Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File:                     fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier:          79cqPviwWP49PNLBF60KO89Qjx1lw1qxmLwA1axVUTA=
Subject key identifier:   0C:3A:68:99:A5:C9:84:F2:20:C6:03:57:5B:B2:3A:34:7C:D1:03:7F
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number:          01B4
Signing time:             Sun 29 Jun 2025 02:17:15 +0000
Manifest this update:     Sun 29 Jun 2025 02:17:14 +0000
Manifest next update:     Sun 06 Jul 2025 02:17:14 +0000
Files and hashes:         1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: u8pIkIUwOv5xrVGd1qUXTUQzF9NssVt4+xkLgmnkQSQ=)
                          2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Jun 29 02:17:14 2025 GMT
            Not After : Jul  6 02:17:14 2025 GMT
        Subject: CN=6860a22b-f55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:a1:fb:57:2f:5e:01:75:10:a2:16:cb:34:
                    d7:79:b1:7c:96:2a:cb:ee:3c:c5:f6:9e:eb:c5:ab:
                    1a:f2:ff:9e:ce:9d:9d:82:d9:50:09:8f:09:99:98:
                    38:66:2f:f3:16:2f:37:ad:1a:bc:87:9e:51:57:6e:
                    46:1e:bb:8d:7f:b6:68:51:3c:50:c4:98:e0:11:61:
                    60:6d:15:40:8b:a0:a4:95:c0:8d:18:93:26:eb:42:
                    5a:93:e2:4c:37:29:fd:e3:e9:c3:86:9a:32:52:9a:
                    82:1d:30:c9:6c:22:2e:79:aa:b9:2a:26:65:4f:f3:
                    94:f9:52:0c:af:48:76:dc:b7:81:a2:17:3a:1a:be:
                    f0:38:aa:eb:30:9a:e3:2e:64:d7:db:3a:da:25:75:
                    10:22:46:b8:02:f8:6a:ec:53:1d:15:35:9e:e2:e7:
                    86:cb:48:c5:82:62:24:95:4d:08:cc:ed:81:23:74:
                    d1:37:01:d9:a1:56:cd:9f:4e:19:1b:1f:52:6e:3e:
                    40:64:14:9b:ae:8a:8b:15:83:03:d8:1d:85:07:4b:
                    51:43:d1:fb:f0:13:9a:8a:11:38:2f:58:44:08:ee:
                    c7:1b:f6:3e:49:1c:75:67:fb:25:83:71:bf:94:42:
                    c8:41:9a:1a:36:36:6b:81:8f:7c:bb:37:25:09:d7:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3A:68:99:A5:C9:84:F2:20:C6:03:57:5B:B2:3A:34:7C:D1:03:7F
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a6:98:4a:1d:cb:45:7f:74:e1:5d:30:71:89:8b:2c:99:07:
         6a:ad:02:e5:21:02:03:e3:3b:14:5b:b2:16:4c:9b:46:bb:73:
         b0:3b:3a:ee:30:3a:d9:85:b2:d5:8e:e7:59:1a:18:76:1d:e3:
         dc:82:6c:95:ef:6a:82:b0:94:ed:db:48:4c:ce:e0:05:b3:cd:
         9c:6b:f6:03:9d:a1:5a:14:ca:76:da:8f:c0:c0:39:01:d9:87:
         56:75:d8:5e:6c:19:0f:23:4b:d2:2f:c8:cb:58:d4:7c:d9:f0:
         14:ac:dc:7d:38:9a:1b:77:b2:f7:48:29:06:06:1e:61:b7:5f:
         74:34:3b:e5:92:34:d1:11:f3:94:f0:7b:e5:3d:4a:91:21:57:
         f4:cf:85:9a:1a:2c:70:30:d2:40:6a:59:aa:a3:66:e5:bf:d1:
         a1:0a:69:41:95:0c:f8:2e:c0:96:8f:d2:77:be:2c:33:9e:93:
         f3:e6:21:cd:8b:da:46:23:82:82:fe:2a:fb:1c:83:48:7b:1b:
         6e:b0:19:80:5e:4f:19:45:58:a6:12:42:b6:3c:cf:96:6d:18:
         7f:06:f8:78:1c:c4:74:68:3b:86:ba:c3:b0:52:34:10:0f:f3:
         dc:45:02:d4:d9:a8:e1:eb:a0:a0:3c:4f:dc:23:20:8e:28:10:
         ba:d7:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:34:57 2025 by rpki-client