Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
File:                     0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json)
Hash identifier:          CNiCH8JNEcPGjjzp48yQAPxa73r5Zjc+3oMoMWsRP2A=
Subject key identifier:   6B:3B:6E:F8:60:56:43:C8:09:FA:19:7A:88:B9:E0:6D:D5:57:60:3A
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Certificate issuer:       /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
Manifest number:          0884
Signing time:             Thu 12 Jun 2025 21:19:03 +0000
Manifest this update:     Thu 12 Jun 2025 21:19:03 +0000
Manifest next update:     Thu 19 Jun 2025 21:19:03 +0000
Files and hashes:         1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: xYCKZlCvRAGstlxtsqbhEz0H9GLNKbTGL3a2MnpWUoY=)
                          2: 5428E56AF53911EEB8A4592AC4F9AE02.roa (hash: V0jvv16GxWWSgYF6je4xv4QElPKOl/7nA+3XTVSMXTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
        Validity
            Not Before: Jun 12 21:19:03 2025 GMT
            Not After : Jun 19 21:19:03 2025 GMT
        Subject: CN=684b4447-fd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:32:fc:3f:9a:1f:eb:6a:9e:5c:03:b6:d0:d6:
                    8a:f1:ea:72:49:89:44:fb:30:92:38:60:91:41:05:
                    d5:85:eb:53:eb:a1:7c:f5:2a:1f:69:7a:1c:e1:87:
                    6d:0c:90:4d:fc:3d:0a:a8:f2:bb:77:ba:c0:92:fd:
                    a5:52:db:0f:3c:76:b5:bb:af:15:5f:c0:39:e0:0d:
                    ad:c1:d0:cc:16:56:13:a4:8f:23:3f:27:ea:7c:29:
                    37:2c:0b:d1:36:68:4f:0d:12:19:17:35:40:36:57:
                    ac:93:76:4d:2a:46:ff:a7:f3:06:59:28:44:b2:55:
                    24:61:1f:1d:9a:de:c6:c2:58:a7:50:c5:b8:69:90:
                    56:0d:29:03:c2:ad:40:52:81:7b:45:48:75:a3:00:
                    98:79:2c:ae:03:13:bb:0e:c0:78:25:d7:2e:5f:73:
                    c8:40:cf:0b:90:63:c6:a3:bd:da:5b:53:30:f0:79:
                    1b:a0:4c:c0:9a:80:a9:3d:e5:33:5d:b0:29:6f:95:
                    67:85:de:f4:e4:2b:1e:e2:3f:1a:da:d9:c4:ae:41:
                    e6:82:98:fd:f6:04:83:8c:9e:4a:6e:bf:39:2a:ef:
                    1c:10:ba:08:95:52:b4:cd:b3:93:2f:21:3d:d9:65:
                    39:a5:79:ca:60:23:80:f9:b8:c5:e1:c6:58:84:12:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:6E:F8:60:56:43:C8:09:FA:19:7A:88:B9:E0:6D:D5:57:60:3A
            X509v3 Authority Key Identifier:
                keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:84:08:0a:45:a3:47:f0:c1:31:2e:23:86:c2:aa:d1:f6:63:
         a6:da:a6:79:51:f6:ae:96:5c:6b:f1:8e:11:19:e1:f6:ad:ec:
         40:92:f9:c5:04:4f:e7:09:15:cc:50:37:33:a5:e1:af:c5:10:
         4d:c0:b9:93:8a:7b:10:d8:b4:93:85:3b:bf:a7:55:ce:f5:dc:
         0a:61:01:b6:a0:15:b3:f9:6b:b9:47:66:29:55:81:b2:20:90:
         3c:ee:a1:82:ae:26:7a:52:34:5e:aa:a6:5e:d2:64:95:0f:c1:
         30:2e:ed:b7:b3:0c:1c:b3:92:83:50:1d:4e:17:0c:76:66:60:
         d7:c8:9a:1e:8a:ed:c5:1c:86:b6:31:04:93:7e:91:6f:3e:cc:
         2f:b8:2d:5a:d7:75:e3:85:82:f3:56:4d:08:14:aa:5b:b8:d4:
         b2:8e:f3:03:9c:de:fa:85:65:a4:f3:87:17:74:5f:94:80:c4:
         c7:89:35:39:c7:8b:16:9d:72:94:02:ae:0d:b2:dd:ad:a7:cc:
         28:ca:e5:24:48:e2:73:45:26:0d:c0:53:62:01:c8:51:15:1b:
         f6:2b:8b:82:0d:05:3f:2c:bd:c5:d1:9d:f9:4c:91:98:3c:71:
         cd:dd:8a:bb:68:2e:6a:84:3f:c3:34:37:dd:a5:58:81:21:74:
         06:d4:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:04 2025 by rpki-client