Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File:                     XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier:          UPz2aymx1eT25KGUpyWNAhKt61t337xzL81654NEP3k=
Subject key identifier:   7A:1E:EC:35:DD:62:F6:72:9B:DA:49:8A:21:87:1A:CC:8D:50:8E:AE
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number:          02A0
Signing time:             Fri 13 Jun 2025 01:03:46 +0000
Manifest this update:     Fri 13 Jun 2025 01:03:46 +0000
Manifest next update:     Fri 20 Jun 2025 01:03:46 +0000
Files and hashes:         1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: fEiDE62Vu8QQgSpzx+FhYHxmwb3X/dM3fAjQQS+TSwo=)
                          2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=)
                          3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=)
                          4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=)
                          5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Jun 13 01:03:46 2025 GMT
            Not After : Jun 20 01:03:46 2025 GMT
        Subject: CN=684b78f2-3ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:3f:32:de:df:5d:ed:a6:0c:bf:cc:b8:77:
                    5c:09:64:81:60:d8:d0:93:b3:82:27:5a:80:76:72:
                    51:38:09:c6:dd:a1:6e:4f:3f:e5:c3:21:28:2c:9e:
                    f5:de:45:e4:4b:47:35:db:cd:88:74:f2:75:e5:d3:
                    eb:7c:e6:cc:f8:62:74:a5:fc:7d:63:f9:5e:2e:24:
                    15:fd:89:d2:17:c5:fc:b3:84:57:5a:b7:38:99:d6:
                    bf:64:fd:df:0c:66:6e:4a:18:bd:2d:66:51:cc:f4:
                    0d:40:e4:af:a9:88:f1:66:50:b6:ae:5d:44:43:34:
                    c8:6c:e4:24:4f:4f:d0:d8:b1:68:67:a4:7e:05:17:
                    3f:03:92:16:93:0a:14:04:89:04:96:f3:74:e9:42:
                    64:f7:19:9f:d6:8f:70:42:55:cb:98:87:00:57:3c:
                    49:0c:be:8e:5a:13:47:dc:88:9e:a9:5b:8a:4f:fc:
                    85:2a:19:d2:42:35:e3:d3:3e:87:f5:43:ef:22:bd:
                    80:de:19:f8:0d:be:4c:4b:6e:fb:ca:5b:9b:ca:cb:
                    bd:ca:a1:ae:43:17:9e:0d:40:b4:0b:07:b9:b5:ba:
                    3a:9d:c1:c3:58:b3:07:20:d5:f8:4d:ad:cd:f0:1e:
                    3b:de:30:86:b0:79:b5:76:1d:1e:7a:77:7d:f0:ce:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1E:EC:35:DD:62:F6:72:9B:DA:49:8A:21:87:1A:CC:8D:50:8E:AE
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:10:eb:7e:64:cd:90:b9:d2:e1:42:b4:63:74:e2:b7:b1:
         f7:e3:33:b0:f2:2b:e0:df:4d:95:6e:f4:18:46:7c:04:9b:b1:
         a9:6f:bd:e5:61:3a:13:25:7b:e2:25:92:8d:ca:4a:21:ce:8c:
         37:8c:8f:76:f1:c9:00:13:17:e7:6a:a4:eb:db:47:56:92:37:
         4e:4d:4f:bc:b8:03:ca:37:57:8b:28:25:ad:98:1c:60:92:25:
         8f:a5:6c:31:e4:ba:c1:8f:cb:20:73:21:d8:c0:d5:94:11:ca:
         57:e8:9b:e8:76:e1:f4:e0:82:47:76:d4:ef:f1:66:fd:f4:ed:
         4d:a3:a6:62:ad:6c:38:a2:f1:a5:b8:93:e0:90:0e:65:4f:59:
         95:3f:1f:00:d4:95:a5:50:15:e1:f2:46:db:9c:e1:20:c7:51:
         40:e1:4c:6f:fe:b5:c4:89:01:ab:f1:32:74:9c:6d:71:2c:51:
         84:7b:ad:58:e4:9c:b7:89:f0:96:75:04:8f:01:55:33:9c:31:
         86:2a:6a:9f:d9:4d:19:c0:f7:a8:0c:c0:d4:e7:78:34:76:63:
         1f:7a:c3:79:13:fb:fc:15:f3:22:89:da:36:98:b7:78:23:69:
         41:a0:49:0b:b9:38:0f:7f:99:29:98:b0:6b:fd:22:8b:4c:b8:
         f2:fd:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:29 2025 by rpki-client