Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          jUHzPYeqL006Yn/W7m9EWczXhIo3aSwJs5az+uHqj3w=
Subject key identifier:   76:F5:B9:67:53:F8:EA:F9:80:4C:7A:51:F8:C4:87:B6:89:A8:00:01
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0A19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0A0F
Signing time:             Wed 02 Jul 2025 20:02:59 +0000
Manifest this update:     Wed 02 Jul 2025 20:02:58 +0000
Manifest next update:     Wed 09 Jul 2025 20:02:58 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: /a1K4t1xtR5PQp6cpuSRrequ5i4Dr/3uunEVeLaLmg4=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Jul  2 20:02:58 2025 GMT
            Not After : Jul  9 20:02:58 2025 GMT
        Subject: CN=68659072-1078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:b4:2d:07:45:bd:6d:1d:d7:63:6f:2e:36:
                    70:01:62:4b:c9:a8:75:67:2d:cf:9e:5b:00:a9:c0:
                    e5:93:7a:70:0c:02:e3:93:a4:3c:62:9c:b1:55:9e:
                    31:43:e8:ff:83:f0:f3:f9:95:06:23:9b:e7:4c:6c:
                    24:72:4c:a2:f0:d4:c5:31:b6:f0:a4:33:32:b0:54:
                    d4:a0:36:52:69:a0:91:a1:7f:fe:12:ae:37:cc:e4:
                    d8:24:32:f8:a2:af:60:f6:ad:b9:8c:bd:6a:ec:af:
                    54:60:79:3d:41:40:8a:8f:2d:2c:ea:15:ef:91:65:
                    73:a3:c4:bf:53:90:08:1e:4c:ca:77:f8:2d:f3:66:
                    39:74:95:72:10:d8:15:aa:79:bd:5d:f3:53:e1:fa:
                    f5:93:6b:3e:3a:d7:b4:27:08:fc:50:b1:23:05:53:
                    6d:12:fb:e0:b4:69:f0:6a:a3:6f:52:56:47:29:c1:
                    0b:db:77:78:b5:49:b2:a8:d2:52:70:fa:3d:31:1d:
                    40:3a:98:67:ad:eb:02:2d:54:be:a2:ed:06:69:77:
                    01:1c:d2:a7:b3:4b:9e:00:2f:3e:7a:2e:17:2b:94:
                    c5:55:a3:15:a6:34:10:c0:c4:b9:a1:8a:2c:27:24:
                    e6:61:39:34:da:31:5d:30:7a:03:f6:fa:8d:2d:72:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:B9:67:53:F8:EA:F9:80:4C:7A:51:F8:C4:87:B6:89:A8:00:01
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:27:65:a5:62:6d:8e:03:d6:a2:68:b9:46:b9:43:01:6e:
         4d:ad:de:b6:1b:b1:a9:a1:96:60:a4:15:ca:ac:f5:6c:9c:a0:
         9a:98:d7:84:3b:7d:0f:e6:8b:f9:e7:a1:05:01:e6:59:72:38:
         ab:2f:7e:2d:83:c8:08:c0:8f:55:65:50:30:0b:4e:8f:93:35:
         85:65:f4:ad:c4:52:02:6f:ca:73:6c:48:48:18:f9:70:e0:a7:
         ba:b3:99:d4:28:ee:16:c7:13:1f:9b:4d:c9:1d:bc:17:5a:19:
         b8:97:79:dd:1a:14:05:94:d0:86:91:c4:f4:b2:6a:bc:1e:af:
         cc:1c:cf:a3:9d:f2:17:07:dc:ad:af:64:23:bb:e5:de:66:ee:
         ac:b0:59:00:60:26:06:8e:a3:2c:ed:2d:7d:7d:de:37:08:83:
         eb:c1:15:15:7a:b6:f6:f5:4f:d0:49:af:5b:fe:ca:b2:1d:8a:
         da:20:d0:91:b2:84:c6:35:67:1c:1a:62:ad:65:10:e7:af:8d:
         da:0f:c3:e7:fd:74:6f:db:91:25:4e:93:d1:65:f1:96:f7:f6:
         e0:e3:6c:c0:65:31:ee:92:31:97:50:a3:3f:59:0c:eb:e6:0f:
         c2:f7:0d:82:62:14:e8:a0:a4:82:b2:a3:e9:2c:91:20:b4:b3:
         09:53:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:13 2025 by rpki-client