Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          dPHLREFrA4Juh2QGvWMWYS6gzkvW5LxjiyCpLrzIbb8=
Subject key identifier:   CA:7E:52:CF:16:3F:C2:63:21:B6:81:74:75:9F:5C:FF:B7:4C:46:20
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       06FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          06D4
Signing time:             Thu 12 Jun 2025 21:46:47 +0000
Manifest this update:     Thu 12 Jun 2025 21:46:47 +0000
Manifest next update:     Thu 19 Jun 2025 21:46:47 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: dXfvX9ICsVQJczwmeZ88fnhsJFnhdAmkn3oZLz1QXcA=)
                          2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0=)
                          3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=)
                          4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Jun 12 21:46:47 2025 GMT
            Not After : Jun 19 21:46:47 2025 GMT
        Subject: CN=684b4ac7-aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:ce:e9:da:b0:13:04:af:2b:c5:a0:ab:52:
                    7a:e6:a2:66:95:32:61:cc:58:d7:8b:69:64:a4:47:
                    8e:d8:55:ec:28:ac:f1:40:04:bc:ff:ad:5f:e4:56:
                    c1:47:03:2a:84:84:bf:2f:43:fa:67:64:b8:5a:0d:
                    de:13:1d:13:ad:c4:af:67:7b:93:46:5e:6e:b9:b5:
                    73:e4:bf:37:ac:6e:79:6c:a8:8d:f4:f6:e0:36:bb:
                    2c:27:95:57:80:9a:94:83:fd:7e:c2:c9:11:e0:0e:
                    10:df:79:c3:5f:80:46:f6:b3:cc:e1:96:eb:28:44:
                    7c:b7:cf:32:45:7e:39:40:70:47:ce:17:53:3a:49:
                    99:ca:d1:f5:7c:34:26:8d:b4:12:39:a4:d0:ea:80:
                    8e:6f:4d:fc:6a:5f:f2:6e:d5:bb:10:09:d7:eb:17:
                    66:aa:6a:cf:0e:b8:b1:ce:80:6b:77:f8:9b:7f:b5:
                    60:40:81:4d:2e:08:05:7d:90:26:ec:f7:f4:57:57:
                    46:9e:f4:11:e0:cc:7f:c7:38:0d:b5:f5:9f:d3:35:
                    de:19:72:5f:b0:94:e3:59:8d:cc:8b:35:e0:7a:52:
                    3e:a1:fc:e2:6d:f9:69:22:8d:57:2d:67:c4:61:60:
                    44:d5:c4:72:fe:b3:30:4d:45:e7:98:56:14:03:79:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:52:CF:16:3F:C2:63:21:B6:81:74:75:9F:5C:FF:B7:4C:46:20
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:76:46:4d:c4:4f:70:4e:4d:fc:26:ae:8d:94:fe:ec:71:10:
         8b:a8:30:11:52:92:36:89:c7:56:f6:15:3b:14:5d:19:c4:43:
         63:f4:5b:3b:c1:18:51:62:6f:25:67:01:18:ce:6b:a2:e4:89:
         68:57:0f:fc:41:5b:3d:b8:65:0c:67:28:f8:17:f8:7e:ae:ac:
         b7:86:70:85:3b:9a:56:46:2b:8c:5f:33:4f:a5:6d:4d:69:df:
         1b:a7:b1:31:1f:e1:31:37:e6:b5:db:74:e1:f8:90:01:c7:76:
         c4:ad:87:d4:4c:28:10:2f:9a:41:62:27:f7:69:dd:1b:c7:fe:
         c5:e4:4e:e3:8c:98:76:df:03:6f:c7:22:6b:74:04:aa:e7:01:
         b3:ca:29:d2:86:2d:7e:e6:35:d0:89:f1:b1:b0:63:82:ba:3c:
         d4:23:f7:aa:75:f3:be:6f:e1:d7:30:02:fb:f4:71:92:b8:e6:
         72:3c:fe:ba:ce:e7:61:0d:4c:65:61:d8:bc:5a:6e:17:c8:9b:
         57:2d:1e:b0:15:64:8a:7c:92:d4:22:ea:de:02:a0:2d:48:59:
         d0:de:8f:d4:c2:54:59:17:be:78:90:33:34:3a:ce:09:e7:a2:
         4e:03:88:0c:d6:60:a4:8a:ac:03:2a:1c:92:c5:97:0a:6b:8c:
         75:fd:9f:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD
QTczM0REQTYwHhcNMjUwNjEyMjE0NjQ3WhcNMjUwNjE5MjE0NjQ3WjAYMRYwFAYD
VQQDEw02ODRiNGFjNy1hZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUnO6dqwEwSvK8Wgq1J65qJmlTJhzFjXi2lkpEeO2FXsKKzxQAS8/61f5FbB
RwMqhIS/L0P6Z2S4Wg3eEx0TrcSvZ3uTRl5uubVz5L83rG55bKiN9PbgNrssJ5VX
gJqUg/1+wskR4A4Q33nDX4BG9rPM4ZbrKER8t88yRX45QHBHzhdTOkmZytH1fDQm
jbQSOaTQ6oCOb038al/ybtW7EAnX6xdmqmrPDrixzoBrd/ibf7VgQIFNLggFfZAm
7Pf0V1dGnvQR4Mx/xzgNtfWf0zXeGXJfsJTjWY3MizXgelI+ofzibflpIo1XLWfE
YWBE1cRy/rMwTUXnmFYUA3ks7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp+Us8W
P8JjIbaBdHWfXP+3TEYgMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG
QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU
dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASdkZNxE9wTk38Jq6NlP7scRCLqDARUpI2icdW9hU7FF0ZxENj9Fs7
wRhRYm8lZwEYzmui5IloVw/8QVs9uGUMZyj4F/h+rqy3hnCFO5pWRiuMXzNPpW1N
ad8bp7ExH+ExN+a123Th+JABx3bErYfUTCgQL5pBYif3ad0bx/7F5E7jjJh23wNv
xyJrdASq5wGzyinShi1+5jXQifGxsGOCujzUI/eqdfO+b+HXMAL79HGSuOZyPP66
zudhDUxlYdi8Wm4XyJtXLR6wFWSKfJLUIureAqAtSFnQ3o/UwlRZF754kDM0Os4J
56JOA4gM1mCkiqwDKhySxZcKa4x1/Z8j
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:01:26 2025 by rpki-client