Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          rX1kmdnbn2YHg73NMgfJmwZryHpaDQ+nCSDu2nlC5mY=
Subject key identifier:   9F:3D:C4:94:74:70:33:67:FC:C3:2F:4A:55:64:D2:C9:B2:42:CD:7F
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       06C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          06B5
Signing time:             Thu 08 May 2025 21:59:08 +0000
Manifest this update:     Thu 08 May 2025 21:59:07 +0000
Manifest next update:     Thu 15 May 2025 21:59:07 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: C4AAHAGDB2D8pVFO3vMs1S6QK5cfZWVWXSa5YQJ0NVw=)
                          2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: DKHDOAj7+AXAvfjvZlh+voUSgeSh4L2VBg+pbuzzE70=)
                          3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: HPFeGwKq86ZcwbWrB7sqcvfz9Xbe89k8mMFhGyrTd2o=)
                          4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: OSo59yjptase6UYWjPMVEsoK3BFfSOe7jd8A1zwV3Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 21:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: May  8 21:59:07 2025 GMT
            Not After : May 15 21:59:07 2025 GMT
        Subject: CN=681d292c-fe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:9c:b4:d0:6c:f9:2f:ee:1e:91:67:03:5d:
                    e0:b5:59:80:bf:bb:fa:15:a3:72:e5:fa:86:18:ca:
                    32:01:1a:84:d0:5f:82:80:78:ee:78:59:62:c9:51:
                    ea:61:4f:62:40:5f:78:de:ed:67:9a:39:9a:af:f7:
                    b0:d2:8e:37:6e:dd:d6:86:d7:fd:82:04:f2:8e:09:
                    2c:2e:3a:08:f9:32:37:d6:ea:7d:f2:ed:67:35:05:
                    c5:b7:5e:03:e4:50:e5:f3:de:a4:06:71:0f:f6:c7:
                    0e:f4:d3:0d:44:51:b3:2d:72:45:38:96:1d:fb:ab:
                    77:ba:30:4a:31:4b:40:25:e3:33:64:82:ce:e3:97:
                    c9:bf:b1:e4:f3:84:2e:b1:d1:9b:74:70:54:7e:31:
                    1f:dd:05:04:fd:69:17:db:fa:8e:76:bd:bd:54:74:
                    9c:c9:75:1e:be:82:b0:b8:1a:30:61:00:27:95:3e:
                    57:19:1d:f0:03:69:56:e1:02:55:f8:cc:77:90:9b:
                    dd:14:bf:82:c6:e9:1c:f2:2b:a5:f7:36:98:ee:f3:
                    f7:4e:f5:73:c3:a3:fc:ec:8f:79:32:8f:19:22:52:
                    a9:6e:a4:cd:9a:4a:41:a5:a4:74:6d:cf:a3:73:fa:
                    2a:d7:80:87:ed:e1:b2:21:6e:2c:01:ee:0f:54:fe:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3D:C4:94:74:70:33:67:FC:C3:2F:4A:55:64:D2:C9:B2:42:CD:7F
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:3c:6d:3e:ff:c6:15:10:fe:49:30:b2:28:f2:a2:9d:0a:
         77:50:77:c1:ea:0c:bc:14:48:4c:26:26:94:8c:5c:ae:c6:dc:
         dd:5a:6e:0f:90:97:46:0e:00:b9:2f:69:88:68:05:4d:46:85:
         b4:3d:01:6f:9e:5e:a5:69:c3:29:5e:d5:c0:a9:5e:9e:4f:a2:
         c2:b1:23:60:f5:f0:9f:2d:54:55:8e:a9:0e:ca:30:6f:59:35:
         87:cd:63:15:60:d0:94:4b:b5:4a:1c:ae:1c:8b:46:9f:0a:8a:
         b4:0b:33:21:64:5e:9f:6f:4f:3d:ba:ad:61:5b:f3:13:03:4e:
         97:e4:87:61:1f:a0:8f:ff:b3:14:0e:c1:a0:38:8c:5a:d2:f9:
         19:a9:e8:3b:e8:db:ef:e2:13:71:51:b4:c5:d7:51:c1:ae:c2:
         c4:1d:5b:cd:ba:5e:bd:81:b9:f8:79:21:b6:91:b2:8a:c3:df:
         38:11:d7:d8:56:a1:09:e0:fe:7c:33:d0:a9:66:e6:b2:d7:7a:
         a0:8c:56:a4:07:d8:f5:1a:8f:3e:c4:ba:a0:ca:49:69:e6:1b:
         4e:d7:bd:ef:c1:21:bd:22:a4:fd:ee:f5:a1:af:20:96:53:8f:
         88:a5:a8:66:37:ff:21:92:39:e9:94:35:e9:9b:b1:b6:4a:55:
         53:c8:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:12:38 2025 by rpki-client