Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          h5g9zpGt3GVsduz3R0qLmTzY3iXPKjotjrSkKafy6Yg=
Subject key identifier:   3A:2F:53:F4:7F:01:32:60:65:D0:80:8F:77:C3:B2:BE:08:15:9F:D1
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       0FFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          0FE2
Signing time:             Sat 14 Jun 2025 17:24:51 +0000
Manifest this update:     Sat 14 Jun 2025 17:24:50 +0000
Manifest next update:     Sat 21 Jun 2025 17:24:50 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: sxghxcO7WPNVilZVgI82b8Jo0l9b5evnaZ4H5V58FQY=)
                          2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 91GhAMmVYDOKIaPlZtLbS9DCeqxqN11XLz4AvQ01ZCY=)
                          3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=)
                          4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fOkeLT2T9sGexymAbtOvzE9kd8mH2xk9Q29zH8sz1Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4094 (0xffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Jun 14 17:24:50 2025 GMT
            Not After : Jun 21 17:24:50 2025 GMT
        Subject: CN=684db063-b055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:33:2b:c9:e9:1d:c3:7c:ae:48:a7:4e:30:
                    0f:0b:4e:43:3b:d5:82:37:1e:83:8d:37:ca:6d:51:
                    2f:4c:83:fe:92:95:e7:fd:ab:c9:d6:97:9f:66:4c:
                    81:64:2d:bb:41:24:03:77:b3:dd:00:cc:ab:97:8f:
                    ea:77:ff:47:3a:e9:50:eb:83:dc:f1:ff:9d:0e:70:
                    ce:8a:fe:f3:19:c1:c2:12:1e:40:4a:7e:3c:eb:01:
                    60:d8:4d:5c:f0:6a:ed:ef:43:c8:97:3c:00:bb:f6:
                    1f:24:84:be:d4:d6:37:16:4d:13:63:89:28:ad:60:
                    fc:8f:6d:79:b7:be:c1:4f:84:2d:02:1f:32:dd:8c:
                    0e:7d:5f:c0:de:c2:23:9c:6b:28:4e:e8:92:21:89:
                    82:18:a5:56:62:e5:b7:14:10:cf:e7:71:cb:b0:4a:
                    46:46:30:d9:1f:a0:41:ea:bb:8e:4b:1b:93:2b:91:
                    c1:a4:64:d9:0a:61:af:67:b1:13:c2:60:ce:c4:66:
                    9c:5a:41:18:01:75:ba:bd:e0:d2:0d:23:b0:a1:89:
                    ac:07:7d:fb:6f:4c:84:a9:60:71:df:0b:61:db:95:
                    72:0b:63:a2:73:21:d6:db:2e:a9:4c:a9:f9:87:a1:
                    8d:54:ee:1c:97:61:32:bd:30:63:06:1f:84:e9:a9:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:53:F4:7F:01:32:60:65:D0:80:8F:77:C3:B2:BE:08:15:9F:D1
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:f2:23:e6:4b:91:00:69:87:68:6f:a2:43:49:4a:f9:d4:
         1e:46:d9:e4:4f:45:10:f5:49:8a:7e:62:2b:63:0d:2b:c0:4e:
         11:37:26:e2:9c:ab:8f:ae:f6:1f:2f:b2:8c:d7:a1:e9:92:f4:
         7b:cb:ef:9c:7d:36:5c:12:78:ec:a4:2c:60:6c:55:b7:f4:16:
         b5:ef:4f:0c:c4:c2:08:b9:b5:d6:5d:99:b7:39:32:ce:ed:25:
         7c:f0:4a:48:99:0d:76:7a:ca:9d:5d:7a:b6:e4:69:3b:ed:e0:
         ee:60:66:0c:23:a7:da:66:c4:ae:cb:97:6f:ed:f4:c9:40:c8:
         5e:bc:90:2d:0c:71:36:2c:0c:42:13:92:4b:ce:b3:bf:13:4e:
         4d:bf:35:bc:1c:5b:8e:8e:21:7d:2a:3b:61:2a:a2:2c:06:47:
         fc:83:84:d8:03:42:c4:a2:d1:c8:d0:84:ec:4b:2c:6e:6a:ee:
         15:34:37:2c:6f:9d:5c:81:d3:d0:89:9a:72:af:99:12:70:3f:
         5e:50:06:fa:bd:4c:73:06:12:f7:7e:14:54:d8:e8:90:3f:b6:
         9d:ac:df:f0:97:f4:97:b4:92:32:46:61:54:3a:40:aa:7b:3d:
         b4:fa:1c:c9:2a:86:09:bb:cd:15:27:0f:28:bd:e7:18:fc:3b:
         ae:4d:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:48:20 2025 by rpki-client