Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          RhNTpXmJqVJ4Kza1/Wbr3GHMAyGIcABjZTNDE45GzMc=
Subject key identifier:   9F:DA:DD:F9:A9:F4:D0:57:A1:BB:58:66:0B:DB:BC:FA:41:47:72:38
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          0759
Signing time:             Mon 30 Jun 2025 21:55:26 +0000
Manifest this update:     Mon 30 Jun 2025 21:55:26 +0000
Manifest next update:     Mon 07 Jul 2025 21:55:26 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: ndOKUbGJ1VZ9LMASTi66NdmJ7SRLBsxbuR7sCtEkRZ4=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 21:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Jun 30 21:55:26 2025 GMT
            Not After : Jul  7 21:55:26 2025 GMT
        Subject: CN=686307ce-aa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:4d:9e:ef:03:7e:2b:3f:d4:f5:36:6a:13:
                    d6:b7:6a:70:6f:55:12:88:c1:00:7a:cd:6d:59:72:
                    e3:49:d4:07:3d:ed:c1:6e:3a:3f:03:fa:ed:14:24:
                    f3:f3:a5:4c:aa:cf:44:49:d9:d1:71:8c:16:23:53:
                    eb:0e:0a:17:3d:1e:7b:8b:5b:9d:ea:63:b1:92:e0:
                    de:56:8d:60:81:53:a8:a7:fb:14:50:23:46:7f:b1:
                    07:a3:b7:61:c0:57:c4:4f:8c:52:46:b1:65:11:bf:
                    71:0b:32:2f:ae:fe:96:71:a9:16:8f:0e:ef:43:39:
                    94:7d:5c:09:6b:36:af:db:42:3a:bd:be:ec:36:1d:
                    1e:9c:60:c0:52:92:a1:0e:fb:b6:f5:18:e5:49:f4:
                    dd:b5:52:11:d5:63:ce:25:f0:3f:c6:d7:b6:20:fc:
                    20:ce:1f:0e:db:ec:ea:ab:5f:96:bf:88:e4:65:dd:
                    8e:9f:93:e4:57:ee:3e:42:cc:c1:2e:84:89:d2:20:
                    1c:c2:00:e9:65:ce:00:65:e9:2d:9c:10:e5:cc:8d:
                    65:45:ac:b2:99:13:5b:b6:bf:ce:c3:de:4e:99:f8:
                    da:77:0c:35:7e:88:31:1d:fa:cb:54:3e:dd:f0:1b:
                    20:0b:3e:87:a2:34:4a:c9:26:84:4c:14:7d:ee:93:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:DD:F9:A9:F4:D0:57:A1:BB:58:66:0B:DB:BC:FA:41:47:72:38
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:3f:a9:b0:3b:fe:aa:fc:94:18:96:7c:21:a8:d3:66:1d:
         01:3c:1d:c0:a9:3c:e6:c3:77:0d:20:a3:11:30:2a:50:e2:5b:
         44:e1:a1:03:d1:8f:0c:48:7b:29:c9:be:23:20:72:b0:c4:50:
         52:99:c5:2f:26:cb:61:33:58:fa:9c:91:f1:75:be:e4:77:8d:
         4e:7b:15:2b:94:a9:db:5c:53:66:49:bc:ee:bf:77:21:37:58:
         48:6a:0e:57:96:67:c2:04:7a:0f:57:db:e8:7b:aa:e1:9f:fc:
         a4:10:1d:43:d1:a7:3d:d9:a8:d3:99:08:3f:8e:9c:04:5b:14:
         0b:1c:af:66:f0:af:ca:81:5c:8e:c4:cb:1d:8e:34:ce:77:a5:
         ba:a9:84:2f:e5:35:e2:4e:3e:7c:6b:af:c7:57:f5:06:b4:d0:
         46:3d:4e:e6:49:cc:a8:7f:75:de:0b:b4:31:3b:ff:6b:a0:fb:
         64:dd:3e:1b:9a:2a:1d:44:77:3d:d8:1c:3d:f9:09:4c:69:63:
         f1:52:5a:4d:f8:f9:08:77:1e:d5:af:50:3c:e5:ea:45:e4:88:
         54:f6:0c:4e:81:ec:91:90:a7:17:16:ac:68:e8:56:3f:83:b2:
         b4:60:75:60:ef:bb:f9:e6:e8:79:23:9f:7e:74:04:e1:e9:11:
         4e:6c:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:19:24 2025 by rpki-client