Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          F1VAFc/zAN8t0oIdiGT4v7uTBhYgimzz6OS9tjqhOck=
Subject key identifier:   27:B2:8F:CA:52:A9:5F:20:CC:3E:09:DA:22:10:D9:8C:9C:29:CA:FF
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          034D
Signing time:             Wed 17 Sep 2025 01:28:53 +0000
Manifest this update:     Wed 17 Sep 2025 01:28:53 +0000
Manifest next update:     Wed 24 Sep 2025 01:28:53 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: dA52anNKxvYI2iBa3wl9WbTMAocYUMVpDR7jQD1aX9Q=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: r0SdsL2ORVSdYzkbQ5mo+r9WMoDe9Po2V1LCmdg+FDo=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=)
                          4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: /uILdUZ7kShm+RnYwG/kKYiO9gYuOhp2LdX1pGS+VDA=)
                          5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: dBsLOGuzUlSybPcUJi3MpYXDAALVpmkR+ZsEVuraLp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 01:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Sep 17 01:28:53 2025 GMT
            Not After : Sep 24 01:28:53 2025 GMT
        Subject: CN=68ca0ed5-9262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:32:9d:b1:df:3f:d0:15:e3:ca:fe:b4:48:
                    0b:7e:fa:1e:5e:05:c0:ad:91:7c:3e:0b:8c:fc:80:
                    c5:25:06:3c:4e:ae:96:d0:fd:44:de:fe:bf:9f:d2:
                    28:0b:4b:87:90:de:fe:d0:1f:e7:13:8d:93:01:ee:
                    c9:27:5e:3c:47:31:d3:31:0f:8c:fd:f0:70:95:d1:
                    e3:66:c2:d9:2d:ff:43:c0:f1:17:4d:c6:19:c8:b4:
                    12:5d:ef:0c:2f:a4:42:ba:5e:bd:28:76:1b:89:4c:
                    09:70:26:f9:ec:99:b7:43:b3:1b:d3:5e:70:7f:ae:
                    d5:99:21:b8:2b:09:10:1b:ce:52:61:17:60:7b:0a:
                    ff:3a:7b:db:0d:0b:44:e7:ea:77:df:46:9e:02:43:
                    ec:67:17:f6:58:b3:45:72:24:ea:f2:bf:f2:ef:94:
                    45:f8:b6:35:f9:5a:52:af:6b:1b:ec:90:00:a5:11:
                    b3:f5:2f:35:98:49:f1:03:3f:af:1a:1c:7f:75:42:
                    cb:68:54:43:9b:ee:ab:e4:f4:8b:52:43:ab:37:98:
                    43:b3:1f:8e:dd:de:f2:5e:ef:e9:f1:8c:ca:e6:36:
                    dc:c5:37:69:f9:04:77:8f:78:41:1a:6a:0d:4a:67:
                    75:d3:01:b0:a9:c6:ed:2e:42:44:07:73:e4:ef:0c:
                    92:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B2:8F:CA:52:A9:5F:20:CC:3E:09:DA:22:10:D9:8C:9C:29:CA:FF
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:fa:f7:86:8c:46:5e:9c:7b:bf:6a:0b:3e:77:c8:ae:57:
         93:f3:f2:5a:20:61:df:f2:66:e3:8c:08:f6:a0:37:f9:f4:3f:
         c9:76:c5:bb:93:46:2f:30:3e:05:5b:0b:78:91:dd:13:bf:04:
         10:b6:39:b3:6a:b8:1d:d5:c7:ee:4a:8f:0e:c8:f9:ac:96:0c:
         37:97:72:6e:c0:be:6a:2f:85:1e:da:7c:75:c3:1f:e3:e0:22:
         f5:65:84:94:00:45:ed:ba:d1:3f:6d:c9:26:5e:d1:0f:15:79:
         e3:b0:98:8e:51:03:f6:67:e0:ab:16:93:e5:7c:f2:d1:2c:d2:
         d7:54:48:7c:20:43:d6:13:f0:db:ff:d2:85:b6:e4:22:96:cd:
         ed:af:e2:9c:4c:a4:30:a3:3d:24:56:71:98:e1:46:89:bf:c8:
         00:99:e2:44:c1:90:92:aa:5b:e0:03:65:1b:20:7a:5a:d6:e7:
         cd:9a:30:e6:d4:70:02:2b:e5:7c:1d:12:e1:02:b6:ef:d1:06:
         66:48:75:95:ad:fa:42:70:78:26:cd:f4:64:67:99:54:1a:fb:
         cf:66:d1:e5:11:67:34:01:f0:66:4b:bd:5a:f0:e3:12:68:7d:
         99:30:6d:59:08:1c:cd:b2:9e:17:26:e3:d7:6b:22:e0:23:81:
         46:77:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:10:02 2025 by rpki-client