Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File:                     hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier:          uYRwX8d0/6TnVjBmmG7aYRlOPIykqrPLm2DlBnCPz6E=
Subject key identifier:   BE:BA:4A:47:15:E1:80:1D:53:B7:57:AD:80:61:F8:67:7A:D6:F7:82
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number:          84
Signing time:             Sun 07 Sep 2025 07:09:09 +0000
Manifest this update:     Sun 07 Sep 2025 07:09:08 +0000
Manifest next update:     Sun 14 Sep 2025 07:09:08 +0000
Files and hashes:         1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 5IKPycCEVNTDhKQDasUfmwpfG0yeQ9dBlsBIQcHq2Lc=)
                          2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=)
                          3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=)
                          4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=)
                          5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: Sep  7 07:09:08 2025 GMT
            Not After : Sep 14 07:09:08 2025 GMT
        Subject: CN=68bd2f95-ecd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:58:d5:f1:1a:b6:1a:f9:df:f7:2e:55:53:
                    f0:7c:29:d2:2d:85:b6:29:7a:30:44:8c:9d:b5:d6:
                    a3:9d:6e:12:17:4f:40:53:79:aa:28:be:df:3f:34:
                    c4:73:ba:40:5c:23:4b:8f:2e:9e:44:a9:a3:f1:cb:
                    79:1c:98:da:c8:79:82:cc:05:59:f5:13:f6:1e:50:
                    60:57:16:9a:2d:c9:dc:03:0c:be:65:8c:67:19:84:
                    dd:f1:81:32:c1:3c:5e:ed:38:4d:63:6d:6c:7c:e6:
                    3f:77:73:ab:af:3d:fe:8a:c0:89:89:f6:11:eb:7f:
                    2b:a6:34:11:ea:b6:e8:1c:b2:96:32:d9:95:5b:6d:
                    08:2f:22:4a:39:c1:5b:03:5b:6e:1b:36:c0:7a:7f:
                    21:98:6d:11:5d:64:d7:fd:15:87:4c:29:5f:1f:81:
                    f5:7e:23:62:46:ca:98:23:35:c5:c4:be:83:6b:b0:
                    a2:8a:30:77:59:f8:5c:2d:f1:02:3d:fc:08:38:34:
                    bc:ee:af:e3:59:41:3f:b8:07:65:4c:4d:3c:4a:e8:
                    25:62:20:04:83:af:7f:96:53:40:ba:10:8c:06:97:
                    2c:22:85:d0:a2:4d:8f:29:86:d5:fc:cb:3c:c7:a4:
                    59:02:ed:80:e9:c9:91:db:f0:30:75:31:22:24:ad:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BA:4A:47:15:E1:80:1D:53:B7:57:AD:80:61:F8:67:7A:D6:F7:82
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:c9:d8:28:8f:8d:1d:65:2a:1a:be:c9:e0:28:f9:81:3f:
         da:a8:21:09:b5:c7:7f:01:9e:4e:be:98:00:ac:16:28:97:3d:
         38:ae:da:b6:3e:89:4e:dd:0e:e4:bb:62:19:ae:1b:da:c4:22:
         18:17:f6:6f:b5:73:60:1f:7c:4d:34:3f:d3:2d:ad:7d:25:16:
         84:db:b8:1f:a6:46:be:01:cc:b2:5e:6c:76:57:9c:cb:0e:70:
         02:51:f4:4d:6e:a0:87:3d:54:31:3c:b8:13:16:da:ef:6d:91:
         8a:bc:8a:74:59:ce:70:2c:88:0e:79:ef:1e:d9:54:81:28:47:
         91:eb:5b:29:8f:6b:4d:86:7f:c4:75:e5:be:c4:7e:18:4e:f1:
         67:79:f1:16:80:f5:eb:52:17:58:7b:66:df:97:1a:d4:f4:ad:
         dc:84:27:00:24:94:b4:15:dc:b9:52:37:46:1a:5f:25:ee:bd:
         57:67:27:a1:3c:73:e4:d0:25:c0:fd:65:8b:66:8e:69:31:00:
         eb:4e:e8:82:f3:dd:32:c1:60:9c:69:d2:14:19:47:3f:55:1c:
         b5:b2:46:18:08:ae:7b:de:0c:c3:fc:bd:64:05:00:86:c3:86:
         95:9d:f8:a1:88:22:e7:16:77:81:b9:cd:6d:c7:19:dd:28:17:
         31:03:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:46:31 2025 by rpki-client