Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
File:                     KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json)
Hash identifier:          6BB/2KGXkun9m0GutEFeKpvJ6dgmgRQjoYzxV1pnDLk=
Subject key identifier:   9B:86:E5:E9:42:EA:B1:EB:4D:F8:34:3F:97:90:5D:F2:95:AE:5E:E3
Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B
Certificate issuer:       /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
Certificate serial:       03A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
Manifest number:          0390
Signing time:             Sat 23 Aug 2025 01:06:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:06:03 +0000
Manifest next update:     Sat 30 Aug 2025 01:06:03 +0000
Files and hashes:         1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: A3tQ+HitE72AhbBRdfGodQV0Q729A8rZOC8hUgglu+I=)
                          2: BFFAF880912711EE92065180C4F9AE02.roa (hash: Lsqx9/oy87FhklVkD5fx3kw5FODjB7E1qGUY3oaFvE0=)
                          3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: 4sz5x+76umIpNZ3sOBNm3f43GqD1JXBxP8ZYGGmDu/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl
                          rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91900BF, serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
        Validity
            Not Before: Aug 23 01:06:03 2025 GMT
            Not After : Aug 30 01:06:03 2025 GMT
        Subject: CN=68a913fc-9e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:86:49:b4:d7:17:43:b4:34:bb:24:8b:3c:7a:
                    08:84:e5:98:8b:b6:fa:16:27:2e:7c:53:fa:c7:82:
                    44:6f:72:87:6c:41:ec:b0:20:4a:b3:03:5c:a0:5f:
                    f5:90:e9:fe:6e:69:23:c8:98:de:d3:36:9d:50:c5:
                    a7:0a:5e:aa:94:bc:b4:27:3a:47:85:e1:99:a5:ee:
                    4f:1c:1a:28:02:03:19:67:6a:08:d4:5b:ce:7b:0f:
                    f9:23:ce:dd:91:03:b1:a8:78:df:cc:f8:ac:7f:cd:
                    5a:2a:15:26:14:b8:e2:e1:59:e6:d4:d2:8e:cc:1a:
                    54:cb:8c:3d:ca:cc:8a:72:4b:e3:d1:d6:41:b4:18:
                    2e:98:53:99:3b:74:b6:1f:ff:62:e6:bf:e7:06:3e:
                    6e:0e:59:5c:72:58:40:83:30:ba:4a:8a:be:91:0a:
                    d3:f3:1d:67:35:ac:10:65:e1:67:cc:53:48:51:d2:
                    b5:0b:87:bc:12:31:c3:03:c5:1e:27:df:99:56:e0:
                    70:6a:b6:1a:a6:4b:9c:35:d7:6d:0f:07:4e:cc:5c:
                    92:0a:73:df:93:72:23:60:27:6a:31:f4:36:02:a1:
                    58:87:f5:48:8c:52:f7:ba:94:d9:71:b0:d0:e9:08:
                    df:e8:b6:15:4b:7d:56:33:ab:9c:ba:15:76:b6:ae:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:E5:E9:42:EA:B1:EB:4D:F8:34:3F:97:90:5D:F2:95:AE:5E:E3
            X509v3 Authority Key Identifier:
                keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:24:d6:0a:a7:72:45:dd:11:02:83:b8:1c:99:67:56:16:
         15:13:e5:2f:cf:e5:83:5c:db:43:c6:ba:a7:4a:3b:f0:b7:c6:
         16:93:0d:07:18:6c:e5:5f:4d:21:c6:af:37:cb:5a:bd:b5:3c:
         c5:89:9d:93:31:e2:e9:e1:1d:19:c8:1c:72:a8:b2:c3:3c:71:
         ed:9c:a5:35:db:d6:85:09:ce:16:e5:34:20:74:28:00:0c:71:
         61:c3:26:5d:05:11:7d:c5:40:b6:2f:ee:0c:e1:44:f6:55:21:
         88:de:6c:ee:b6:f7:0a:84:3c:14:9c:01:3f:61:6f:e4:f5:9e:
         f6:3b:ca:68:0f:d1:9a:20:a8:b1:bb:bf:28:8b:83:0e:95:74:
         ce:7a:98:12:62:4d:14:81:50:32:93:d1:88:ce:38:61:1d:ac:
         36:f5:c2:4f:8c:9b:39:99:0c:ce:37:ba:25:2b:c5:56:2c:e2:
         3b:a3:3d:4c:12:d8:02:81:08:7f:a5:41:b7:0f:69:1f:d8:90:
         82:78:4a:98:c6:87:16:74:ac:f7:76:1e:63:87:01:57:d1:31:
         10:01:ab:c8:3c:ef:07:d6:e7:aa:10:76:40:9f:75:27:05:41:
         ce:5f:e3:28:f6:e2:f9:de:98:10:d8:d0:d8:49:63:fd:6c:ed:
         dd:9b:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:51 2025 by rpki-client