Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File:                     -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier:          QEVN/R9yvLoFgtSsJlDeawlOfl7iZtb6KnuAQJQnoNY=
Subject key identifier:   9A:59:94:F6:C1:4C:5E:92:39:AD:E5:F0:C7:B2:EF:E4:E6:7F:AA:31
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer:       /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number:          99
Signing time:             Sat 09 Aug 2025 06:47:59 +0000
Manifest this update:     Sat 09 Aug 2025 06:47:58 +0000
Manifest next update:     Sat 16 Aug 2025 06:47:58 +0000
Files and hashes:         1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: 9WNlBsEMuCx1L25f64+GteueVPbYtL58Lkn/ZT+UqFA=)
                          2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
        Validity
            Not Before: Aug  9 06:47:58 2025 GMT
            Not After : Aug 16 06:47:58 2025 GMT
        Subject: CN=6896ef1e-21c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:96:c4:af:9c:b9:0e:d5:67:4a:56:a5:5f:
                    36:4c:ed:df:d3:93:6e:80:cc:fb:78:76:27:7c:c6:
                    ff:0e:9b:a0:02:29:96:58:cb:11:44:45:16:49:30:
                    e1:b7:44:8d:61:11:b9:ea:b2:fb:fc:1f:65:5e:a4:
                    af:46:09:60:22:63:35:b6:2b:e4:ea:ee:c3:c0:05:
                    26:83:cd:c4:62:79:ce:6e:fc:57:73:e6:2c:0b:59:
                    9e:78:1e:25:65:5d:9e:ed:5a:11:f0:69:88:7f:7f:
                    73:27:8e:49:0b:32:22:db:f9:45:47:5c:d0:c1:b3:
                    ec:d5:8b:69:4b:cb:92:bf:0f:eb:b1:b2:fc:fb:a7:
                    a3:7d:20:ec:31:1c:be:c4:16:c8:84:e4:8b:29:95:
                    2f:ac:25:85:86:97:fc:c3:a8:45:d5:3c:48:fc:98:
                    c6:4b:a0:f6:ef:a5:3e:ab:9c:d9:e3:ff:68:f0:75:
                    4c:3f:13:67:6e:98:03:e7:96:3c:ae:92:8c:a4:02:
                    89:7e:01:0b:1e:da:9b:74:ba:d9:02:88:b7:08:98:
                    09:d0:fb:b2:3a:8b:49:0f:de:4d:17:db:df:11:82:
                    96:fa:01:ac:5e:b2:75:96:bd:1b:b8:06:6b:bb:fb:
                    c9:5e:6d:bf:70:38:0e:d5:42:25:67:bc:1c:d4:ce:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:94:F6:C1:4C:5E:92:39:AD:E5:F0:C7:B2:EF:E4:E6:7F:AA:31
            X509v3 Authority Key Identifier:
                keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:23:12:10:ad:2b:56:8e:9f:0d:75:96:be:dc:e5:fc:a2:
         1a:21:04:72:b0:14:a2:91:f5:0f:e6:31:76:83:79:aa:92:11:
         26:17:f4:5d:24:d3:54:a1:0e:9b:b8:12:32:c6:51:10:35:36:
         cb:16:0c:80:0a:51:2a:71:45:4d:84:88:19:ab:cb:7b:20:66:
         2b:ba:3b:70:cd:52:04:32:2b:52:38:11:bd:07:45:e9:f8:13:
         c5:d0:de:66:4b:47:5b:65:63:9f:0b:c8:58:c8:c9:28:f3:80:
         39:1a:28:f1:47:76:2d:bf:21:cf:70:f8:a7:51:d0:56:e6:a7:
         55:71:fc:93:ec:05:0b:b5:b4:79:48:bd:ca:02:86:d7:c5:95:
         05:57:32:b3:a7:dd:41:c2:b3:63:41:ee:05:a2:fb:91:85:d8:
         3a:2c:c1:25:54:7e:02:5a:44:5c:91:d6:3c:3e:1c:32:61:ce:
         64:09:c1:00:cc:7d:06:1f:80:4c:dc:c8:f5:29:29:c7:8b:43:
         42:f5:0e:93:fd:3f:a5:86:b1:e5:6a:9b:18:f2:ad:cc:20:78:
         3c:c7:9b:af:d9:9e:e5:94:e3:ed:10:04:79:52:84:47:da:9d:
         1e:07:50:9f:b3:91:3c:db:61:43:6f:8f:a0:74:ad:79:1f:ef:
         e3:2a:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:57:06 2025 by rpki-client