Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
File:                     MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json)
Hash identifier:          DkBnZRHqgX46KW/iSRuZcwhnYZfM2cSPq+VvciGP0CA=
Subject key identifier:   05:90:15:35:11:8F:11:2E:8D:17:A1:42:E9:D7:5F:73:A6:AE:34:F1
Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7
Certificate issuer:       /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
Manifest number:          0462
Signing time:             Thu 12 Jun 2025 23:43:58 +0000
Manifest this update:     Thu 12 Jun 2025 23:43:58 +0000
Manifest next update:     Thu 19 Jun 2025 23:43:58 +0000
Files and hashes:         1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: 90Yxp9M5Ea5sXgwyDv0k07ABXtlzgmxf76bPODe1v5c=)
                          2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=)
                          3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl
                          rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
        Validity
            Not Before: Jun 12 23:43:58 2025 GMT
            Not After : Jun 19 23:43:58 2025 GMT
        Subject: CN=684b663e-edb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:9b:52:4a:42:b2:b8:33:b7:f8:e2:95:f9:
                    65:bf:d4:6d:6a:50:ba:d0:05:2d:ae:16:9f:14:f2:
                    d3:29:39:9a:29:cb:ac:da:98:a5:61:8e:2b:7e:98:
                    f0:cd:9b:57:60:d3:75:89:74:04:ae:3f:a2:1d:92:
                    8b:34:42:9c:a1:c3:91:ee:6c:25:4d:7b:e1:e8:13:
                    61:cd:cf:42:a0:ae:b8:60:64:56:c7:40:c0:4b:07:
                    64:ea:fe:52:58:38:7a:52:88:98:e9:9e:19:72:78:
                    b4:3c:38:cc:70:15:2f:a0:9c:1c:5d:e8:c4:78:4d:
                    42:ab:54:1f:7e:57:f7:0c:df:e6:65:7f:23:ce:00:
                    80:0d:f6:3b:75:db:e1:b5:7d:5d:23:94:89:2c:19:
                    49:4c:1d:e2:29:ff:76:b3:39:88:5c:04:b2:38:9f:
                    85:2d:4c:45:87:33:1a:46:fb:4f:4a:cd:3a:c8:0e:
                    39:be:5a:b7:de:4f:66:b9:66:3b:4c:c8:9c:d0:47:
                    a8:9d:ff:89:6a:80:7d:d8:69:73:ea:ce:1d:57:80:
                    5d:a1:81:9d:a2:37:72:ef:38:db:0b:d9:c6:04:6e:
                    a2:e6:68:55:d7:16:a5:4e:85:fc:e2:06:23:44:0e:
                    16:f5:00:62:a6:0b:85:f6:41:ad:ae:84:20:7e:f1:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:90:15:35:11:8F:11:2E:8D:17:A1:42:E9:D7:5F:73:A6:AE:34:F1
            X509v3 Authority Key Identifier:
                keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:f2:14:c7:78:30:2d:fc:ca:ab:cc:c7:3b:9a:57:50:0e:
         0c:ce:d4:f8:d4:1f:f2:4f:22:39:78:af:54:02:75:1d:6b:ba:
         15:75:8e:7b:ce:fd:2a:b8:be:81:4d:96:77:65:d3:0c:0e:2e:
         66:25:53:ce:15:ce:3a:12:d4:2a:c2:8f:70:f2:32:28:80:d9:
         76:cf:97:d6:a0:d4:14:91:53:40:0e:1a:cd:44:57:a4:c2:39:
         a5:b5:3c:ff:b7:24:bd:b5:80:86:6d:6e:72:2c:af:7d:13:e9:
         91:2e:79:42:66:57:81:71:1b:f5:2a:4d:09:61:90:b9:58:5f:
         34:a7:c0:dc:35:f5:af:9c:ab:05:4e:2c:23:6a:e4:0b:9e:37:
         a4:5b:29:78:55:3d:0a:1a:c0:91:25:f0:d6:e4:ee:a2:9b:e6:
         6e:32:f9:9d:d9:cb:98:09:6c:2f:37:d6:73:b8:15:cd:5b:66:
         2d:1b:4c:11:9e:a9:a3:67:eb:aa:c9:0a:56:4a:d2:67:de:8b:
         db:93:9b:e0:c4:b8:95:d9:3e:ae:89:fc:f1:b7:58:19:ec:6b:
         06:93:02:00:3a:ed:a5:e1:9e:c2:be:18:5a:f9:61:78:c7:7d:
         5b:69:f2:3c:74:93:3d:83:54:ca:a4:47:1e:0e:a7:df:1b:6f:
         aa:ee:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:12:50 2025 by rpki-client