Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File:                     B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier:          Iiny7MOlNV6PeW/gucxmWlhh6qxX1A7l6eGYaNvRtS0=
Subject key identifier:   15:96:43:2B:E3:8E:F3:2B:F7:01:C2:43:82:C3:05:DB:09:5B:D4:2A
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number:          087B
Signing time:             Fri 22 Aug 2025 20:58:23 +0000
Manifest this update:     Fri 22 Aug 2025 20:58:22 +0000
Manifest next update:     Fri 29 Aug 2025 20:58:22 +0000
Files and hashes:         1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: l5jYYOmJduEPMRl8OcIGEareI4WpPSfcw4GHIsgjwa4=)
                          2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=)
                          3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: E4ey91ujkF/MRIeBzx9ZLQooU0yVAuuvKVrBh8MDQSg=)
                          4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=)
                          5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=)
                          6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: jDHZwFF5yPuG0E/+EVJniBRe11d0Z59ErydSm1FeI2Q=)
                          7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Aug 22 20:58:22 2025 GMT
            Not After : Aug 29 20:58:22 2025 GMT
        Subject: CN=68a8d9ef-e633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:ba:e3:8e:52:00:1a:32:28:50:6b:77:4a:
                    66:88:b9:55:dc:d0:ed:a2:45:5a:f6:32:db:53:c0:
                    0a:24:81:7c:0b:7c:95:00:0f:90:b3:66:76:d7:1e:
                    29:f4:a8:ed:77:58:64:79:ef:62:31:72:9d:c2:44:
                    fb:ae:f3:dc:f0:9d:51:5e:a7:3b:f1:da:81:67:54:
                    7d:25:4e:14:40:39:bb:3b:dd:cb:ee:dc:4f:c6:86:
                    d0:d7:8d:dc:27:2b:5e:b1:fb:8e:ff:e2:e9:42:48:
                    d1:e8:27:a8:a1:ff:4e:7c:0a:a1:e3:61:96:b0:a7:
                    73:f2:82:a2:65:50:f3:38:32:b0:7e:36:a1:5c:b2:
                    2f:59:18:5d:e4:25:e9:41:de:3a:af:cd:55:c9:f7:
                    db:a7:55:18:eb:c2:a0:e8:f0:ef:05:be:49:bb:72:
                    18:8e:3e:80:06:f3:e0:e2:9d:a7:54:de:8b:64:30:
                    35:50:6b:82:5e:92:25:c0:3b:ec:e3:ff:60:70:3d:
                    09:d0:8f:26:38:2a:fc:91:ab:9b:80:43:c8:6e:c2:
                    4f:ab:e3:b7:29:de:48:64:08:8d:5b:04:50:ab:dc:
                    97:e1:86:1f:53:da:91:81:fd:ba:bd:25:90:a3:c5:
                    ab:bd:90:17:92:f4:00:ca:d6:31:78:43:28:bd:27:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:43:2B:E3:8E:F3:2B:F7:01:C2:43:82:C3:05:DB:09:5B:D4:2A
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:55:a5:3e:49:73:60:09:71:9c:f9:40:f7:f3:d5:33:25:
         5d:05:ad:c0:99:f2:1a:61:ea:a9:e9:2f:61:4d:32:9c:f4:29:
         c3:42:de:6b:7d:76:a8:c0:14:c7:8c:cf:22:04:bb:98:b5:8d:
         1f:a6:06:68:2b:1c:4b:25:e6:f0:dc:8d:7d:f6:91:88:7f:e6:
         e3:e7:12:a4:38:50:c5:05:86:f9:d7:23:23:c5:fc:8d:e2:9d:
         43:38:60:10:cc:32:a8:41:19:92:02:b7:71:dc:e3:2e:e5:5e:
         c9:13:13:54:3d:19:ee:68:c3:38:8b:c3:c8:55:dc:9e:b4:39:
         5f:cb:10:d9:46:c9:ba:85:35:4f:2c:85:69:8d:09:f4:c6:cc:
         7e:ad:f0:f0:00:23:21:0d:98:55:c4:98:62:f8:f7:41:11:27:
         59:29:fa:aa:fc:dd:50:b9:c8:c6:1e:3d:99:a0:bd:cc:60:b3:
         8f:27:ab:1a:09:a1:80:16:d2:f8:49:50:8b:6f:00:3c:89:6d:
         89:55:07:a0:ad:c1:d8:15:a6:f7:42:20:ab:4e:c0:4a:ce:9a:
         ab:1d:e2:ae:46:d3:68:25:68:45:6f:12:8e:0a:ae:4e:b8:ff:
         d8:dd:f5:f2:2d:9d:7a:a6:c2:89:58:71:b3:84:58:c0:91:4e:
         74:d4:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:12 2025 by rpki-client