Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
File:                     t45_48stS1oeuSimkLxled-IG-k.mft (raw, json)
Hash identifier:          zKsO+sTbUq6kBjCEtJxwcu6WU6FHsa/rUAzd7eHARBI=
Subject key identifier:   7A:FC:3B:7E:98:7C:9D:FD:3F:2E:35:12:2C:A4:31:37:7E:A0:67:BE
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Certificate issuer:       /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
Manifest number:          D6
Signing time:             Thu 03 Jul 2025 05:48:04 +0000
Manifest this update:     Thu 03 Jul 2025 05:48:04 +0000
Manifest next update:     Thu 10 Jul 2025 05:48:04 +0000
Files and hashes:         1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: CEUNpgijbX3MPDgTLi60U9H2Xbpe5guYpv48aCKlroY=)
                          2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
        Validity
            Not Before: Jul  3 05:48:04 2025 GMT
            Not After : Jul 10 05:48:04 2025 GMT
        Subject: CN=68661994-b8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:15:92:e2:93:1b:f6:ca:da:57:43:ad:5b:
                    19:47:dd:fd:93:12:2f:d4:95:9d:4f:7e:fa:42:77:
                    1f:28:73:1e:4b:35:07:20:94:90:58:33:21:ee:4d:
                    55:a1:d6:68:6d:ee:d1:fd:b0:6c:18:a9:3f:d3:29:
                    aa:51:e5:76:ae:db:72:61:34:92:6d:50:91:d6:d2:
                    7b:6c:4d:12:41:c2:fd:9f:79:8a:48:c8:ae:05:79:
                    6a:80:34:ff:4f:86:ca:ad:b2:0c:c2:0e:7b:9c:98:
                    c9:59:25:2e:36:3d:cf:ae:3d:c2:64:73:62:78:0e:
                    e8:8b:1d:4e:91:e6:6a:eb:17:45:28:8b:b8:62:a0:
                    31:7e:85:3f:f0:44:ec:59:3e:a3:13:49:8e:69:e5:
                    d5:c5:fa:70:00:77:ec:02:19:71:52:d5:75:d7:af:
                    03:9d:1c:66:0f:18:5a:5d:2d:b7:9d:15:7a:b1:98:
                    9d:b4:3e:f8:70:03:bb:df:c1:86:b3:63:da:0d:28:
                    76:09:65:af:b0:05:a2:46:fe:f2:0b:5d:28:c9:66:
                    7a:f3:64:4f:a7:3d:8a:72:b7:d4:63:d1:4f:5a:85:
                    28:a4:97:f9:23:dc:21:ca:6b:7e:7e:e0:28:07:86:
                    75:5b:9d:25:c6:6d:68:93:67:b8:54:67:0c:47:7b:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FC:3B:7E:98:7C:9D:FD:3F:2E:35:12:2C:A4:31:37:7E:A0:67:BE
            X509v3 Authority Key Identifier:
                keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:99:d1:13:b7:19:c6:08:2a:c9:8c:2a:1d:ef:b1:18:ff:
         80:90:f1:27:78:89:11:0a:c5:d8:ec:b9:62:f4:13:13:47:31:
         81:b1:6e:5c:f3:6d:e3:dc:28:cc:2b:bd:27:9c:1c:f6:1a:31:
         a8:c3:3f:35:4f:26:8e:aa:d1:c4:37:d5:36:16:62:76:33:33:
         ab:1a:6b:78:d1:06:80:5a:39:b0:c5:74:a9:0a:3d:49:da:4e:
         a4:74:39:a2:27:03:b4:d5:fd:fb:12:5f:83:34:66:fb:a0:9d:
         91:11:8b:00:e7:ae:7e:be:15:af:2c:5c:26:d0:28:dc:89:b9:
         d9:a0:6e:38:e2:40:fd:35:bd:82:fd:05:fb:a3:77:d1:a4:b7:
         7b:6e:3f:b2:0a:2f:bc:62:9d:33:df:e3:66:61:ad:20:31:89:
         e7:3d:77:06:1d:f9:32:28:30:df:3f:69:21:26:99:25:80:c0:
         24:a3:3b:e0:fc:1f:a8:5b:a6:ab:f6:c3:66:7b:89:6f:55:6a:
         bf:ce:3b:60:f4:61:85:2d:9a:87:71:29:d4:39:2f:8a:db:06:
         8c:87:5d:52:59:f1:d0:a4:81:3f:28:6c:dc:6d:fc:e4:78:6d:
         fe:23:b4:25:45:66:7d:56:0b:1d:67:8b:ef:22:ae:9b:7e:bc:
         90:f1:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:07:47 2025 by rpki-client