Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
File:                     DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json)
Hash identifier:          hK9lzE92EkvsgLxWzOI6dK8TCWzVIuBdMnAP81uMhDQ=
Subject key identifier:   9C:6D:97:0A:99:04:85:69:EB:5D:8B:D6:A6:F6:57:F8:14:D3:6A:6A
Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
Certificate issuer:       /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
Manifest number:          064A
Signing time:             Thu 24 Apr 2025 22:19:07 +0000
Manifest this update:     Thu 24 Apr 2025 22:19:07 +0000
Manifest next update:     Thu 01 May 2025 22:19:07 +0000
Files and hashes:         1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: U5FP+OIAnYlkD4B42HoZ1CTyxouDZveexMwz5VDcgXM=)
                          2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: /0E6jZ4+7bqUYrWrcsn+EsmkQL/Ndn9BT+YgQs7TIDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
                          rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
        Validity
            Not Before: Apr 24 22:19:07 2025 GMT
            Not After : May  1 22:19:07 2025 GMT
        Subject: CN=680ab8db-4113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:98:86:d4:4c:34:bb:b9:bc:93:39:1f:5b:
                    ea:da:ec:01:0d:f3:e7:c6:a5:d2:ff:30:5b:c3:ce:
                    28:52:9d:89:32:ce:df:1d:f4:a0:80:56:fc:df:58:
                    e3:55:7b:1a:31:9c:36:d9:05:79:94:95:ce:1e:fa:
                    b5:c8:9e:80:87:36:a2:f3:33:ee:6f:a4:e6:1e:13:
                    f8:7f:f8:9f:79:b7:9a:7e:29:9e:ee:c5:83:a7:30:
                    cc:14:56:8c:2f:6c:84:d1:5e:96:1c:f9:97:57:83:
                    dd:b9:b4:c0:8e:8b:0d:22:be:cf:a5:48:4d:c9:a8:
                    09:b4:e4:0e:d2:cd:52:4b:54:20:53:ef:d1:6f:eb:
                    7c:76:33:9c:49:20:b8:5d:c1:4d:4a:41:36:65:94:
                    cb:1c:51:86:b4:75:ac:28:89:51:b5:26:fa:43:00:
                    c6:ee:e1:42:a7:73:60:ef:06:26:5a:28:74:35:ea:
                    b6:37:1b:02:9a:8e:06:7e:71:4e:f2:d1:c2:d5:5e:
                    8f:61:ba:cf:04:91:ee:d4:f4:e9:30:87:d8:b4:ba:
                    8f:cd:3a:ce:c8:18:6c:cf:45:51:c3:51:d0:81:e2:
                    a1:ef:01:58:fe:12:b9:f5:09:f7:d5:7a:07:ee:c6:
                    52:59:63:57:79:27:6e:55:52:49:62:f6:cd:fd:07:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6D:97:0A:99:04:85:69:EB:5D:8B:D6:A6:F6:57:F8:14:D3:6A:6A
            X509v3 Authority Key Identifier:
                keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:07:99:9b:b3:b6:91:dd:eb:3d:fc:92:ea:fd:44:c6:fe:cf:
         c4:46:ca:93:d7:b9:d6:40:6b:d2:a2:65:35:bb:0d:93:ad:5d:
         8f:b1:17:2b:96:f2:80:b4:fa:a6:3a:0a:d9:4f:8d:0f:03:f2:
         10:9e:a4:04:1e:59:df:b9:e3:c3:4f:01:cb:69:35:7a:9f:1d:
         9b:50:1f:99:72:65:54:30:8c:e1:57:fa:ef:f9:57:a9:26:83:
         52:3e:30:95:b5:b0:1d:61:18:08:4e:19:af:15:d3:36:d0:9c:
         1a:ec:73:e8:6c:1d:9d:c3:be:9f:37:ed:8a:b3:e9:28:fd:b7:
         34:94:1e:61:a7:73:c3:06:7a:07:6d:6a:bc:b5:a9:04:dd:b4:
         05:b0:ae:4c:54:c1:15:e3:bf:9a:b1:ee:8b:03:2c:e0:8a:2a:
         e8:19:05:ab:b9:b7:96:f3:43:78:78:55:38:f3:11:94:0c:b3:
         29:e0:fc:4c:35:8c:90:be:fd:21:1f:6a:04:9b:48:1e:ae:47:
         de:75:a2:f0:18:63:08:cb:57:f6:d8:d8:84:7a:14:b6:93:6b:
         ba:d4:7f:f1:a1:2d:e8:7a:3d:fb:65:d9:e8:8d:ab:f3:bd:d5:
         6f:20:c8:cb:5e:e9:be:a8:43:f2:8a:36:b7:59:a8:39:ff:44:
         e6:ca:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:51 2025 by rpki-client