Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          TRVMHMZ/td09M02Uhm8L7pw9U7FNRhLB2ZUP/59xMhA=
Subject key identifier:   04:01:D6:65:AE:C0:37:C9:FB:71:A0:70:4B:4E:62:C1:99:09:C2:F5
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0C76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0C6E
Signing time:             Fri 22 Aug 2025 18:29:43 +0000
Manifest this update:     Fri 22 Aug 2025 18:29:43 +0000
Manifest next update:     Fri 29 Aug 2025 18:29:43 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: Mi4Zx2Vv3s5H7cw5Pcx0NMqirce2uxtDdlQffD6b7Zk=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: Ry01yZ5BQjClLdraAGF0vxY6zRTp62DNKwkQE7m6ywY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3190 (0xc76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Aug 22 18:29:43 2025 GMT
            Not After : Aug 29 18:29:43 2025 GMT
        Subject: CN=68a8b717-266d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:e6:57:b5:07:16:13:b0:5b:18:48:9e:a6:
                    84:de:4c:81:f3:56:e9:04:27:50:72:cc:4d:a2:a7:
                    0e:db:25:98:76:c4:e1:2d:93:15:af:21:85:7f:69:
                    0a:56:40:e9:6c:2d:3f:14:26:59:cc:cc:7e:56:02:
                    df:c6:b8:a9:a0:f9:fa:1d:e0:ec:23:38:91:1c:58:
                    2b:78:23:75:dd:d6:36:bc:57:b6:02:86:69:26:62:
                    2a:8e:31:03:1d:f4:2f:22:f6:1d:0e:6e:aa:1b:30:
                    2e:62:ef:00:e0:e7:ae:38:6b:ba:07:4a:cd:3b:ef:
                    71:3c:11:54:c7:58:6a:87:91:77:9c:b6:04:50:b4:
                    22:d1:b6:56:b2:f8:06:04:f2:c7:f0:c4:da:b5:8a:
                    d7:a3:b1:af:17:a3:6a:d0:f0:f3:0d:00:b8:75:31:
                    b7:75:c1:27:91:f9:03:44:da:7f:8e:e9:a6:d0:2c:
                    73:e8:71:3f:fb:53:a3:65:ce:a4:49:92:46:b9:64:
                    c3:c2:5e:96:76:e9:9c:ad:3e:69:b9:63:88:c9:44:
                    ab:98:be:38:95:33:61:2c:db:65:e7:ca:a9:1a:39:
                    83:38:54:6d:9a:02:15:0d:43:75:19:21:1e:c6:d1:
                    b2:60:0a:7e:e0:58:eb:d3:12:0e:49:88:41:f8:e0:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:D6:65:AE:C0:37:C9:FB:71:A0:70:4B:4E:62:C1:99:09:C2:F5
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:31:91:01:5a:57:2a:e1:5f:b3:73:36:d2:76:91:94:61:
         36:f3:18:ec:fb:69:c4:e0:9a:d1:35:cd:1b:da:dd:e5:48:db:
         bf:0b:f0:f5:14:d7:69:b7:a1:2d:2b:2c:77:25:8b:19:3c:d2:
         1e:cd:2e:97:23:ec:f0:90:e5:fd:35:fd:2b:96:c4:79:96:6a:
         a8:d4:8b:f2:66:6d:c8:0c:02:20:b0:59:bb:67:19:28:a6:1c:
         a3:95:9e:27:d6:05:88:26:3f:2b:16:44:45:ad:71:c1:8e:59:
         5a:ba:50:27:d9:54:1a:f0:0c:6f:da:07:53:b1:78:4c:8b:cd:
         63:13:16:19:1b:bf:4b:4e:2c:6a:9e:94:a9:a9:83:09:0d:c9:
         0d:9e:ee:2e:88:b8:04:0a:8d:1f:5f:5b:05:2a:ec:f0:78:f9:
         9c:83:ce:f8:fb:c6:1d:29:d4:55:79:08:f5:74:b0:4f:e7:c4:
         ac:3b:fa:ad:db:87:1f:4e:e6:b7:9c:b5:99:fe:e4:f8:3c:7a:
         77:9c:5c:d8:36:30:ca:84:8e:9a:bf:0b:fe:6c:15:d6:c1:ad:
         d0:d3:d0:49:4a:b5:68:4e:e0:42:7b:56:9a:65:e5:31:d8:50:
         88:6f:d1:29:2d:28:06:45:c8:94:40:ed:2d:24:b0:92:27:33:
         56:f4:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:10 2025 by rpki-client