Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          pmSVcaHDpK1ZHPe+KuJaBGyxuaeYh4SrZyxzVm8LEwQ=
Subject key identifier:   89:2B:62:05:DE:A6:B1:66:8B:CA:66:BD:17:28:BD:8A:37:24:FC:D9
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       06FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          06EB
Signing time:             Sat 28 Jun 2025 21:38:22 +0000
Manifest this update:     Sat 28 Jun 2025 21:38:21 +0000
Manifest next update:     Sat 05 Jul 2025 21:38:21 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: uhw1AdRCDQUPxAPePYZN0CXKuoG0BYQOGi+QN5vU/Ug=)
                          2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=)
                          3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Jun 28 21:38:21 2025 GMT
            Not After : Jul  5 21:38:21 2025 GMT
        Subject: CN=686060ce-659e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:ed:b1:76:b5:d9:6e:46:76:82:ba:d4:7c:
                    1c:6c:bd:a2:ef:c0:1e:cd:f7:8c:27:3a:a6:b8:c9:
                    69:be:d0:ce:7d:b0:54:40:9d:42:24:2e:92:8d:04:
                    89:7e:85:30:3c:03:83:1c:e8:a2:8f:eb:99:a7:b7:
                    fe:9c:97:c1:2a:df:78:7d:d5:87:2e:31:2b:fc:7e:
                    d7:7c:27:72:bb:ab:b9:38:7e:60:87:df:ef:09:d6:
                    fd:ab:e1:91:3d:2c:b7:b1:26:6d:d2:41:66:0f:b5:
                    9d:55:99:64:54:6b:bb:41:5c:45:ce:f4:07:3d:8e:
                    28:60:fa:5d:fd:56:7c:15:c3:8b:96:7b:51:14:56:
                    5f:b3:3c:a0:d5:0a:d1:1d:19:c8:3f:f4:d3:d4:6f:
                    10:c5:c6:7d:6e:6a:3a:1a:4e:20:94:67:60:7e:e7:
                    01:6c:6c:6a:c8:3b:c0:bf:0d:df:83:0f:5f:bf:64:
                    82:a3:35:00:9d:41:d8:5c:06:e2:65:45:99:2d:79:
                    89:37:de:e7:58:be:06:7a:c3:7b:c1:26:63:4e:bb:
                    05:4b:8b:b0:50:aa:54:4e:da:a8:48:d3:0d:33:58:
                    4c:bf:34:bf:67:45:c4:30:a0:f8:96:fe:53:ce:31:
                    19:71:23:20:a7:b9:fd:5b:33:e5:85:6c:72:5c:02:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2B:62:05:DE:A6:B1:66:8B:CA:66:BD:17:28:BD:8A:37:24:FC:D9
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:dd:34:c9:b8:b4:ff:5b:eb:e7:f6:69:0e:84:f4:6f:87:
         2a:9c:74:7c:d8:59:d2:0f:b3:fa:cb:6c:30:b1:fd:eb:0c:aa:
         fa:63:ad:9e:49:75:2f:33:98:37:46:48:2d:a4:0f:a1:df:cb:
         e0:f0:a8:c9:08:bf:af:52:2e:1a:cd:4e:a8:7d:3b:a1:05:48:
         ca:4a:9a:bf:47:7d:8a:eb:a8:d4:a6:b5:ab:92:9f:39:60:5f:
         de:1b:46:6c:31:f6:cc:14:9f:89:b1:4d:67:35:25:e4:4a:26:
         ab:ec:8b:8a:15:15:32:fe:d1:74:c2:68:c8:67:33:55:44:e4:
         54:61:53:30:a0:77:f1:9b:89:76:1e:5c:91:54:3a:be:aa:b2:
         5c:ab:f4:01:eb:e9:0d:61:4a:ca:9f:b2:03:b4:9e:23:b5:dc:
         54:37:b0:5b:21:88:f7:10:2c:c1:ba:27:99:fd:7f:32:87:72:
         6f:93:ef:51:b6:90:1d:07:1e:0e:f4:8c:6f:86:ba:0e:b5:fd:
         d6:b4:48:83:6e:4a:f6:33:17:28:38:4a:b9:74:1f:16:a7:95:
         28:0b:fc:56:d3:ab:e8:84:54:a6:42:2e:1a:84:55:40:95:6f:
         d3:8a:5e:f8:0b:bc:f9:26:1e:96:27:d8:8d:0e:ed:ef:fd:35:
         32:26:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:52:30 2025 by rpki-client