Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File:                     fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier:          M8enyW8+2D3ceAudgzLVX0/D8evIAiEbZfjCFy3FQ9E=
Subject key identifier:   84:5F:E0:9E:39:38:49:DB:69:4E:8F:73:63:66:37:21:66:28:72:71
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer:       /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial:       0CF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number:          0CE9
Signing time:             Wed 02 Jul 2025 18:19:17 +0000
Manifest this update:     Wed 02 Jul 2025 18:19:17 +0000
Manifest next update:     Wed 09 Jul 2025 18:19:17 +0000
Files and hashes:         1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: HBys3tjzITXnWV2dFxrN+wf/BU2Iw958qYPCySej4ts=)
                          2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
                          rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
        Validity
            Not Before: Jul  2 18:19:17 2025 GMT
            Not After : Jul  9 18:19:17 2025 GMT
        Subject: CN=68657825-5fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:4e:76:93:d2:b5:d8:8d:66:e4:6e:8c:86:
                    c9:18:88:10:b0:d9:26:25:e7:69:35:39:d6:75:0c:
                    8b:b0:ee:56:e4:00:b6:76:38:d2:ee:b8:08:00:7d:
                    dd:6e:e1:e0:3f:1a:97:ee:d1:f9:9f:34:eb:aa:72:
                    f4:75:6e:0a:78:ba:f0:a7:7d:b1:04:36:da:17:71:
                    69:22:02:96:a8:05:de:69:40:55:49:0d:54:e7:cb:
                    ec:ab:54:7b:59:f1:b4:d6:bd:31:2d:6b:9a:2f:ac:
                    d1:97:62:68:6b:78:26:01:09:94:52:17:a0:ef:bf:
                    32:3c:45:1d:1c:36:36:0d:f3:91:0b:aa:c9:f0:79:
                    cd:fc:80:db:a2:6b:7d:f3:34:44:55:6b:67:99:36:
                    f3:f4:96:69:f9:12:ec:0d:1c:10:29:26:66:c2:dd:
                    ac:db:e6:ad:b3:5b:b6:df:4c:cf:bd:6b:01:c0:5c:
                    f0:03:81:05:e3:4c:48:1d:52:b2:a5:7d:8a:fc:aa:
                    9b:25:cd:8e:51:2e:8b:18:7c:f9:6d:c6:d4:3c:aa:
                    d3:10:c0:f3:fa:6a:3d:3e:13:9f:dc:c3:88:32:70:
                    bb:46:2b:99:16:d6:a4:f5:75:d6:e5:c1:6e:60:b3:
                    52:42:91:54:4a:da:c8:64:37:60:49:8f:09:0b:56:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:E0:9E:39:38:49:DB:69:4E:8F:73:63:66:37:21:66:28:72:71
            X509v3 Authority Key Identifier:
                keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:cc:96:bc:83:4e:e0:56:04:7b:88:b0:16:bb:6d:6f:7a:
         65:cb:32:ad:e4:13:1c:cd:61:cb:b2:cc:c7:f2:08:96:54:46:
         31:e5:12:8f:63:c6:66:2b:dd:5a:3a:73:fb:64:24:f0:b3:8d:
         6c:58:f4:4f:f7:50:95:83:86:c2:ae:39:6e:3c:5e:30:82:f6:
         e6:82:a9:43:d0:ae:fd:6f:74:05:ca:fa:e5:e8:9c:92:5a:e4:
         25:38:35:d1:2b:2e:a8:37:b8:8a:47:a6:77:c4:97:bd:92:21:
         6f:ee:c7:94:14:82:25:9f:81:e9:7e:6d:d7:f2:ba:64:f3:9a:
         b4:13:58:cc:8f:28:13:33:fb:01:37:66:33:ea:c2:22:4d:19:
         61:fa:0e:79:21:9b:46:e5:20:60:db:b0:df:40:76:99:67:d3:
         55:b5:67:79:4d:f5:7e:1d:c2:7e:4f:89:42:02:f5:f7:3b:48:
         c0:5a:62:96:9e:f1:b1:2b:88:90:97:35:95:7c:bb:66:82:88:
         23:5c:37:49:3a:a3:82:3e:8e:b8:d8:25:c9:51:07:4b:54:28:
         d1:8a:70:0f:a3:ea:3a:da:2a:14:3b:cb:df:0a:4d:5e:15:d6:
         4d:61:54:cf:1b:2d:57:94:47:22:bc:93:48:f9:77:ba:a0:b0:
         fc:6f:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:06 2025 by rpki-client