Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          VOXYt8mjzv7g5dcRuaFQe25gd5uIHWNjkmYdRkYO0No=
Subject key identifier:   C8:B3:9F:65:25:B9:70:29:D7:1F:97:3A:B1:C1:69:25:85:53:91:30
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          153E
Signing time:             Sun 10 Aug 2025 17:56:34 +0000
Manifest this update:     Sun 10 Aug 2025 17:56:33 +0000
Manifest next update:     Sun 17 Aug 2025 17:56:33 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: tDBD/ODpNMfjvkG10ncYGBytZxrnvUsYOa1zONNVXqk=)
                          2: 524CFDB27C1111EFBFC7363AC4F9AE02.roa (hash: 5DWEXQIFBs195YUI1poQcrXKWXLS8W3OpiwQSBqSWIA=)
                          3: F6C5480A7C1011EF97676539C4F9AE02.roa (hash: fPzznFHrH41Cu7PATVjc5p4RFmjIGfaJ8ZyhknBJH2I=)
                          4: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: WTDIuE/G1qrkGu3PYWOTs1bHaZxHX8fxTlZEa1gE7Ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Aug 10 17:56:33 2025 GMT
            Not After : Aug 17 17:56:33 2025 GMT
        Subject: CN=6898dd52-6b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:3b:31:6b:32:67:d5:8c:91:3c:7a:a4:e5:
                    9b:36:f5:a1:fb:aa:f9:57:6f:d2:91:30:28:43:11:
                    9d:70:d9:23:84:03:67:7d:71:48:0e:59:34:02:90:
                    f5:48:c1:f5:b5:7f:7a:32:d2:62:57:e6:54:e0:02:
                    4f:61:6e:07:8d:ee:4a:d1:6b:be:fc:78:3b:21:d7:
                    66:4b:7a:c7:a7:c6:7d:ba:d8:df:1d:db:1c:a2:69:
                    e6:b9:41:a8:3e:d6:ac:22:3f:97:16:74:b9:16:ed:
                    bc:2d:8a:26:0c:51:a1:e6:33:6d:66:6d:d8:3d:89:
                    0a:56:e1:b6:42:cb:9d:c8:1a:55:99:2e:d7:92:82:
                    97:87:bc:cf:9c:7f:77:a3:ae:0e:ba:9f:fa:37:aa:
                    b1:75:40:56:5f:b5:27:29:ae:23:bb:b1:15:fb:03:
                    9d:d9:d9:58:61:29:e3:9d:0d:1b:f4:e6:93:d9:e4:
                    cc:39:f8:d7:9b:86:76:d2:49:71:94:d5:bc:fb:02:
                    1f:5b:ae:c8:22:e3:64:97:da:33:e9:1e:ba:b0:56:
                    fc:a9:a5:27:aa:80:2d:2b:ba:f4:b8:4d:aa:03:cb:
                    fc:e0:45:18:12:88:6b:21:7a:03:79:b2:52:ac:59:
                    20:5a:e8:ba:e2:cf:42:c3:7c:90:3d:1e:e6:4b:3c:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B3:9F:65:25:B9:70:29:D7:1F:97:3A:B1:C1:69:25:85:53:91:30
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3f:7c:99:3e:1b:53:14:96:8b:76:3c:92:57:7d:64:ca:4e:
         76:ae:7a:a5:7b:6d:18:35:4e:e8:11:23:1b:73:4f:c6:99:35:
         4c:6d:f7:09:22:29:fc:ba:26:46:13:77:6c:48:e8:18:b6:fd:
         15:84:9e:a5:62:74:8c:f8:f6:2b:ee:c9:e2:40:37:40:f8:71:
         15:b3:66:ba:ac:1a:25:0f:ff:d6:f6:94:39:c1:02:fe:25:e2:
         33:bf:00:93:98:71:05:3f:6d:46:93:2d:4d:cd:ff:34:27:18:
         f4:c8:43:6c:71:31:f5:e6:4d:2e:26:b7:df:84:37:93:25:51:
         ba:92:3d:84:54:b2:02:e4:00:a4:cd:a6:b4:5e:6e:d4:ec:07:
         b6:ba:06:24:54:55:69:e1:1a:df:65:2a:3d:3c:99:82:1c:9c:
         71:73:2c:85:d5:a3:63:52:13:e4:e2:db:e8:e9:3d:2c:f4:41:
         03:4a:51:54:25:28:1b:22:ce:cb:12:48:8e:3c:e7:5a:01:26:
         fe:d2:c3:69:df:26:2a:05:fd:d4:34:7e:d5:79:f1:80:27:24:
         02:b5:67:ef:ee:b7:53:9d:2d:5b:a1:d2:26:4f:24:a3:02:a6:
         be:81:e3:86:0a:c8:a2:c7:14:a7:f5:7b:6a:d6:5e:68:0a:18:
         9c:83:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:20 2025 by rpki-client