Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          7D6aDIZSGO896jlwcohssJjAxUolW49jdN8eSVPu28M=
Subject key identifier:   34:EA:7A:6D:C0:23:92:98:BD:8F:74:5E:D6:68:E4:88:09:11:15:45
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       078A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          0782
Signing time:             Sat 14 Jun 2025 21:14:02 +0000
Manifest this update:     Sat 14 Jun 2025 21:14:01 +0000
Manifest next update:     Sat 21 Jun 2025 21:14:01 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: +rLw0Dj8CKa9SfdVrc8mFZ4v0dURxVaM7Y8zmw+McNw=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Jun 14 21:14:01 2025 GMT
            Not After : Jun 21 21:14:01 2025 GMT
        Subject: CN=684de619-81d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:55:a9:b5:f2:02:11:34:e5:3f:41:0f:0f:
                    49:0c:72:96:22:aa:cb:60:ac:c3:5c:d8:98:fd:a1:
                    dc:17:63:6f:37:91:cf:4c:dd:92:95:ac:d8:d0:df:
                    d4:a0:87:4b:de:98:ab:5b:0c:f0:35:9e:69:2a:1a:
                    78:9a:ed:0d:8a:6b:97:8d:bc:e0:b8:77:42:51:18:
                    e6:bc:5c:83:c1:4e:17:45:fe:88:87:ea:fb:b9:e3:
                    f3:68:17:36:cf:38:f2:7b:7c:64:54:83:cf:02:ec:
                    d3:8f:27:ed:56:17:24:ad:e2:20:fb:30:15:a4:17:
                    ae:70:bb:db:5d:84:6c:52:cb:d2:5e:fd:66:43:0a:
                    f0:e7:19:ba:23:41:57:ce:42:99:2e:15:c7:c1:99:
                    98:40:05:dc:45:1a:bd:26:dd:97:14:c1:13:a7:f7:
                    79:f3:1e:e5:57:e9:ac:ff:f1:69:d1:7d:1b:9a:76:
                    e5:08:a7:3c:53:cf:5d:39:f0:c3:17:15:7f:7f:9a:
                    b3:d8:ca:d1:a8:e6:9d:5b:97:bd:bb:80:24:2b:82:
                    4d:fa:c8:a7:33:a1:16:4a:9d:b5:c8:dc:86:22:21:
                    23:93:ae:9b:06:af:2b:6f:80:94:b6:2d:2c:41:c9:
                    b6:4b:3c:19:66:9f:5e:8d:a2:e4:99:c9:5a:78:58:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:7A:6D:C0:23:92:98:BD:8F:74:5E:D6:68:E4:88:09:11:15:45
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:d2:1b:e2:73:a7:58:b5:27:fb:d3:1b:a0:a1:74:2c:74:
         31:ff:4d:87:4d:37:22:fc:fb:36:6a:9f:bc:d9:08:82:fc:3f:
         47:43:e6:ef:b4:2d:5b:c3:28:0e:10:40:27:98:6e:37:69:27:
         d8:09:82:19:e3:2e:3d:ef:eb:ec:0f:1f:61:4b:85:03:11:54:
         2c:50:38:41:1d:a1:59:28:48:2c:20:97:e8:0a:8b:4a:a7:51:
         42:57:2c:cd:d2:35:c1:54:e1:83:2a:84:83:d5:42:ca:6c:7f:
         0d:90:87:b9:17:bc:61:53:5e:6f:4c:4d:e0:93:5a:6e:b0:bb:
         fa:f3:d1:3b:45:26:8e:0c:2a:95:5d:8c:b6:f2:40:8f:8a:90:
         20:e2:48:91:6c:5b:47:68:ef:d7:0a:b1:0b:7a:de:05:99:35:
         c2:a8:80:40:8a:a9:ea:ab:7a:4c:ad:a9:2b:11:35:fc:2c:85:
         1c:51:69:48:65:9b:a9:17:b4:9c:f5:17:30:8b:c5:7c:01:56:
         ab:ba:0f:14:1f:f3:43:b1:7d:34:2a:79:a2:1f:16:59:31:bf:
         5a:09:5a:3e:75:d7:4e:e9:49:45:5f:a0:7f:c1:ff:81:a5:d0:
         92:a9:03:b9:ac:06:3b:89:23:61:a7:5a:4d:cb:38:8b:f4:9a:
         19:80:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:18:36 2025 by rpki-client