Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
File:                     S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json)
Hash identifier:          tDNja0dbAM2n4C+HFQNilZegP5y0mIVmUvlY7W/R3JU=
Subject key identifier:   82:91:C9:9A:8E:F7:6B:E9:64:FF:56:DC:CE:23:F8:0D:4D:6D:CF:0A
Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7
Certificate issuer:       /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
Manifest number:          10
Signing time:             Thu 19 Jun 2025 07:27:54 +0000
Manifest this update:     Thu 19 Jun 2025 07:27:53 +0000
Manifest next update:     Thu 26 Jun 2025 07:27:53 +0000
Files and hashes:         1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: ljqAXnKSuT8MkWYVa35rhAeyP6m6TgOSvJMAd1VQbiY=)
                          2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl
                          rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 07:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
        Validity
            Not Before: Jun 19 07:27:53 2025 GMT
            Not After : Jun 26 07:27:53 2025 GMT
        Subject: CN=6853bbfa-3f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:b2:11:19:22:a5:c9:e2:8d:db:70:94:b6:
                    ce:13:4e:18:66:98:04:22:6a:fa:d3:93:b7:36:e7:
                    0b:ec:42:e4:8d:f5:9e:07:6d:40:3e:ce:53:91:c4:
                    87:d5:2b:df:e6:68:ff:3c:89:ab:9b:8a:38:7b:25:
                    d1:63:ba:b8:02:db:80:4b:5a:ae:1b:ce:6b:4d:83:
                    4e:78:27:2f:90:47:1a:48:02:16:36:7e:15:0e:9e:
                    81:e8:8c:f2:62:ce:3e:2a:73:e9:7f:84:da:ee:48:
                    50:58:aa:bf:7a:4f:59:33:e8:77:eb:a0:a3:29:70:
                    52:e2:d4:42:10:a9:d9:d2:7c:cf:de:00:e0:6e:b6:
                    9d:4d:3a:91:73:a0:db:a7:3e:f4:ec:f4:62:61:a4:
                    5b:f5:b1:b9:10:42:71:90:96:78:db:b5:22:25:5d:
                    37:49:4d:34:77:8e:fb:0b:c3:5f:b9:c6:b2:22:56:
                    d3:1e:6a:7a:49:8a:e9:66:f1:ac:a9:b1:9d:8e:b0:
                    51:85:d5:e1:09:f6:88:04:f5:6a:de:5b:4f:f5:d3:
                    a1:4d:1e:00:67:08:c0:29:78:87:40:18:7d:da:8f:
                    e8:b5:2e:49:01:c3:e3:2a:ca:92:4a:b7:14:8d:c3:
                    e0:0b:2f:1f:2c:ef:b4:75:57:14:a1:eb:4d:db:19:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:91:C9:9A:8E:F7:6B:E9:64:FF:56:DC:CE:23:F8:0D:4D:6D:CF:0A
            X509v3 Authority Key Identifier:
                keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:96:27:46:e1:43:fa:23:8c:9c:de:66:5e:06:48:19:58:
         11:d0:47:6c:ab:e3:c9:2a:19:ea:d5:fb:6c:8b:45:70:f4:20:
         33:36:e5:b5:ad:6a:da:70:f8:fa:21:63:47:4d:30:f2:89:e6:
         c0:f4:40:cc:c4:ad:d9:8b:8d:80:cd:1d:9c:7d:a4:84:29:53:
         d8:64:c0:b6:33:32:9b:29:33:a4:bf:47:e2:04:45:54:9e:e6:
         d2:cb:1e:37:10:97:bd:02:53:4d:bd:7b:7f:f9:42:f5:45:be:
         80:4b:04:9b:84:50:f2:af:8c:90:a4:6f:93:1b:10:b6:1c:ec:
         57:36:87:8c:f4:d9:53:50:57:70:be:2b:4b:7f:a3:28:50:ef:
         bc:c1:b6:3b:b6:9d:e3:cd:f8:e3:ee:85:af:7d:ed:7c:73:75:
         aa:35:18:c3:dd:cb:a4:05:61:0d:92:b3:6f:c0:ed:85:d5:dd:
         fb:97:b6:65:5a:9b:9a:2c:47:48:cb:64:62:66:19:b1:7a:5e:
         b3:8b:e9:f0:38:59:73:39:e3:1e:09:67:9b:e3:30:ea:11:b5:
         f8:2a:0a:1b:97:e8:e3:4a:96:04:1b:e6:7f:e4:5a:fb:a0:7a:
         36:1e:06:59:c6:67:04:e7:30:19:35:a1:e5:f6:c1:a5:14:21:
         a6:c2:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:28:25 2025 by rpki-client