Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
File:                     mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json)
Hash identifier:          TrQZCezLRriKOKKomd1pTMnqBCImZ/witlS4FBcIE84=
Subject key identifier:   36:13:DC:CF:24:A0:B4:FC:37:B5:4C:A1:50:6E:76:65:C7:C5:35:DD
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
Manifest number:          04BF
Signing time:             Thu 07 Aug 2025 00:22:58 +0000
Manifest this update:     Thu 07 Aug 2025 00:22:58 +0000
Manifest next update:     Thu 14 Aug 2025 00:22:58 +0000
Files and hashes:         1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: NW/jCbQgZOzYa/6caBQGcmblgl0UATrgabn86kyPLu4=)
                          2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 00:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Aug  7 00:22:58 2025 GMT
            Not After : Aug 14 00:22:58 2025 GMT
        Subject: CN=6893f1e2-8db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:1d:f0:22:a9:66:ef:38:91:0c:b3:41:87:
                    83:e9:3f:6e:4b:b3:c2:9d:3d:7d:3b:15:31:b1:98:
                    58:8b:3c:7c:26:50:5c:1a:90:68:f3:ce:94:c7:0d:
                    51:a6:32:23:48:0a:c5:1b:e4:9a:13:8b:ac:9d:53:
                    0e:f6:38:87:65:99:f9:bb:97:ae:4d:39:54:60:bf:
                    93:38:b5:dd:7b:e0:70:06:7d:9f:f8:91:b0:f4:26:
                    db:2d:46:29:91:4b:63:86:4c:20:b1:46:52:b9:eb:
                    21:b8:11:68:49:f5:97:3e:a1:7a:05:a7:25:77:a2:
                    89:1b:24:4c:62:46:58:9d:be:6a:ca:4a:88:f3:10:
                    47:3d:90:2c:a6:f7:ac:d5:d6:4f:bc:c8:d2:82:a1:
                    46:f5:87:15:69:a5:b3:e3:e7:6a:29:9a:a5:60:29:
                    89:87:32:fe:ac:76:4a:7f:2a:93:6a:91:04:ef:df:
                    54:e1:49:9c:44:26:4a:65:97:4b:59:77:8d:53:00:
                    d8:9c:17:d4:6e:3a:0b:a3:06:5d:00:01:e6:ae:14:
                    c2:c0:f7:3b:02:ca:43:e8:77:9e:c3:e8:35:0e:05:
                    32:ec:e6:2d:e3:37:cb:4b:67:3d:67:6a:59:54:c5:
                    f2:0d:44:fd:cd:c8:f1:3e:c7:1c:44:30:5c:bc:3e:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:DC:CF:24:A0:B4:FC:37:B5:4C:A1:50:6E:76:65:C7:C5:35:DD
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:da:59:90:f9:62:69:ef:b2:a9:e5:ad:29:1b:cd:b5:e2:
         93:c9:45:f8:eb:e7:dd:4f:8a:de:4c:cf:f7:74:34:2e:e5:5e:
         38:9f:b4:25:f1:84:dd:1c:8c:a8:0e:8f:02:31:c2:24:5a:1d:
         74:2c:5b:64:ca:61:96:b1:28:ef:a8:44:8f:cb:69:6f:03:20:
         4d:49:e1:68:f8:d4:4b:9c:9b:a7:23:6f:96:df:24:09:74:5e:
         67:33:a1:16:6b:bd:18:0f:56:3b:f0:e9:66:6d:51:c8:e9:f3:
         e3:a2:ac:24:37:d4:9c:65:28:9f:31:15:62:25:b8:d7:12:71:
         08:d3:50:fa:6d:01:7a:67:f4:05:b7:29:f0:7e:6d:82:c5:15:
         57:38:6a:9e:99:6f:6d:d5:a9:d6:77:12:76:02:d4:39:a2:63:
         8a:07:90:a5:40:bc:f9:b7:cf:f5:59:af:53:fc:04:6f:0d:a3:
         93:98:c7:66:97:aa:dc:b5:a1:ba:ec:c4:b0:66:d5:66:7d:36:
         aa:ba:15:77:fb:74:4c:cf:69:7e:1e:b7:50:36:4b:43:6d:b7:
         fa:39:fa:c4:e8:ae:5b:d4:34:9c:dd:b3:ab:9a:24:ea:aa:d9:
         2c:1d:c0:56:19:2d:ed:4d:9f:81:25:11:8b:5b:0e:38:7c:60:
         f7:2e:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:08 2025 by rpki-client