Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File:                     ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier:          D6i9I3+UPNWE8e7/nCg1mcwIwHQJtS/dG8ndz1Y89xE=
Subject key identifier:   58:BC:81:D0:76:FE:C9:B7:FA:2A:49:D0:8A:6C:26:5E:0F:A7:49:02
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer:       /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number:          075E
Signing time:             Fri 20 Jun 2025 21:27:55 +0000
Manifest this update:     Fri 20 Jun 2025 21:27:54 +0000
Manifest next update:     Fri 27 Jun 2025 21:27:54 +0000
Files and hashes:         1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: r8EUAnqT0ear0/S+xernpa9MshAoLlnkqtpxn7Rk9yo=)
                          2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: WfvvNRnELrbKdyHT2PbPWY6aXdMt2YiJ74YgfGsw5Hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 21:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
        Validity
            Not Before: Jun 20 21:27:54 2025 GMT
            Not After : Jun 27 21:27:54 2025 GMT
        Subject: CN=6855d25a-94cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:30:13:9c:c5:d8:32:b9:5f:0f:80:00:da:
                    86:e6:ab:2c:28:fa:b9:3e:4c:60:b6:0b:76:70:68:
                    22:a2:e0:cd:d5:47:16:33:69:68:9f:a2:b7:99:fa:
                    9b:75:80:21:50:92:5d:22:c5:19:5d:f7:d5:1a:c0:
                    8f:49:39:87:e0:04:97:33:fd:22:78:ed:b5:ae:85:
                    f7:bd:96:40:d1:68:86:f1:cd:fe:da:31:0b:8a:45:
                    7d:02:c6:70:5c:11:58:73:a7:84:23:8b:65:88:1b:
                    61:9b:6b:5c:7a:2f:1f:d2:24:16:56:2f:2d:a8:06:
                    22:c8:33:14:cb:8b:3d:bd:3b:c0:5c:d9:15:6b:d0:
                    8c:18:df:23:40:62:c2:8b:a2:08:cc:f3:85:cc:74:
                    31:fc:b2:c3:3e:12:6f:c2:e3:b2:34:e2:c9:e3:4a:
                    55:0d:e5:cf:6d:25:74:02:c2:22:39:a7:ee:34:5a:
                    76:47:82:d1:bd:86:13:62:17:ae:96:60:89:bd:13:
                    5b:a4:20:4e:b1:5c:d9:93:11:68:57:ba:49:00:ae:
                    ff:71:cc:4e:0d:18:dc:4d:db:48:e4:08:65:06:aa:
                    4f:11:96:70:fa:3f:0c:bc:6d:95:ac:2a:89:97:12:
                    20:1c:2a:93:44:98:7e:85:11:45:85:15:31:7b:af:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:81:D0:76:FE:C9:B7:FA:2A:49:D0:8A:6C:26:5E:0F:A7:49:02
            X509v3 Authority Key Identifier:
                keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0e:1e:34:ef:d1:24:92:77:fe:e7:48:c7:a6:69:63:4b:3a:
         0c:f6:40:eb:d3:eb:32:56:fb:c0:5f:2f:f0:82:f1:d6:fe:b7:
         ce:8a:ab:2f:6c:b6:ce:96:69:3e:0d:eb:21:85:16:4e:90:8f:
         78:1d:9a:05:fd:5c:5f:b1:91:1f:bb:98:d1:67:87:8f:ab:ba:
         9e:3c:c4:14:54:a9:d6:91:7b:9e:f8:40:d9:14:9c:58:31:22:
         09:78:bd:9a:bf:38:3c:bd:45:7a:79:37:8f:3b:be:21:b9:45:
         64:b0:66:3a:8b:60:c5:bb:73:12:90:ec:df:30:d3:22:79:da:
         e6:92:8e:b4:70:30:e9:77:40:8b:b1:b0:82:16:bb:a8:e4:8e:
         98:05:c6:da:36:2f:49:b6:ba:ed:65:f7:8b:e2:ad:54:2b:c4:
         ae:2a:3f:66:5d:5f:c2:4a:8d:55:b9:0c:17:ee:7b:34:fe:2a:
         74:70:f6:76:41:60:6d:42:34:ef:ba:d8:0b:b6:aa:b1:4a:45:
         ab:87:03:83:95:92:c5:7f:67:c8:7c:6f:31:32:f9:c8:bb:22:
         c8:91:2c:37:72:88:12:a8:14:39:b8:a3:cc:d5:f0:76:ae:d5:
         5c:0f:ab:29:e8:40:eb:8c:a8:be:e5:a1:0d:6e:7e:34:64:63:
         ac:28:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:26:01 2025 by rpki-client