Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File:                     dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier:          hVnisbC1/EKv/usco9sZJTjDnHJM3nlQI8OGzQ7F2hM=
Subject key identifier:   17:86:9D:A6:79:1A:F5:3C:C0:6E:44:23:71:B6:D2:60:FE:D0:3C:A2
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer:       /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number:          0185
Signing time:             Sun 15 Jun 2025 02:48:23 +0000
Manifest this update:     Sun 15 Jun 2025 02:48:22 +0000
Manifest next update:     Sun 22 Jun 2025 02:48:22 +0000
Files and hashes:         1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: QC0Np+pdmFOO1SPlaOgJ8sm05C6nfFR+Or1x4/V0HuE=)
                          2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=)
                          3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
        Validity
            Not Before: Jun 15 02:48:22 2025 GMT
            Not After : Jun 22 02:48:22 2025 GMT
        Subject: CN=684e3476-09f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:1e:ab:19:9a:ff:80:d5:c6:ba:fd:23:f6:
                    c6:77:23:1b:8e:31:0d:1b:05:b3:60:8a:db:cf:e2:
                    fb:37:5c:31:6f:5a:af:4e:97:7c:8f:04:19:76:09:
                    ff:bd:26:9d:a1:0b:5a:b6:63:3c:d1:c5:fd:91:88:
                    97:22:16:b8:18:18:e6:9e:4c:eb:db:2a:aa:51:2d:
                    a8:c9:ca:44:d5:34:70:7a:10:4e:4f:03:07:3b:e2:
                    6e:77:0e:b7:78:07:df:4b:5a:bb:b6:bf:09:86:3d:
                    7c:65:20:71:1c:c5:fe:80:1d:69:5a:c0:ed:79:0e:
                    c3:f1:a0:6b:2e:3e:eb:4c:84:b6:6f:aa:58:68:70:
                    54:f9:b0:90:02:ac:1e:1f:aa:a1:af:99:b2:9b:4d:
                    c8:09:84:cb:4c:8f:a9:fb:0b:fd:48:77:1d:39:4a:
                    6d:5e:65:60:09:75:9f:7a:d5:b7:09:00:74:7b:f3:
                    32:f5:0e:34:24:6b:1f:20:e3:f8:ae:ff:d6:2f:a0:
                    bc:2d:ab:13:dd:7d:1c:7f:89:80:50:d1:94:c9:38:
                    89:af:c0:3b:14:79:18:74:14:dd:c7:41:d1:f2:16:
                    f4:a6:08:b6:81:53:ef:35:c0:3e:30:8c:8f:8e:b2:
                    d2:2d:ec:df:31:d4:e3:35:1f:37:8b:11:0e:17:b9:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:9D:A6:79:1A:F5:3C:C0:6E:44:23:71:B6:D2:60:FE:D0:3C:A2
            X509v3 Authority Key Identifier:
                keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:2c:b6:d9:de:ee:2b:fb:d4:d0:09:47:22:e1:19:be:3b:
         29:be:55:03:1a:5a:00:17:cd:f7:a9:26:9d:77:4e:44:11:1e:
         b5:d8:e8:3e:7a:33:6d:e6:e3:64:9c:c5:9d:18:ac:1b:05:22:
         95:f0:96:b3:87:02:94:06:ab:76:51:7e:69:b3:08:15:ab:8b:
         a4:48:83:39:5f:ef:bb:56:5b:40:85:de:3d:ee:e6:47:a8:24:
         6c:87:36:9a:48:f8:96:25:6a:49:09:4a:0a:27:fb:1e:12:59:
         58:a9:1f:84:85:31:9c:a5:d4:e2:5a:7d:2a:26:b3:48:1e:50:
         4e:f0:b2:96:0e:4c:c3:78:48:42:91:42:31:04:36:98:fb:7e:
         60:f7:af:03:4d:94:2b:d3:fe:b7:6a:23:8c:65:08:a1:f1:f8:
         08:9e:b1:cc:cb:ba:18:e4:7f:b9:e9:70:4f:28:22:e3:0d:a0:
         d1:72:0f:ca:e5:5b:7f:94:85:0e:59:93:e4:85:58:fa:65:b4:
         d4:36:da:ca:1a:d9:61:f1:f4:6d:ea:6b:e9:77:5f:4f:11:88:
         88:df:59:cb:8c:c2:55:a2:7c:32:64:c6:6d:9c:a3:1d:b0:96:
         61:9a:93:dd:e7:b6:72:23:42:cf:4d:3f:12:0b:ac:c2:d9:24:
         0d:78:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:53:25 2025 by rpki-client