Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          jSRdXr+BuqRNd9Ay3W781moTVK9G20eTMKntLZNQob4=
Subject key identifier:   FA:AE:02:B7:D5:C9:71:CE:0B:EF:5D:FF:82:71:C2:1B:42:10:F3:FE
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          06D1
Signing time:             Sat 28 Jun 2025 21:43:08 +0000
Manifest this update:     Sat 28 Jun 2025 21:43:08 +0000
Manifest next update:     Sat 05 Jul 2025 21:43:08 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: 8/78y15+WZNnJjMVroHKdtKc0Xlf3NfwDttK53snR2E=)
                          2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: dsXz2lfcHryblqx1Ukw1H9WGMnpRDnzyM9OTmUgJl/0=)
                          3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
                          4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: 6R33YrxpQxTL0tryG4KL8AOz8hxoPlF0ceIkKdbUGro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Jun 28 21:43:08 2025 GMT
            Not After : Jul  5 21:43:08 2025 GMT
        Subject: CN=686061ec-febf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:8f:15:35:22:2b:1b:0e:3c:92:31:2b:d2:
                    87:fa:11:b6:28:d5:7e:e7:35:15:8d:51:83:25:23:
                    6b:50:e9:36:bf:3e:ba:fe:97:e0:a2:e0:7a:7c:d2:
                    3b:90:c2:17:70:79:13:9a:c9:df:50:48:de:a8:48:
                    d0:22:d7:74:54:43:2b:b3:e4:62:ca:4c:1e:6a:1e:
                    79:e4:6e:3f:bb:6b:42:ca:30:60:17:e6:d2:52:0f:
                    c1:71:70:4e:18:98:4a:c1:dd:33:4e:36:5e:02:52:
                    d1:a2:6b:ae:81:e6:03:1e:3e:32:ec:84:65:72:5a:
                    88:5c:f8:84:56:b6:71:8c:bf:e0:ae:d5:08:67:ba:
                    e8:2d:3f:0b:de:eb:e9:cd:3e:55:d0:99:74:4d:49:
                    bd:35:77:31:01:b7:33:e2:84:59:3c:97:8c:f6:29:
                    1a:b3:ca:f6:62:42:10:a1:5b:a9:7b:06:e4:e8:6d:
                    7b:47:4b:56:b1:6f:8b:6b:64:d9:62:f1:b5:8b:b9:
                    88:e6:75:0a:0f:40:1b:bb:cb:e5:86:dc:ad:dc:18:
                    f9:13:4a:72:7c:09:a6:02:d8:95:59:a4:e0:3e:c4:
                    c2:73:2c:3a:cc:fc:6d:77:f1:3a:ae:7b:90:16:1f:
                    70:c0:74:e8:e7:88:fb:bf:87:7a:6e:73:7b:10:c2:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:02:B7:D5:C9:71:CE:0B:EF:5D:FF:82:71:C2:1B:42:10:F3:FE
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f3:77:ad:81:08:d5:38:c1:20:eb:13:fd:42:3d:70:b7:0d:
         df:ee:de:7e:84:bc:e7:c9:df:0f:6c:9f:87:85:21:43:61:1b:
         62:3d:f2:91:3f:00:33:83:48:91:72:61:11:da:63:5f:84:f4:
         8b:f1:34:a9:99:fb:06:b1:f9:19:02:2f:a0:1a:5a:e4:bd:81:
         01:f1:b8:d0:7f:cc:44:5f:8f:b9:d4:d6:ae:13:c5:f0:db:a4:
         16:a5:f6:b4:f3:62:a1:7b:70:11:5f:45:39:44:ae:36:0e:cc:
         72:3c:db:97:ff:96:38:53:5e:9a:c4:2d:a5:69:fa:3e:52:54:
         c3:92:7f:b2:38:ae:aa:50:67:24:95:72:1b:ba:da:5e:50:09:
         3e:54:89:bd:25:48:f6:c5:cf:ba:e0:31:26:d9:28:94:c9:b9:
         4d:28:6b:17:7c:5e:bd:07:bc:ef:12:5d:20:d1:ed:c0:6f:fc:
         9c:4e:ef:d0:59:e5:43:97:08:30:e3:00:84:4a:fb:6f:6b:f4:
         d6:be:49:1a:bb:69:29:14:6a:e0:d7:5b:5f:5b:8b:4c:1d:09:
         c1:56:ad:e3:80:69:c6:74:c0:42:d0:9d:1f:a6:f7:ce:c2:90:
         09:66:75:6e:1c:0f:a3:4d:24:72:17:e5:a1:1c:b7:b1:30:99:
         f7:63:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:43:46 2025 by rpki-client