Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          rglK0+T797VBkWzJxs3JRVJg6I3xtdRmmP6BNEiSm2Y=
Subject key identifier:   9B:80:5E:6F:8B:2D:AF:AB:94:B6:16:91:19:04:98:35:BA:3B:36:7F
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          42
Signing time:             Sat 23 Aug 2025 07:45:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:45:45 +0000
Manifest next update:     Sat 30 Aug 2025 07:45:45 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: HQytxVKFM7b+j5Y6b9IUM9MakA5e58Z04peI7ZYDrWc=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Aug 23 07:45:45 2025 GMT
            Not After : Aug 30 07:45:45 2025 GMT
        Subject: CN=68a971a9-5240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:fb:33:12:4b:f7:22:84:6d:13:75:b7:a7:
                    d9:91:2d:1d:1f:8f:e4:c8:c6:44:01:49:14:f4:e4:
                    1c:28:04:5d:3f:1c:20:32:52:7c:77:dc:c7:36:14:
                    83:c3:d5:e9:94:af:d6:98:b5:fb:52:42:42:75:4f:
                    59:cd:c8:21:42:64:64:b2:dc:70:b4:af:fa:52:83:
                    5d:b4:ca:32:e2:09:a1:0e:b0:93:df:ef:b8:c6:87:
                    5f:fa:51:c5:0d:0b:db:95:f2:f8:79:5c:4c:b6:9c:
                    c6:81:8c:76:34:bc:95:02:5d:59:c0:26:f6:1d:1b:
                    26:91:f3:33:85:5b:3e:0c:d7:5d:21:b7:2a:87:20:
                    36:fa:b3:a0:48:c4:ae:12:1d:63:3e:c3:23:dc:44:
                    0c:36:76:ce:ea:b7:92:37:c7:4c:64:52:ce:ec:0c:
                    75:02:98:14:15:5c:ee:b7:ad:88:25:f4:af:04:7b:
                    f8:51:70:89:11:8f:b8:2f:3e:ab:13:c5:84:39:d8:
                    f9:ef:17:1f:82:48:a7:48:fa:dd:c4:fa:94:fc:9e:
                    69:f7:cb:e6:b9:2a:37:fe:ab:a7:21:65:ff:0a:fd:
                    f3:66:45:0d:4f:91:2f:16:87:78:c5:f3:24:30:44:
                    f5:31:1c:bc:d4:19:dc:09:2c:63:95:e0:ce:68:e1:
                    0d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:80:5E:6F:8B:2D:AF:AB:94:B6:16:91:19:04:98:35:BA:3B:36:7F
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:ba:bc:de:58:23:b4:24:54:d9:53:be:fd:37:34:ee:ee:
         9d:21:0f:50:00:09:38:48:20:cb:0b:ce:2e:bc:82:af:17:79:
         79:3e:cd:6e:17:15:95:6f:1a:da:e8:f8:80:fe:a5:b2:dc:49:
         08:47:e9:aa:72:8d:13:7a:dd:75:20:cd:b6:b9:f9:ef:9f:94:
         89:13:32:1a:b0:fe:eb:d9:fd:9c:ec:b4:47:75:fd:ae:4a:62:
         f6:4e:d9:7f:62:cb:de:75:4b:21:4c:2a:bc:aa:29:b0:19:76:
         59:eb:f1:90:e7:05:a6:0a:2e:39:91:94:d4:26:16:74:21:07:
         f4:2a:d9:0c:9e:1f:52:5a:c3:fd:3a:07:86:db:14:55:7d:c5:
         b7:ee:14:ca:78:9c:5b:1d:19:20:56:e3:8b:c1:9a:c6:dc:f5:
         dd:ab:51:08:4d:0b:b5:03:d9:ea:b5:1d:29:c4:af:e9:0e:fe:
         24:6c:55:3d:bf:9c:7b:cd:75:d8:74:30:15:d7:80:e1:2e:60:
         51:2b:62:81:c0:de:4f:78:cb:8a:e5:14:3d:d2:41:61:15:8d:
         ec:e5:b1:88:ec:b2:f2:33:40:49:ee:3b:2a:c3:30:a0:a7:01:
         21:44:71:84:7a:d0:a8:22:0f:ce:bf:78:c5:2c:07:6f:b0:4e:
         46:4c:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:05:55 2025 by rpki-client