Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File:                     nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier:          GGihjUGE81Flqz6AAAdPR7NMPxV7a0s2Xr7kYoccyiM=
Subject key identifier:   1E:64:B4:24:A5:A8:02:14:47:EE:40:07:2D:D9:09:DD:80:83:B6:C4
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer:       /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial:       055F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number:          054F
Signing time:             Thu 12 Jun 2025 23:02:08 +0000
Manifest this update:     Thu 12 Jun 2025 23:02:08 +0000
Manifest next update:     Thu 19 Jun 2025 23:02:08 +0000
Files and hashes:         1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: UqZ77exgf50D4dwOOsrS9pnMGFhO27kN4zOLSAuog54=)
                          2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: 9qbFBS3HM4vcPosn8OSliCwGfWG2+6sVIf90uwZ9kCk=)
                          3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: m6M1aJQP4A3gQ02xCkEHxQI8XaXpDculDx+d/2LUfO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
        Validity
            Not Before: Jun 12 23:02:08 2025 GMT
            Not After : Jun 19 23:02:08 2025 GMT
        Subject: CN=684b5c70-ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:e9:67:1e:3a:11:23:a4:cd:c9:40:39:3b:
                    eb:eb:95:1c:a2:ab:f4:ea:a2:97:6c:e8:22:38:9a:
                    e3:59:13:65:c8:ab:6f:ef:a8:e1:ad:cf:47:0b:bf:
                    11:ab:26:50:52:97:fa:90:f9:e2:16:e5:fb:c5:05:
                    8f:14:8a:1a:14:ce:27:3a:1e:dc:20:5a:c6:5a:5d:
                    0a:f3:45:7c:15:2b:79:27:14:7c:2d:fd:c9:0b:88:
                    18:40:ac:b1:b4:6a:e8:25:81:fc:ce:83:88:b8:17:
                    5a:62:88:9b:1b:e6:d7:14:ef:3d:ec:62:96:b6:c3:
                    94:c3:7c:37:9a:26:fd:02:8f:df:07:72:b9:53:5b:
                    35:6f:d9:47:cd:a3:9f:9d:30:07:19:5b:a7:eb:dd:
                    8b:e2:62:65:a0:0f:34:98:5c:90:49:e1:79:06:8f:
                    36:e6:c4:eb:88:03:ff:02:91:73:60:8d:82:8a:43:
                    13:02:d8:ac:28:db:32:35:f9:f0:6a:da:34:15:b5:
                    f4:c2:4f:b2:9e:c9:8b:02:77:07:22:31:24:5f:9e:
                    6b:6b:5b:3e:6b:90:b5:44:58:b2:e3:1d:d6:0d:38:
                    29:7f:a9:20:2c:47:35:3a:9a:64:cd:24:56:e5:93:
                    7b:c1:41:7b:a8:6c:12:77:9e:df:ec:a4:6d:0e:4f:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:B4:24:A5:A8:02:14:47:EE:40:07:2D:D9:09:DD:80:83:B6:C4
            X509v3 Authority Key Identifier:
                keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fe:69:2b:0e:94:99:e8:c9:6a:96:6d:d0:61:28:b8:5f:80:
         53:4b:75:c4:f4:c0:42:63:65:47:ca:db:bd:1a:de:39:3d:d3:
         72:5f:78:18:c2:2c:06:d5:b5:ae:d8:89:ce:91:41:ef:02:16:
         36:6b:3a:20:69:5d:95:32:77:ef:c8:50:ca:af:55:3e:f0:b2:
         21:01:6d:fd:f6:77:58:2e:1c:79:04:db:fd:57:54:f8:3a:89:
         97:8e:e1:7b:54:d4:16:cc:af:f1:5c:a4:40:b8:77:16:92:76:
         f5:63:ab:45:50:73:b7:f8:d5:79:81:3b:96:a6:ed:75:53:89:
         b4:92:fe:40:a7:74:2f:fa:ac:51:a4:f8:44:38:4d:c7:ed:d7:
         01:c2:13:c8:bc:3b:ad:16:6b:4d:27:78:b2:73:49:06:42:35:
         09:80:76:97:63:6a:f9:df:13:c0:74:d1:20:00:7f:8c:20:a5:
         4f:90:18:7a:a5:56:33:05:c7:f2:16:b6:40:9b:76:87:95:7f:
         ff:73:43:03:0b:35:f8:4b:13:d6:44:07:01:8b:1f:35:f6:5c:
         e8:db:3c:ad:3b:8e:a3:8e:6d:67:c2:a5:d0:e6:5b:93:93:21:
         b1:b4:3b:38:f8:e1:f5:20:cc:a5:39:3a:74:0c:27:d4:0a:76:
         2b:fc:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:36:34 2025 by rpki-client