Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File:                     Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier:          4THfyIDXdkvHv7+87+o2kPetVF4+2o0gnX/0R9bDxtA=
Subject key identifier:   52:DE:A0:7F:C4:27:E8:97:2B:B1:AA:7F:71:A5:CD:20:26:C1:BC:E3
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer:       /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial:       1111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number:          10A5
Signing time:             Sat 14 Jun 2025 17:16:31 +0000
Manifest this update:     Sat 14 Jun 2025 17:16:30 +0000
Manifest next update:     Sat 21 Jun 2025 17:16:30 +0000
Files and hashes:         1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: P6R4I0JWMx9nlGuF2Nz74sy0he8NjtUcn0wFtB28h84=)
                          2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=)
                          3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=)
                          4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=)
                          5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=)
                          6: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=)
                          7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=)
                          8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=)
                          9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=)
                          10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=)
                          11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
                          rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4369 (0x1111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
        Validity
            Not Before: Jun 14 17:16:30 2025 GMT
            Not After : Jun 21 17:16:30 2025 GMT
        Subject: CN=684dae6e-34c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:f6:d4:12:d7:fe:8a:2a:b5:6f:8e:b4:7f:
                    07:46:f8:04:84:2c:25:4f:a7:d5:34:31:b5:5d:c8:
                    f3:bb:c7:04:20:08:23:58:87:6b:94:c1:13:3c:86:
                    5c:e6:0a:57:0f:0c:50:1a:60:88:dc:5f:04:b0:04:
                    cb:60:56:c2:08:d1:19:ef:5d:c0:95:43:89:48:ea:
                    cc:d3:32:b9:10:53:81:4f:2d:25:ac:ef:56:40:c5:
                    d6:47:b9:52:59:9a:19:cf:b9:8f:02:e9:21:d2:31:
                    01:87:e7:43:d3:79:41:b5:a4:78:13:51:fa:e6:e6:
                    81:de:76:88:5f:83:3e:2b:55:28:30:6a:b6:44:98:
                    49:70:98:e3:67:60:8e:ce:dc:70:01:ce:6a:5c:0d:
                    39:67:67:40:74:1f:47:4f:78:47:ea:01:7c:b7:ff:
                    24:43:77:03:64:30:dc:ab:06:bf:ae:7b:a9:d7:ba:
                    81:71:c5:27:5b:e7:56:57:f5:03:0f:62:45:e7:e5:
                    7e:9a:d9:18:a6:b6:0f:4d:08:d7:5d:b6:20:0b:4b:
                    95:c9:23:31:e3:a4:3e:39:0d:f7:47:47:e4:6a:0f:
                    72:17:2c:70:b8:07:55:53:39:98:fc:cf:0c:92:3a:
                    67:5d:79:5a:a4:2b:2d:f0:96:e4:ff:9a:ef:5b:4d:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:A0:7F:C4:27:E8:97:2B:B1:AA:7F:71:A5:CD:20:26:C1:BC:E3
            X509v3 Authority Key Identifier:
                keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:05:c9:d6:e1:04:c8:e6:36:c1:cc:9c:13:0b:55:60:61:
         10:6d:ab:e5:ec:df:a7:63:39:b3:fd:b6:7a:34:9a:8a:7c:80:
         c6:bc:38:4c:48:a6:f1:c5:ce:22:fa:47:07:21:f3:5a:da:34:
         d4:18:72:3b:cd:e8:57:39:96:18:85:2a:0d:e3:67:bd:fd:10:
         a4:2c:98:16:c7:fd:8b:73:36:b3:65:4a:32:44:97:c0:74:e5:
         01:b2:3b:8a:c1:23:b3:d8:26:e0:e8:ea:04:6e:ae:72:a6:66:
         05:b5:78:4c:d5:55:4e:b6:c7:83:c7:fb:d7:a0:10:2c:c9:dc:
         a9:93:22:07:36:28:c4:ec:f8:de:97:11:7e:dd:2b:7b:5a:b4:
         c7:34:da:69:fa:03:3d:b4:ed:39:e3:d8:c8:c1:a9:3e:98:70:
         34:c5:3f:9e:ae:72:ae:ff:94:dd:cd:09:59:0f:ec:b8:ea:56:
         7b:2c:34:dc:fa:de:e9:0d:00:ae:4c:ed:9a:65:47:74:ae:36:
         d3:ad:ed:9c:4a:be:b3:a0:83:f2:72:05:ed:51:36:1f:de:82:
         94:7b:ac:0d:67:7b:ab:e3:ed:52:54:5c:9f:65:91:c2:83:9c:
         59:09:f5:50:cb:7d:8d:8b:81:2b:ea:11:db:03:67:3e:16:68:
         d2:79:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:42:24 2025 by rpki-client