k+UDPPu3VtclO0XN58o3AfzMh
NigA5ut95GrACiayixv9N301Hl5hfDekX/YBcsNJFtqwe1LuwNpeNk4NJO/BSeTK
ZEIQ53W6MyBBVfgsT/s8CL0gqCtHPeu3PqaTDFWQOsg1QbLVuDbudnCi/L42NsF0
8UL74K+zmUKP56kIMfPn+uxv+f062DtP
-----END CERTIFICATE-----
Generated at Sat Jul 26 02:02:48 2025 by rpki-client