Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File:                     pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier:          H+2g01cDOiMmRk4GVfnBHUwB1f/usV5mgkCLpRBCXKc=
Subject key identifier:   31:8D:85:B6:00:3D:FE:E3:5F:7B:63:52:C9:03:8A:CD:D6:AC:B1:46
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number:          0242
Signing time:             Wed 23 Jul 2025 02:19:50 +0000
Manifest this update:     Wed 23 Jul 2025 02:19:50 +0000
Manifest next update:     Wed 30 Jul 2025 02:19:50 +0000
Files and hashes:         1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: ChHP9j4hFIbZuXlFXWpwvnDfTdrvitY/GIrNrbV7PnQ=)
                          2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=)
                          3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Jul 23 02:19:50 2025 GMT
            Not After : Jul 30 02:19:50 2025 GMT
        Subject: CN=688046c6-0ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:53:76:3b:bf:df:64:da:bf:82:31:09:bd:
                    9b:0e:18:34:b2:a7:11:f8:7a:f9:0b:73:84:b7:33:
                    24:95:90:31:08:3a:ce:1d:e7:59:06:cb:f6:19:67:
                    dd:c6:0c:67:f6:83:85:36:7a:c5:14:aa:2e:cf:33:
                    fa:d3:75:0c:4b:a4:95:7f:09:75:bb:0a:4b:3a:99:
                    04:cb:98:8d:1f:c2:aa:63:93:4c:3c:fe:79:39:ad:
                    9c:43:46:6b:ce:d6:26:2f:95:cc:b3:7f:d5:c2:9c:
                    82:28:9f:cc:a2:ac:54:79:17:42:dd:31:8f:3d:d3:
                    8c:9e:3a:32:a2:bc:20:c3:0e:69:27:63:ad:84:5a:
                    35:89:94:d9:f2:ed:6b:9e:72:0a:db:d8:ef:a1:fd:
                    a6:d1:e2:69:26:e1:59:98:c2:ab:60:ad:98:b5:60:
                    b6:16:19:21:dc:02:f5:76:6e:10:4e:6a:b1:1b:55:
                    99:99:15:68:04:ab:39:21:ed:61:56:1e:eb:22:e5:
                    0a:af:15:33:47:15:6f:c8:bd:8e:56:c5:34:5b:d5:
                    74:9a:a4:81:04:1f:97:f2:df:0d:8d:6c:cb:84:22:
                    fe:e6:cd:6c:5b:76:f1:4d:ec:36:4f:5e:f7:02:cf:
                    c7:60:da:82:53:f9:52:94:c5:1b:33:8b:6c:bb:03:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:85:B6:00:3D:FE:E3:5F:7B:63:52:C9:03:8A:CD:D6:AC:B1:46
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:32:47:4a:f0:fd:7b:44:2b:ce:d7:0a:01:dd:14:76:2c:
         3e:12:1e:72:d8:85:90:78:2b:b1:05:39:1d:33:96:99:c3:7c:
         60:1c:fd:af:ad:63:92:71:71:0f:bb:dd:45:1b:23:f5:87:53:
         e6:11:98:ac:24:b1:3c:6d:5e:5d:b0:d8:2d:ad:8f:b3:a3:ac:
         5f:2a:4f:79:6e:0d:f4:dd:fd:64:f4:b8:df:b9:6c:f1:f1:22:
         f3:fa:7f:b0:01:4d:da:91:37:27:68:11:32:36:49:b7:75:73:
         83:00:b1:9b:dd:db:45:f7:3a:63:36:b9:c6:7b:99:04:2e:70:
         5d:cf:dc:20:da:7f:c3:13:47:3a:8f:e5:61:23:28:1a:d3:08:
         92:66:dc:6a:35:0b:02:d5:d3:43:3a:5d:e8:eb:db:ad:59:a6:
         64:ce:c6:96:f5:3f:2d:b5:19:88:bf:be:05:be:db:ed:b0:c8:
         f7:d7:7b:17:29:4f:c0:93:1f:74:fe:b2:fd:e0:ad:34:80:54:
         b8:c8:8a:0c:cd:1d:72:96:b8:a2:5a:e6:b5:b0:16:78:4a:1f:
         79:35:f0:05:fd:47:71:cd:0b:c2:7b:4c:1a:67:84:24:61:ab:
         f9:54:4a:bf:45:0f:04:96:dc:6d:fb:3e:9b:b3:9b:f9:ff:97:
         ad:64:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 01:28:53 2025 by rpki-client