Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          75lpMdlaUfAa5tDQs6itTfH8zmLH1X3UKLgJRLIqPos=
Subject key identifier:   00:FF:EA:DB:8F:EE:F3:CB:87:2E:BD:5B:18:72:A0:0F:D4:42:D7:9A
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       2547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          252D
Signing time:             Wed 06 Aug 2025 15:49:37 +0000
Manifest this update:     Wed 06 Aug 2025 15:49:37 +0000
Manifest next update:     Wed 13 Aug 2025 15:49:37 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: ruqiPKwhNpPPdINktn8V6MKqfMDcEIljM1C4Rdqrczw=)
                          2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: Z754LG6nGQ06ZpUuHnHm6+5+zZq4bCVd8VqoVX/cCxs=)
                          3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: fuh0LlQyz61TwsZ3SUhqE5lyOndp84sYnyIIyPcvMCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9543 (0x2547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Aug  6 15:49:37 2025 GMT
            Not After : Aug 13 15:49:37 2025 GMT
        Subject: CN=68937991-bbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:ba:bf:f0:ee:95:09:dd:af:07:e8:03:c9:
                    8e:9f:83:b9:e3:c0:dd:d2:24:fd:f1:21:0a:76:ee:
                    1a:3d:0c:91:01:65:73:75:e8:f8:4f:eb:ca:09:4e:
                    fe:b6:37:92:7d:12:68:1c:d7:6b:48:05:55:a1:4f:
                    44:a5:b2:1d:75:bf:1c:71:48:8f:c1:51:c5:68:c3:
                    80:65:d9:c9:13:6a:73:98:7f:59:3c:14:3b:2c:c5:
                    17:2e:00:88:02:4c:5e:cd:fd:fb:03:4a:94:c1:56:
                    fe:92:d4:b2:51:5c:99:a6:60:39:c9:52:92:54:e3:
                    9e:6d:b2:bf:44:33:1a:68:d7:cf:1e:c7:14:57:dc:
                    a2:13:b0:80:ef:68:98:2b:70:8d:21:57:5e:0f:7f:
                    db:78:0b:a1:c0:d9:f6:92:ca:54:9a:3f:69:16:dc:
                    3f:79:ae:da:e2:6e:b3:9a:ae:22:ba:63:24:23:94:
                    72:c1:9f:22:0a:9b:d7:b5:ff:b0:99:d4:01:f9:eb:
                    74:8f:ce:ca:f8:88:8c:ee:06:79:f2:50:d2:e4:eb:
                    a9:1b:24:a8:65:74:2d:85:c9:f1:30:69:f9:7a:11:
                    02:39:0c:ba:10:fc:c5:5a:d3:af:46:be:6a:17:10:
                    d8:99:65:b1:14:ce:9b:5f:47:6d:10:b6:68:d2:41:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:EA:DB:8F:EE:F3:CB:87:2E:BD:5B:18:72:A0:0F:D4:42:D7:9A
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:37:c5:62:66:e5:a4:6e:32:71:b5:13:75:69:9e:6f:f3:
         1f:e0:1a:6d:38:24:f5:0f:0a:6f:72:dc:b1:13:8a:65:36:b2:
         7d:b4:23:bc:2d:43:08:8a:4d:7f:bd:f0:ef:a6:c7:91:4e:70:
         5e:7d:d0:90:0e:eb:51:51:2a:c1:15:0a:dd:2f:ca:25:f6:51:
         0e:a0:e2:bc:c0:9a:15:41:9c:6c:5d:d1:1f:d2:47:f3:ff:b0:
         15:73:b4:8e:06:86:76:19:58:2d:ff:79:b3:78:d9:89:6b:89:
         10:c9:c8:38:80:42:22:cc:9d:a3:f3:cd:7b:24:8b:3c:50:9f:
         39:a3:29:c7:74:fd:b2:38:26:ed:b5:48:eb:f8:cb:ee:0e:0f:
         c4:03:9c:e3:50:ae:fa:dd:19:4d:70:a9:4f:55:60:19:d4:60:
         5e:10:6c:8f:6d:0f:e5:d3:ab:a1:3c:6b:8e:0b:98:34:c6:e0:
         7b:ca:d2:37:90:84:13:f8:86:f9:f4:0b:83:70:7f:d9:68:e2:
         44:67:81:59:65:e2:5a:a7:40:fe:2a:0f:20:5a:da:61:4e:33:
         4b:bb:82:75:af:49:fc:89:35:39:42:cd:a6:67:9a:81:22:2e:
         69:f9:21:38:4c:4a:e6:d0:1b:1e:53:c6:16:de:d5:5c:95:3b:
         9f:41:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:27:33 2025 by rpki-client