Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File:                     KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier:          iGhhU5gb/suITgSBE1fzkzXp5IWHCKv+ZGpOzD9Op0Q=
Subject key identifier:   B6:25:6B:E4:23:2C:78:9E:08:E1:24:5D:11:0F:7F:B6:F8:FB:B4:DA
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       06C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number:          06BB
Signing time:             Sat 14 Jun 2025 21:52:10 +0000
Manifest this update:     Sat 14 Jun 2025 21:52:09 +0000
Manifest next update:     Sat 21 Jun 2025 21:52:09 +0000
Files and hashes:         1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: HFKOJgduHlDtYi4gnP0nX3eYg49gME3/StxpiytpPD8=)
                          2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=)
                          3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Jun 14 21:52:09 2025 GMT
            Not After : Jun 21 21:52:09 2025 GMT
        Subject: CN=684def0a-cde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:10:0b:d9:5d:31:20:ad:31:f9:ec:3b:61:
                    21:84:d1:8c:93:65:19:8c:49:02:fd:ce:26:ef:40:
                    31:ed:29:0f:59:ea:0f:ea:88:03:2e:05:ad:1e:08:
                    eb:47:6b:96:f0:f7:1c:67:43:01:f6:8e:28:4b:7d:
                    c7:2b:28:91:c7:b4:b1:4c:0e:f2:6f:7d:be:98:b5:
                    47:b2:1b:8b:99:a2:ba:67:79:ad:62:4f:ba:e8:8e:
                    6e:1c:99:5c:21:20:22:de:2d:96:90:20:cc:72:61:
                    e9:20:9d:ff:71:d8:26:29:e8:c2:3e:21:6e:17:07:
                    05:74:38:ef:dc:32:eb:af:15:19:f7:d4:7c:ed:7e:
                    38:41:2a:07:27:ea:f1:85:fc:32:0e:58:94:a2:73:
                    e2:da:b2:57:80:9e:88:51:2e:a8:20:9e:9b:ed:49:
                    4a:b8:6a:d1:c0:e1:9a:2c:7b:59:70:95:26:b7:09:
                    52:c1:4d:e2:c8:5c:91:db:1c:d5:e4:b7:34:33:20:
                    6e:64:f3:a1:c3:5d:fc:09:4a:8d:36:b3:af:7d:f1:
                    92:2b:f4:c3:54:23:99:cd:df:44:64:99:52:97:a3:
                    c6:25:20:5d:e8:db:20:b0:0e:0e:e5:a7:f2:21:83:
                    b0:a6:e7:b5:d1:f6:84:b5:6c:fb:4d:6f:4d:55:95:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:25:6B:E4:23:2C:78:9E:08:E1:24:5D:11:0F:7F:B6:F8:FB:B4:DA
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:61:e1:ab:86:0c:4a:98:fc:87:66:a6:ac:4e:9b:9b:8e:
         23:e5:96:dc:1c:2b:9c:39:e5:23:49:9d:e3:56:80:ab:4e:ab:
         aa:74:1e:78:4e:9c:66:96:d2:6c:05:a2:4f:92:4d:01:72:08:
         8f:12:aa:d5:8c:a0:98:84:25:eb:7d:f6:f3:ff:79:99:3a:59:
         d7:b7:5a:a8:d3:e0:83:76:5a:11:37:41:8a:62:8f:a8:1f:93:
         49:7c:58:da:cb:b1:65:74:4f:f1:e0:ca:64:82:26:00:62:83:
         6f:65:bd:f2:76:1a:a5:76:1d:59:dd:8c:2b:d8:58:27:96:4c:
         0e:6b:ea:87:aa:b3:fc:21:d7:9c:52:a4:64:00:6e:39:fa:3a:
         0f:ce:22:f2:37:be:ec:3d:96:40:25:c5:4e:cd:70:72:6c:fb:
         e4:e4:08:70:40:14:54:2d:76:6b:65:f0:7f:bb:de:a8:86:c5:
         9a:41:0d:c0:42:44:42:37:af:fc:39:fa:d0:42:1b:21:7c:d3:
         3f:92:97:84:5d:93:21:f7:81:e6:d0:0f:a9:49:f6:5d:f0:e7:
         2d:e7:5d:1d:f4:93:e6:90:60:f3:4d:79:8f:9c:ba:d2:aa:b3:
         a7:4c:fd:28:0d:27:c4:c0:ae:e6:4f:39:5d:8c:00:38:29:33:
         9c:47:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:52:23 2025 by rpki-client