Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          VuufrLTm/dOhvrn6hpjhMQAvNtkwrsE7AHxT7R7gNUU=
Subject key identifier:   47:DC:1E:31:27:58:48:19:F5:7C:80:FF:50:E4:2C:07:6F:C7:7B:76
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       09C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          09BF
Signing time:             Sat 10 May 2025 19:42:22 +0000
Manifest this update:     Sat 10 May 2025 19:42:22 +0000
Manifest next update:     Sat 17 May 2025 19:42:22 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: KrnfgaUMOoipdUlDMSWUJzp1a7Wn6JxWh+NRm9tMMC0=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 19:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2501 (0x9c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: May 10 19:42:22 2025 GMT
            Not After : May 17 19:42:22 2025 GMT
        Subject: CN=681fac1e-db9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:81:da:1b:db:47:30:24:dd:ac:c6:71:d2:
                    43:a7:86:da:b8:22:9a:74:52:79:dd:bc:3e:03:b7:
                    25:d7:a4:9e:72:d5:b3:2f:ff:03:08:44:64:39:1a:
                    04:67:ae:b0:3f:0b:01:42:4a:2e:c5:06:f4:23:75:
                    cc:33:04:17:d8:c6:9e:e2:5f:c2:d6:35:47:ee:a4:
                    d1:36:f8:4a:88:56:f7:94:0f:50:3f:ed:fa:f8:de:
                    4b:85:5c:00:58:53:e9:0d:da:b4:80:13:78:c5:a1:
                    12:1a:d8:c9:71:23:a1:be:77:7a:ca:6f:87:70:1c:
                    3c:95:ed:63:c5:b1:67:82:08:01:27:ea:b1:30:5b:
                    d9:1d:53:cf:1d:d5:e3:c7:d5:3a:ac:08:fe:be:60:
                    13:0f:f2:ab:d0:bf:36:60:ba:f9:5f:df:8b:18:56:
                    48:db:cd:0c:f4:25:2f:62:f6:5f:39:26:94:65:90:
                    83:5a:07:19:d6:a8:ac:3c:3b:28:40:14:a9:7b:08:
                    d5:fa:9a:55:d9:27:6f:06:7c:0b:a2:59:ff:fc:b7:
                    9b:24:6e:18:76:1a:43:26:3b:f1:f5:92:4d:36:c5:
                    3d:ea:4f:f7:a4:56:a9:78:5f:98:15:59:0c:55:08:
                    86:52:08:ba:87:36:8b:7f:13:65:14:69:dd:40:d5:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DC:1E:31:27:58:48:19:F5:7C:80:FF:50:E4:2C:07:6F:C7:7B:76
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:f0:ef:59:1d:7c:42:fc:d6:0c:56:dd:a5:cb:d7:c3:94:
         82:dc:db:38:ed:91:3e:43:22:b1:08:1c:a5:ba:82:7e:8d:ce:
         a7:3c:82:d3:66:e9:84:72:e1:dd:b2:7e:f3:80:0a:e6:1a:ee:
         2c:0d:57:20:48:bc:c8:a7:1c:a9:98:e2:65:b8:9a:fd:18:9c:
         1d:ff:05:3d:e3:33:a5:f9:ad:5b:01:a6:a6:f9:57:39:2c:d8:
         46:37:86:e6:bc:10:22:3a:65:0e:b4:7c:b8:38:3c:77:15:60:
         12:56:ca:83:92:62:0a:3f:7b:8b:a6:ac:c2:48:a0:25:8a:2e:
         f5:81:59:be:14:81:29:c7:84:45:32:8f:cd:d1:db:cb:92:c2:
         8a:7b:0c:78:86:7f:38:ba:fc:e3:75:8f:5e:7e:15:58:fa:c5:
         95:64:84:59:17:f7:3c:a9:a4:23:f1:c2:d4:b1:d3:1a:94:0f:
         27:e4:e5:06:b7:a7:bf:b0:18:59:c0:95:36:9d:fb:b6:73:e1:
         09:33:39:ab:20:29:31:01:c5:e6:e2:85:e7:33:08:3f:d9:2a:
         2c:12:f8:01:4e:97:56:b9:f6:55:1d:8a:db:c1:17:f6:d7:c9:
         7a:6c:9b:29:47:2b:03:5c:29:fb:a2:0b:71:44:72:e5:80:71:
         5f:c5:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:36:36 2025 by rpki-client