Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          EiDM6b6PnnZpWo3Gx35w6zawUo/3NjZ+RTk6/6+ZwXM=
Subject key identifier:   A7:E6:3A:9F:E9:86:B8:22:B0:1C:BB:70:82:46:76:07:A6:89:7B:1B
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0AC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0A90
Signing time:             Thu 04 Sep 2025 19:50:09 +0000
Manifest this update:     Thu 04 Sep 2025 19:50:09 +0000
Manifest next update:     Thu 11 Sep 2025 19:50:09 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: tSHZEs4K438nrWXWFYXF24dBWAKyPrb4AGIsMRM8t58=)
                          2: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=)
                          3: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
                          4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
                          5: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
                          6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
                          7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
                          8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=)
                          9: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
                          10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
                          11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
                          12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
                          13: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
                          14: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 19:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Sep  4 19:50:09 2025 GMT
            Not After : Sep 11 19:50:09 2025 GMT
        Subject: CN=68b9ed71-24cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:bc:62:28:29:91:0b:dc:74:9b:e0:6a:74:
                    e1:5a:aa:97:da:cc:ea:8c:ba:93:f7:7b:31:14:9a:
                    6d:e7:22:04:be:7d:6c:ae:1a:85:ea:ed:20:c9:62:
                    c4:a6:fd:84:eb:f8:cd:5c:92:a0:c9:cc:ca:95:fb:
                    a8:8c:e6:e8:82:d6:52:64:dd:0c:b1:c9:8f:ed:9b:
                    6a:27:d1:4a:11:91:ab:e0:15:b8:87:46:36:e8:59:
                    6a:ad:93:e9:a3:ea:46:23:b7:21:0e:d6:ea:80:f1:
                    0b:f8:6b:8a:f3:62:c2:08:96:e8:2b:4a:18:c9:a3:
                    a9:eb:92:f5:1d:ea:85:ca:44:67:c9:cf:a1:06:51:
                    5c:d3:6c:d2:17:6e:32:d3:76:2e:5b:2e:49:02:6a:
                    19:e4:88:62:c3:73:ed:30:34:ac:c3:16:15:c7:6f:
                    53:9a:2d:01:5f:2f:72:86:3b:37:13:cc:2a:89:99:
                    cc:bc:82:2c:eb:26:ae:e7:29:6d:5f:26:8c:2e:11:
                    b4:0f:4c:24:8c:28:66:83:23:51:ac:ef:61:d1:17:
                    1d:b1:f3:de:3c:72:26:30:0b:a0:48:ab:89:ad:ee:
                    77:47:ca:56:55:7e:86:f9:d7:60:5b:03:71:3a:76:
                    53:26:0a:a9:95:ac:af:97:e4:a1:d7:14:af:83:3e:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E6:3A:9F:E9:86:B8:22:B0:1C:BB:70:82:46:76:07:A6:89:7B:1B
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:57:d7:39:34:24:e3:f3:ec:8a:af:51:96:58:da:b3:e0:
         de:3b:cf:01:dd:25:b8:31:7d:0d:b6:e4:2a:0d:49:e5:04:90:
         d1:05:49:29:19:98:a3:f1:61:e8:e3:d2:cf:94:ba:34:08:78:
         cd:d0:8d:91:de:b4:bd:0b:99:fc:2a:fd:84:82:bd:35:0b:2e:
         10:73:b5:3d:a5:3a:02:01:6d:d5:69:70:77:3e:58:c0:4b:3b:
         f3:5e:2f:8a:11:d4:44:58:34:be:66:d3:00:e8:e1:62:fd:4e:
         aa:8a:a3:d2:51:3c:22:80:7d:0b:d8:fe:fb:1c:94:33:83:0c:
         45:5d:7c:e1:d5:11:28:cb:9a:af:07:f8:54:89:9e:c7:8e:87:
         04:e3:98:6d:ba:b7:24:d2:41:bb:14:63:6b:30:9d:b3:73:98:
         ef:8b:24:42:40:22:fa:d9:2c:47:c7:ca:b1:4f:0c:1e:ba:6b:
         db:8a:39:54:42:7d:59:7f:5d:b5:d5:84:ba:87:d2:7f:31:2e:
         f0:9b:50:19:e0:e4:c1:67:58:58:01:46:8b:2e:fc:fb:a8:45:
         c5:ad:fe:0f:65:01:4b:5f:20:93:15:59:b6:ca:b7:b9:b2:f6:
         fd:12:36:88:83:9d:c1:f7:3c:a6:e6:05:14:b8:e1:ca:53:07:
         9d:e0:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:45:34 2025 by rpki-client