Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          ShL0tGQwF/3lPoOsJPDYSiyYGpDoDqYwixpUGj1S/eg=
Subject key identifier:   50:3C:A9:86:95:F0:8A:C4:E8:8C:46:5A:FF:F7:03:8D:AE:30:CE:E6
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0609
Signing time:             Fri 22 Aug 2025 23:06:53 +0000
Manifest this update:     Fri 22 Aug 2025 23:06:52 +0000
Manifest next update:     Fri 29 Aug 2025 23:06:52 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: 09rkTymuRvHpu2+9nWTrjlv6ITDDkPt4G9gj08qMIEg=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Aug 22 23:06:52 2025 GMT
            Not After : Aug 29 23:06:52 2025 GMT
        Subject: CN=68a8f80d-4cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:a8:b6:04:8d:d4:45:84:ca:5a:78:0b:e7:
                    79:3c:85:d7:ef:2b:8c:8c:28:5f:90:f7:5b:cf:a7:
                    0c:80:56:bc:a0:a9:d9:58:df:9e:b8:6e:1b:50:8c:
                    03:72:dd:3a:d2:e6:f6:f2:29:a2:89:db:72:0c:92:
                    21:24:35:66:a4:2c:dd:ff:f3:44:18:1d:8e:42:8b:
                    dc:68:df:d2:16:3b:de:d0:0e:35:86:7d:4d:5a:d5:
                    7b:ef:28:cb:e4:0b:bc:29:92:1c:bd:66:97:b0:31:
                    8f:69:29:7a:19:87:21:0f:a7:dd:c9:6d:da:6d:09:
                    4d:c1:28:2e:99:66:bd:de:e3:ef:00:68:09:d1:bf:
                    d5:87:1c:84:a6:3e:34:35:5b:00:77:b4:0f:f4:c1:
                    af:40:81:60:1b:b0:0b:9b:30:1d:dc:e6:d8:58:83:
                    08:b1:a1:04:ae:d1:ae:0c:21:05:51:69:1c:9d:a1:
                    85:e3:2c:0b:2c:d2:70:38:ed:62:82:e6:59:e2:88:
                    90:41:67:7e:70:ce:45:00:fe:ef:4a:ac:a1:9d:19:
                    ae:b2:64:8b:6a:bc:74:7b:02:2b:df:94:a9:5c:db:
                    ef:82:f9:ca:5f:d7:c2:d9:d9:b4:6a:7e:6b:99:c4:
                    be:aa:07:50:6f:e3:7b:53:ec:a0:94:77:12:4c:41:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:A9:86:95:F0:8A:C4:E8:8C:46:5A:FF:F7:03:8D:AE:30:CE:E6
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:c0:fd:cb:ca:01:11:8a:50:3e:0d:1f:88:8f:a0:26:17:
         9b:54:58:5f:ca:0a:b4:5a:70:81:d7:06:4e:0b:80:1f:08:9d:
         4b:ad:8d:c4:3a:d9:1b:23:8a:f9:54:49:87:a5:d9:1e:05:23:
         65:c0:8e:b9:af:fc:e1:7a:1c:29:89:d6:a3:cf:0d:d6:e9:84:
         a0:55:bf:47:90:e6:c7:98:5f:11:dd:e3:86:71:bc:bd:aa:03:
         e7:7a:cd:da:e0:3f:4d:f8:e6:b2:12:c2:8e:7d:7d:73:ac:2c:
         ce:49:03:68:44:0a:56:c5:1d:66:d8:85:8b:24:9a:96:72:05:
         7f:13:4a:97:c3:84:42:59:39:91:dd:11:ee:25:bb:60:49:7b:
         ab:83:78:82:90:28:0e:93:a6:3d:64:c1:e9:02:72:30:d6:de:
         a7:d2:24:2e:a4:3b:c8:7d:22:bc:5a:12:63:fe:14:b5:cc:cb:
         eb:ff:44:5d:6a:75:ec:28:c3:bc:79:f6:a3:e4:69:52:3b:91:
         a8:27:44:66:28:42:fe:81:f8:d5:ff:8a:80:ac:af:30:24:43:
         b8:c1:67:f3:a1:fa:3a:41:b6:21:3c:77:99:b3:69:f7:bb:95:
         9e:38:86:26:c9:02:81:bb:39:40:cd:aa:5c:38:cc:1c:f6:e8:
         bb:39:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:38 2025 by rpki-client