Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File:                     ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier:          hIZtPRTiI0qa/t4Up1V47EG6QfFxAxAs9m9lV2vrX4k=
Subject key identifier:   63:E1:D7:23:A2:02:4B:89:0F:75:EC:DC:75:72:53:BD:B8:E4:A3:AC
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number:          0197
Signing time:             Sun 15 Jun 2025 02:46:39 +0000
Manifest this update:     Sun 15 Jun 2025 02:46:38 +0000
Manifest next update:     Sun 22 Jun 2025 02:46:38 +0000
Files and hashes:         1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: CIV/LO2r93MmPLWfsI4YmAdGj5v91TR7vNKaDATB79M=)
                          2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E=)
                          3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Jun 15 02:46:38 2025 GMT
            Not After : Jun 22 02:46:38 2025 GMT
        Subject: CN=684e340e-2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:8c:09:d2:3e:98:1e:86:12:94:c9:48:97:
                    97:f3:78:c0:d9:b1:7d:e9:69:11:1e:f9:64:ad:c1:
                    8f:7b:af:1b:79:7c:b5:41:c9:e9:08:8d:6c:36:7b:
                    71:9f:19:7b:bb:c9:85:a5:23:d6:f8:64:9f:f9:43:
                    cc:73:c4:ae:20:b7:75:60:24:eb:f2:cd:4f:9d:e6:
                    d9:9e:a5:f9:ae:4d:11:ea:2a:d3:40:f1:b0:03:5c:
                    1c:84:cc:bb:9a:2f:dd:b2:ce:fb:8a:55:e5:ea:da:
                    c7:72:99:98:f1:bb:d5:43:79:52:62:d2:9a:91:50:
                    1e:c5:05:74:73:83:63:dd:fb:04:77:b9:96:2e:b5:
                    66:8f:61:de:0d:f5:36:72:01:d6:f3:75:b7:f9:f8:
                    41:53:1a:63:d6:6b:7d:4f:46:76:b7:c5:d2:32:a0:
                    e5:1a:d9:f4:41:05:72:56:a1:48:d9:cd:c0:7d:99:
                    65:48:2c:60:73:3c:d8:ae:26:6d:17:e4:2c:36:aa:
                    6a:e5:27:3d:ee:c3:e6:b6:1f:7f:e6:05:c0:d2:69:
                    2a:66:dc:d5:78:34:4f:e9:c3:ba:93:e5:22:fd:f4:
                    93:25:36:1d:41:ee:cd:1f:c6:db:cb:0d:e7:e7:22:
                    82:a7:c7:c4:60:f2:e0:58:40:7c:b3:a7:de:98:bf:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:D7:23:A2:02:4B:89:0F:75:EC:DC:75:72:53:BD:B8:E4:A3:AC
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:03:ef:22:34:30:79:a6:7a:38:ca:e5:61:33:a8:49:c6:a9:
         04:d4:3b:de:56:32:01:5b:03:fa:cb:e8:af:e4:c7:c3:b7:ad:
         1c:74:6f:79:fc:7f:09:de:71:21:0f:25:bc:e6:15:89:59:8f:
         3c:19:75:1c:d6:8d:c9:8c:a5:1a:d3:e9:9c:09:01:0e:59:d7:
         3e:62:e8:ce:0c:9c:90:0b:e0:f3:63:58:72:11:4e:f7:7e:6d:
         e5:ce:a7:20:80:6a:1d:15:3a:a4:be:68:28:9e:a3:5e:12:5d:
         15:81:6e:09:e8:92:bc:19:8b:05:44:11:10:54:c0:24:e4:67:
         33:c8:2b:db:07:67:d7:a9:7a:81:78:8d:7c:fd:ac:26:cf:24:
         c3:0d:20:69:8d:b2:7c:98:d0:84:27:b6:e7:0a:51:a9:39:88:
         03:86:7f:bb:a8:a6:72:cc:b5:fd:e4:9f:bf:77:1b:0e:23:fb:
         93:23:f3:28:b3:ea:13:22:6c:43:70:8f:e8:56:76:5c:70:bb:
         9a:b0:39:1c:6e:0d:c1:19:9d:ab:7a:26:de:46:48:bc:cb:01:
         f5:88:55:c2:54:c3:cd:84:78:2a:9d:c1:c8:73:f5:61:29:67:
         7a:c8:b8:30:98:9e:17:f7:f9:33:62:03:73:a4:b8:b1:0a:bd:
         7e:26:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:39:20 2025 by rpki-client