Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          YrIJVqXuO/UnqigUOTtu63IZ0e6mKQaVxY2xRZOudjE=
Subject key identifier:   BE:48:51:76:08:6E:97:25:62:61:73:96:92:68:07:4F:DA:AC:CC:32
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0190
Signing time:             Sun 29 Jun 2025 02:36:17 +0000
Manifest this update:     Sun 29 Jun 2025 02:36:17 +0000
Manifest next update:     Sun 06 Jul 2025 02:36:17 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: EmyjDtF8MDBg4bkPwAlEjGxQuzROx5iYLLeRP0wQJiI=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Jun 29 02:36:17 2025 GMT
            Not After : Jul  6 02:36:17 2025 GMT
        Subject: CN=6860a6a1-0fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:1f:13:e0:a6:a6:80:8d:12:88:4c:4e:17:
                    c5:6d:78:1e:83:ce:9c:56:de:2a:57:a1:13:35:c6:
                    b8:be:b3:d0:c1:ab:7d:2e:43:a8:87:9c:76:52:35:
                    58:46:8b:c5:e5:e2:d0:21:ca:e5:4d:37:41:e9:93:
                    5e:90:95:06:f2:8f:8c:fa:98:4c:f6:a5:a8:37:52:
                    b1:21:82:e6:7f:75:ef:35:b8:ba:74:64:dc:2a:e4:
                    92:f1:84:f9:99:5d:33:6c:0b:01:f6:87:6f:69:93:
                    1a:5b:32:3f:bb:2e:e2:8b:46:0d:d3:5e:34:a9:87:
                    0e:b8:0f:54:0c:74:ee:d5:f2:c4:e8:15:ab:72:73:
                    1b:c6:a3:80:11:76:79:e2:eb:5b:ae:22:a5:53:6f:
                    e3:34:e6:d8:1b:c2:b7:48:19:7b:1d:d6:3b:8b:a5:
                    04:a1:ce:6c:d1:2b:0e:a7:9a:30:d6:a5:20:29:27:
                    20:94:af:6d:79:a1:a6:03:6b:53:72:bd:55:cc:cb:
                    df:d6:d6:ee:bb:9c:c7:68:c5:c0:3a:0d:b6:f2:38:
                    1c:95:7c:fe:e0:e3:b4:9d:86:fc:c4:84:ed:81:a0:
                    a4:66:1f:7c:97:b0:a5:a1:fc:ee:50:a4:4d:37:ec:
                    8f:0a:c8:55:a3:92:04:fb:c8:1e:6a:1e:94:3f:06:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:51:76:08:6E:97:25:62:61:73:96:92:68:07:4F:DA:AC:CC:32
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:3b:92:ec:03:f9:dc:95:68:20:9b:5d:4f:71:1f:a5:bf:e7:
         46:d6:73:85:e4:4f:e1:6c:38:d6:d9:b8:25:11:b3:64:4b:f2:
         1f:ef:00:62:59:14:56:e8:22:0b:dd:8a:b6:e5:86:59:d0:fa:
         d2:f6:40:1d:e5:4c:0b:5d:4e:b5:db:cc:e1:9d:5e:b5:5d:68:
         f7:3b:8d:5f:60:8a:17:d3:70:d9:2b:90:be:ed:40:56:4f:43:
         ca:f0:07:26:56:68:02:19:43:63:0b:2a:c5:3e:5f:3f:15:82:
         f9:f0:ef:e6:54:cd:cf:83:06:26:30:fc:b7:17:b7:e2:79:78:
         d2:02:7d:46:cf:35:50:ba:c2:ab:74:c7:3a:a4:ce:5e:70:f4:
         92:09:3d:21:2c:d9:96:4c:4c:f4:b0:c7:74:5b:58:4f:fe:1f:
         0e:0b:a2:d6:c0:34:ee:8f:59:5b:6e:ad:8d:50:51:85:00:cb:
         32:ed:9d:e9:2c:78:08:b6:96:b8:ed:8c:53:76:5f:08:9c:28:
         87:f3:c7:35:58:65:76:27:06:45:f2:6a:9c:d4:ef:1a:a3:7f:
         59:15:dc:29:23:06:57:a4:ea:b1:86:2c:3a:13:7d:83:7c:2a:
         69:7d:41:2f:1f:22:a4:83:83:b9:82:c6:a3:45:d8:9f:9e:49:
         0c:2b:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:21:13 2025 by rpki-client