Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File:                     fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier:          XiWjlF5FwnymWhL6ZN4en7n+EjUmPVxLvWBxYghzdgk=
Subject key identifier:   FB:D2:E9:D9:66:D8:42:BC:30:3A:9D:11:75:17:95:DB:30:AA:F3:A0
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer:       /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial:       0618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number:          0613
Signing time:             Mon 30 Jun 2025 23:10:58 +0000
Manifest this update:     Mon 30 Jun 2025 23:10:58 +0000
Manifest next update:     Mon 07 Jul 2025 23:10:58 +0000
Files and hashes:         1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: jUP6V1MdEqVTxD5kLIhGy1LVmuXJiMnlwqruhATxbWg=)
                          2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
                          rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
        Validity
            Not Before: Jun 30 23:10:58 2025 GMT
            Not After : Jul  7 23:10:58 2025 GMT
        Subject: CN=68631982-80fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:eb:09:6c:7b:aa:56:83:56:e9:e6:f8:12:
                    31:0c:ab:e4:d8:57:fe:6b:c7:db:3a:9d:9c:ce:49:
                    cd:f6:e7:78:3a:42:44:bb:97:b8:3b:ac:c7:da:34:
                    1c:9d:f7:0b:15:ce:57:8d:27:76:d4:4b:b9:68:8c:
                    45:ac:99:8b:a6:24:d5:d7:da:5f:30:0e:76:4f:4c:
                    21:fe:6f:c2:1d:29:96:21:b7:ba:3b:ee:9b:5f:28:
                    3e:3e:c4:8b:77:b2:eb:db:05:2e:2e:5e:df:b9:b5:
                    8e:74:da:10:d5:fd:4b:76:66:a2:5c:bc:52:d3:b3:
                    31:71:b4:48:d1:b5:e9:fe:ee:17:d8:a4:d7:eb:c5:
                    b7:92:4d:8a:e3:c0:be:33:5a:02:f1:f5:e6:38:e3:
                    31:a8:98:24:f7:3b:f6:23:b9:67:e1:f7:fd:78:11:
                    44:38:95:8e:45:bd:26:c3:4b:18:88:b1:31:37:66:
                    88:f4:48:cf:96:8b:e5:b4:8f:bd:f0:10:fb:b3:41:
                    30:7d:30:47:2c:0f:01:2b:33:c8:43:2c:d9:6b:0a:
                    c6:95:ad:85:cd:14:d2:5e:77:7c:1b:7d:37:e5:86:
                    08:04:19:ed:7c:54:6f:42:24:89:5a:59:6c:be:ed:
                    b6:a5:db:9f:51:3b:f8:e9:93:41:0d:18:ab:58:05:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:E9:D9:66:D8:42:BC:30:3A:9D:11:75:17:95:DB:30:AA:F3:A0
            X509v3 Authority Key Identifier:
                keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:d3:17:ee:ce:58:4c:bd:a4:2b:bd:5f:c6:2e:8b:77:a1:
         4c:90:52:9f:b4:e1:97:6a:01:e9:80:c7:a2:06:f1:31:10:55:
         fe:44:14:fa:62:e5:d1:66:f7:fb:bb:8b:a5:a7:0d:2d:9a:61:
         a1:b3:24:94:8f:e4:d1:5c:52:36:52:06:9f:9d:e8:19:71:e7:
         60:db:1b:9f:a0:8c:e8:f8:69:22:fc:35:07:6c:0c:2c:c9:47:
         f6:d5:97:3a:d4:a9:14:aa:de:cd:a6:c0:e7:b8:15:b7:53:f3:
         6b:95:5b:74:df:26:b7:7b:c0:d1:3c:54:b2:3c:f4:6f:ed:67:
         03:27:a7:13:cf:49:f4:33:3e:7a:05:c8:47:10:90:4f:dd:29:
         36:44:89:df:76:3b:c3:8e:89:f6:a3:a6:4c:6b:dd:af:0e:2f:
         a8:a7:1e:e8:f3:2c:e6:7c:bd:12:3d:84:5b:9f:72:eb:20:ad:
         5d:32:c3:81:0b:ae:b4:c8:28:82:5b:f3:c1:b0:ff:af:78:13:
         fa:62:b3:5a:6f:7b:2b:3c:e8:5e:7e:ea:3f:82:cc:a4:d9:1f:
         da:76:da:4e:52:5e:7d:0d:7c:b8:f0:3c:66:ac:eb:00:75:11:
         2a:33:8e:b4:89:08:5b:6a:0b:cd:17:da:83:1b:22:e4:a2:ab:
         23:3e:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:02:09 2025 by rpki-client