Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          woo+dKHWeQxxVV63tLfOfaBK22IsJJG5QLT8thgdRFY=
Subject key identifier:   9D:78:B0:48:F7:6E:62:80:50:16:D3:3B:30:5B:3B:AB:D4:A3:CF:8F
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          08CE
Signing time:             Sat 28 Jun 2025 20:09:38 +0000
Manifest this update:     Sat 28 Jun 2025 20:09:38 +0000
Manifest next update:     Sat 05 Jul 2025 20:09:38 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: hfgCYML/ufMl0YM6I+mM7fPc2vG5C3/wVhNJdtWBOdI=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: f8jut1BjubAtyXtCTXzr4YjM1IoW+OqJ6ONFoVgC57s=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: e87UO/bBM1qotzcb+px968JO8+qdT33ozHUSLg/50Ao=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: oQXY2oaPmh/e06H6CcARZA2+TLztnodxvYW6Bm4bXO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Jun 28 20:09:38 2025 GMT
            Not After : Jul  5 20:09:38 2025 GMT
        Subject: CN=68604c02-55a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:72:60:00:27:15:85:d9:bd:dc:94:13:8c:
                    1e:d9:bc:e7:57:4e:e5:55:c3:73:18:9e:21:28:de:
                    a3:43:03:f7:fb:51:f7:04:39:44:ad:ed:bd:ee:01:
                    e1:db:76:7c:55:05:37:b5:ee:79:5a:ee:62:66:cc:
                    1c:b2:81:83:14:98:06:53:c8:89:9a:6a:66:a0:8f:
                    51:81:21:ba:be:0a:30:9c:25:da:f5:ee:6d:19:d2:
                    71:e9:59:29:10:2c:55:af:29:27:50:f2:00:ee:6a:
                    62:e7:6f:ef:00:cf:91:11:af:23:b2:c4:30:5e:35:
                    0b:23:0c:84:89:81:7a:a3:09:e2:cb:a8:35:94:88:
                    c0:ec:ac:36:6c:93:ff:36:46:75:ae:f6:79:de:db:
                    f2:17:3d:4e:93:c0:70:70:1c:93:47:2f:de:b3:2e:
                    cb:ef:30:68:a1:98:91:9e:d0:dc:b4:c5:0a:d8:88:
                    a8:3c:63:fe:0c:8d:f0:0e:69:8f:61:bc:d5:92:ab:
                    28:ad:16:dc:f8:7c:b0:d7:40:9d:3d:09:46:d5:32:
                    66:f5:ed:db:95:18:08:4d:97:c3:5c:ee:f3:9d:3e:
                    08:74:0c:3c:7d:bf:17:6d:af:95:4d:bf:11:b0:21:
                    a8:61:65:73:9e:c4:3e:82:8a:be:0b:60:88:d4:60:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:B0:48:F7:6E:62:80:50:16:D3:3B:30:5B:3B:AB:D4:A3:CF:8F
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:ed:53:4b:57:bf:62:4c:ac:e7:a0:2d:ee:d8:a7:a9:41:
         33:f1:76:65:b1:d4:ee:1b:22:c3:7b:6c:27:6c:54:6e:07:39:
         39:5c:92:21:2a:36:61:f2:14:2d:a2:34:81:0f:97:ee:1e:85:
         d0:66:16:39:ba:d5:80:fe:8b:eb:71:a5:36:50:f4:57:5b:4b:
         e1:a2:44:72:6b:d7:44:be:36:db:94:d3:e3:f2:c7:2f:47:b4:
         e0:19:b7:5f:5e:d3:9f:fe:93:07:df:20:8f:f1:5a:19:2d:04:
         a9:e1:ef:01:ab:eb:8c:17:35:58:8d:57:8f:00:fb:c9:5f:4b:
         cc:80:a1:06:21:28:de:be:a4:5e:ba:a1:f1:95:1f:8e:5d:38:
         97:29:2f:88:64:6a:c8:88:10:f2:e7:6a:e0:bb:12:11:95:70:
         27:f9:32:03:f2:ea:fa:0d:cb:1d:45:01:0d:6c:27:9f:d5:38:
         e3:cf:84:cd:cb:8e:d6:e1:d4:ef:8d:26:4d:9a:3b:a9:91:f0:
         72:d8:0d:a8:75:cd:84:c9:9a:6f:f1:c6:76:8a:3b:10:0c:ec:
         f2:df:25:7d:b7:ef:66:2b:8b:f5:a6:af:1c:89:1d:42:b9:ab:
         89:d8:1f:18:9e:0b:a3:67:e7:c6:23:ad:05:df:59:2f:6f:b3:
         10:70:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:19:39 2025 by rpki-client