Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          h1u8M3pZmHFIFbnczfEsN7hzApUyS7R7t+Jkh6qC7DQ=
Subject key identifier:   70:4F:34:26:95:F0:4D:5F:E8:49:04:B4:A4:CE:A8:96:BB:35:43:5B
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1B49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1AFF
Signing time:             Fri 08 Aug 2025 16:28:06 +0000
Manifest this update:     Fri 08 Aug 2025 16:28:06 +0000
Manifest next update:     Fri 15 Aug 2025 16:28:06 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: 1JidnfOLB+5X3Dm0svrDNOkz576iAkZBxJMM+ewLW5A=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6985 (0x1b49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Aug  8 16:28:06 2025 GMT
            Not After : Aug 15 16:28:06 2025 GMT
        Subject: CN=68962596-c52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:27:01:6d:4b:81:48:4c:f1:52:3d:80:26:
                    42:dd:84:a5:63:d3:a0:47:80:f9:5f:14:9a:db:57:
                    4e:f7:19:d8:fc:f1:5e:00:24:8b:ba:15:36:3b:20:
                    63:62:bb:38:86:20:f1:9d:f8:c4:67:25:48:97:60:
                    42:7e:af:bc:ce:b7:05:2c:57:75:e4:4a:b1:e2:15:
                    b9:d0:0e:5e:6e:15:fd:1c:b6:e9:22:cb:84:41:82:
                    61:c2:12:56:80:fa:98:bc:7f:7d:79:98:4d:87:b8:
                    63:34:e0:3b:f7:b8:e1:b7:dc:9d:9f:75:73:ad:88:
                    7d:01:20:73:cb:af:d8:2b:7e:c9:39:25:07:43:16:
                    c7:55:ad:01:2d:18:88:25:fd:94:fc:8b:72:42:8e:
                    10:71:50:9c:a7:0b:fd:84:c3:4f:63:3c:34:e6:5d:
                    4a:c7:8d:70:b7:b8:f5:fb:fe:1d:9c:18:b4:ed:9d:
                    73:bf:c6:47:a5:0c:a6:74:48:28:19:b6:b5:16:ff:
                    d7:65:57:5b:2d:54:a8:07:fc:e9:29:01:39:04:90:
                    c8:f1:bd:24:71:dc:48:9c:d0:68:5f:75:ee:45:19:
                    51:5c:0d:47:a8:4b:34:60:d3:42:c9:49:a9:9b:5b:
                    e0:1d:1c:c6:c7:b0:cf:85:47:59:74:f8:8d:52:1e:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:34:26:95:F0:4D:5F:E8:49:04:B4:A4:CE:A8:96:BB:35:43:5B
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:de:e9:a5:95:ec:39:a8:dc:b7:95:80:11:11:85:13:10:
         32:87:e0:db:b2:bd:99:2a:57:54:55:05:4f:bc:cc:1d:b0:73:
         ee:02:5d:59:33:b0:c7:4c:7c:4a:84:1c:5f:80:6e:15:34:e6:
         e7:b5:cc:70:d6:e6:e9:a3:dc:5a:78:a1:88:a8:32:48:a3:09:
         8f:38:0e:ac:ae:5b:e5:d8:ee:01:a9:52:ef:99:82:cb:5a:f9:
         8c:11:a5:84:6f:b8:22:a7:7a:e5:5c:04:91:6f:37:97:8f:a0:
         c1:3d:f1:8d:25:1a:a2:fc:3f:9d:e4:90:b7:28:24:5b:33:d4:
         0d:f0:91:3e:43:1e:25:7f:86:5b:d8:6c:19:23:5b:3a:67:6b:
         f3:da:f7:8a:5d:16:83:e3:c4:67:8b:5a:10:1f:b5:8f:81:a4:
         fe:02:76:59:12:aa:40:27:44:de:7f:7e:64:8e:56:f3:6b:f7:
         c0:50:0f:d7:4c:4d:eb:1a:d1:1a:b4:d8:a6:04:f2:43:ad:67:
         3b:c7:3e:38:06:be:44:49:ad:99:6d:eb:64:b7:5f:ac:07:bb:
         6b:7d:a3:5e:f4:dc:81:05:87:28:1c:f5:f5:66:7b:d7:2d:7a:
         fb:6f:90:9e:43:bc:3e:b4:b4:0c:c4:56:ed:79:89:2e:ae:d0:
         7a:3a:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:29 2025 by rpki-client