Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
File:                     AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json)
Hash identifier:          nKI0CT8RqlyNupd6ooLrXCYEPPgAMzjX8NT0lwEvpXE=
Subject key identifier:   51:2A:D2:F5:73:CA:F5:8B:19:2E:04:24:19:0C:C0:EA:91:43:64:07
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Certificate issuer:       /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
Manifest number:          014C
Signing time:             Tue 17 Jun 2025 03:21:20 +0000
Manifest this update:     Tue 17 Jun 2025 03:21:20 +0000
Manifest next update:     Tue 24 Jun 2025 03:21:20 +0000
Files and hashes:         1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: AihpBTw9yNuacyqt27B3yHhZ3EHLgHsx6qbKN44hOsw=)
                          2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=)
                          3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 03:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
        Validity
            Not Before: Jun 17 03:21:20 2025 GMT
            Not After : Jun 24 03:21:20 2025 GMT
        Subject: CN=6850df30-91b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:c3:94:d9:cc:2d:47:2b:c9:d7:55:cf:4a:
                    b4:73:13:53:22:e3:bc:d3:1e:30:99:11:db:17:d7:
                    14:ae:45:ce:58:f9:45:5c:b9:e7:1f:f8:ef:0f:8d:
                    b7:d1:84:ca:f1:64:be:db:6b:2d:aa:bc:83:77:bb:
                    fe:6b:83:f8:27:d9:30:4d:c0:9d:cc:db:0e:1f:80:
                    f2:e4:7e:dc:03:7a:ab:6d:30:c5:f3:45:19:d2:7f:
                    52:e0:99:8b:b4:94:bf:62:35:61:9d:2f:22:3c:27:
                    92:d8:2b:78:d7:e5:bf:52:3c:48:4d:06:57:90:fd:
                    ee:ab:57:35:8d:c3:f5:b9:65:c3:da:4e:f4:ac:52:
                    27:83:62:a1:02:ee:65:f1:85:96:49:fa:7f:a9:c5:
                    22:97:d6:45:88:4c:86:97:f3:4a:32:f9:a1:d9:52:
                    b9:28:18:db:09:79:84:7b:79:5c:9c:e5:60:65:f8:
                    59:8c:3c:21:dc:80:b9:96:09:db:a4:d5:e3:34:1c:
                    3b:a2:61:19:7c:8c:1f:4b:f0:3e:e5:07:ad:19:ac:
                    2f:4f:71:01:d6:ad:bc:01:c4:ff:9e:95:d4:fe:1b:
                    e5:bb:18:98:5c:6f:08:ac:09:10:bc:55:aa:d8:d1:
                    b1:bf:d1:88:15:02:e5:2a:6e:c6:fd:91:27:f6:71:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:D2:F5:73:CA:F5:8B:19:2E:04:24:19:0C:C0:EA:91:43:64:07
            X509v3 Authority Key Identifier:
                keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d0:ee:de:cd:64:16:d4:25:98:bd:d3:eb:e3:38:39:68:0a:
         20:f6:53:7e:05:4e:6d:8f:ab:59:7c:41:48:d2:00:78:4b:8f:
         ef:04:64:fa:b6:29:d0:c1:b0:6b:11:36:73:21:56:70:39:6f:
         d7:64:d6:d6:7a:0f:f0:1e:f0:80:ba:fc:18:44:7b:32:cb:f7:
         f3:ab:61:fe:ef:22:06:21:ed:2c:8c:a6:11:1a:a7:5a:5a:9c:
         b7:2d:f8:ee:ba:ae:46:1a:d8:d7:24:d9:78:96:80:a5:84:f7:
         14:de:57:ec:71:93:31:7d:11:18:ac:97:6d:c1:4c:c8:20:dc:
         e9:f5:4b:a4:a3:3e:b0:60:c8:6f:0d:3c:5a:4c:26:66:ec:f8:
         51:61:e0:1f:a5:5c:10:ee:2d:80:a3:66:3d:49:c3:15:9d:31:
         ad:65:d6:c0:1f:4c:3b:0a:73:82:34:c5:ae:2e:48:20:ec:5c:
         41:90:1c:bb:02:e2:2f:95:85:99:14:e6:ff:2d:32:f0:57:38:
         84:a5:8a:39:73:b5:f8:c2:5d:fe:77:7a:26:b4:e0:cc:df:e6:
         62:49:91:d8:e9:ca:fa:a0:54:d2:c0:44:bb:45:06:6a:8a:49:
         2e:4c:bc:a2:23:75:42:e3:8f:d1:f4:2d:99:53:3c:ed:88:35:
         94:79:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:11:35 2025 by rpki-client