Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
File:                     6D_PTG_I1087arQlYG4rx3RtZkA.mft (raw, json)
Hash identifier:          8RK0i5MrkYQjs2Cq5rz0O0wmX/LjTuhrbPrPuuPu/AI=
Subject key identifier:   41:55:67:A2:99:99:B1:80:D4:2E:BD:05:46:7D:3B:4F:30:7F:4E:82
Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40
Certificate issuer:       /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
Manifest number:          0876
Signing time:             Thu 24 Apr 2025 20:34:47 +0000
Manifest this update:     Thu 24 Apr 2025 20:34:47 +0000
Manifest next update:     Thu 01 May 2025 20:34:47 +0000
Files and hashes:         1: 6D_PTG_I1087arQlYG4rx3RtZkA.crl (hash: HXTNbzXLYdfbUC0lufh1LqkkNa83lYyZ9Lb6LLiryNY=)
                          2: 92154C46E3A511EF975A3E75C4F9AE02.roa (hash: R4XkJZ6yKJaD7Jsy2Ux5dYzpABd70UuwWtVPRKn1YjY=)
                          3: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (hash: gVQKifnCnYrJCXwjiQ6wAan+E1SDbIkqSVrqLa2fv58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640
        Validity
            Not Before: Apr 24 20:34:47 2025 GMT
            Not After : May  1 20:34:47 2025 GMT
        Subject: CN=680aa067-d4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:28:61:3d:39:24:58:48:f9:5a:de:cc:18:
                    51:de:2e:36:c2:83:68:7b:22:f8:9e:0c:10:f4:40:
                    03:79:8e:d1:f5:38:b0:78:bb:ae:6d:52:3a:9a:68:
                    1a:82:09:25:19:32:7d:57:3c:22:2e:62:03:71:c7:
                    00:54:9b:53:ea:59:4b:d7:82:1c:b1:b8:10:04:8a:
                    70:bf:46:f7:af:07:eb:9d:81:a3:8a:45:05:8e:8c:
                    a5:da:e7:ef:ad:11:f3:d9:b8:e5:88:fa:bb:8d:2c:
                    5e:a1:59:28:b9:fd:2a:01:7f:00:c2:0b:f3:f4:c8:
                    15:5a:c4:88:e6:f5:50:9f:2f:a5:05:c0:be:69:19:
                    13:97:95:07:88:3c:ad:dc:1a:d1:ff:bd:f4:0a:3f:
                    44:a3:4f:d5:7b:ed:51:8e:41:e6:b5:cc:cd:1c:7a:
                    c4:1a:50:d9:0d:50:57:6d:2a:ae:be:83:e2:20:49:
                    c5:7f:f0:d4:60:20:b0:20:83:07:21:53:f9:5d:b7:
                    ad:4c:a7:f0:0c:5b:b5:9b:73:34:8f:fa:cb:50:fd:
                    5d:2d:41:aa:95:7c:1a:c6:04:e9:2b:19:23:42:b3:
                    24:4d:7e:98:0b:3d:90:07:93:ba:7a:70:d3:c0:b3:
                    1e:0a:4b:9a:e4:8e:78:06:3f:58:99:fc:c5:9f:27:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:67:A2:99:99:B1:80:D4:2E:BD:05:46:7D:3B:4F:30:7F:4E:82
            X509v3 Authority Key Identifier:
                keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:98:4b:d7:25:a2:55:a1:10:09:75:93:56:95:a4:39:29:
         02:6b:c9:d9:58:0e:2a:26:66:a0:28:67:54:71:08:66:11:59:
         4a:51:a8:63:8d:92:87:4e:46:37:26:bd:72:05:58:55:b6:e9:
         13:3b:4a:d7:df:d3:ee:f4:4d:41:79:5d:79:01:fe:b4:dc:7f:
         bd:68:b4:ec:c4:3a:a3:be:ad:e4:e5:35:d7:d4:30:c6:6c:f0:
         fd:96:63:2b:19:50:e7:94:75:d2:47:1f:95:09:0d:dc:14:fc:
         7c:43:c1:fa:24:75:e3:d7:4b:3d:fc:ad:eb:80:27:4b:f4:17:
         03:1b:94:72:ad:63:67:62:b5:0a:1a:d7:cb:13:26:f0:f3:91:
         5b:34:76:1e:32:7f:3d:08:bf:3f:ae:79:cc:70:33:75:f4:84:
         54:16:8f:92:48:3f:3c:71:f7:a7:63:28:ff:81:f3:83:f0:52:
         4c:7f:cd:63:7e:b1:ed:70:17:46:9a:c5:82:9d:4c:49:1e:6a:
         04:41:5b:e1:d6:57:95:78:4f:91:aa:53:69:4f:0d:c5:80:51:
         c5:2b:eb:2b:6c:e4:2d:58:b0:5d:b2:43:e0:97:da:89:b4:40:
         09:d2:00:b2:7f:13:09:9b:44:49:65:68:7e:e0:99:16:67:41:
         d2:11:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:42 2025 by rpki-client