Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
File:                     u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json)
Hash identifier:          Yor0/SN6rM/Je3MMllBrWwIWnCgZBhNBcEgEByYLVDc=
Subject key identifier:   67:6C:83:9D:F5:25:31:74:DF:C9:89:33:B1:27:1C:CA:03:DB:38:02
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       06DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
Manifest number:          06C2
Signing time:             Sun 10 Aug 2025 22:15:38 +0000
Manifest this update:     Sun 10 Aug 2025 22:15:38 +0000
Manifest next update:     Sun 17 Aug 2025 22:15:38 +0000
Files and hashes:         1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: sFu+hdUrqSsEZmylDkRYoSw967kq2hM0xKpOo7acYPI=)
                          2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: Y3wS66fd5YHhzaA4qhuEKsiBBLTblPlxdtXJBZSBnBU=)
                          3: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw=)
                          4: E959541EB28511ED8893C51CC4F9AE02.roa (hash: tDIvvxPbUPRWOTPf8MK/oVddDXGtUARS3nkFkQGylVE=)
                          5: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: 5kegnTpZ/e+xuAVwbs9IIOILhqAXZ4oODiLdY0U9IMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Aug 10 22:15:38 2025 GMT
            Not After : Aug 17 22:15:38 2025 GMT
        Subject: CN=68991a0a-9196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:1e:50:41:d3:81:ba:1c:de:fa:11:ed:5b:
                    0d:f5:5b:66:01:2a:e3:21:4e:9b:63:2d:7a:84:85:
                    d7:d4:0f:c7:8c:e8:21:77:4e:47:40:a6:57:79:6c:
                    65:6c:bf:db:64:f7:b1:bc:11:1b:ba:52:a7:16:3b:
                    a2:f7:cb:27:77:b8:e6:d6:25:e8:9e:e1:b2:56:93:
                    8f:fd:1e:dd:aa:71:25:b1:8c:86:26:f1:6d:79:9d:
                    ba:45:d8:dd:8a:54:87:75:e5:d3:ab:c0:52:0d:7f:
                    08:be:28:50:d4:7d:62:cf:b8:ba:ad:0d:e9:96:5b:
                    e3:d4:e6:e1:18:78:f8:b2:a0:35:7b:f8:79:2a:8c:
                    9e:c1:ea:0b:3c:bb:71:6a:1d:a7:01:47:fe:18:f3:
                    57:6a:a0:cd:cf:22:03:94:df:60:76:80:43:85:df:
                    d7:3d:96:c3:8f:c4:00:4e:73:af:bd:21:a5:90:4e:
                    7b:70:ec:97:c8:f5:3b:c5:de:ac:37:b9:73:28:b6:
                    19:20:e9:08:eb:0e:b4:c0:d4:cf:08:5e:4a:c4:63:
                    6e:14:62:03:00:3c:27:54:58:ed:70:e0:cb:5b:c7:
                    41:99:0b:01:b1:21:85:f6:cd:bb:82:b3:a8:59:e7:
                    f5:b0:09:ee:e6:c4:db:70:4d:15:00:8e:42:4b:d1:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:83:9D:F5:25:31:74:DF:C9:89:33:B1:27:1C:CA:03:DB:38:02
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:ba:51:bf:52:a0:82:32:37:e8:4a:8f:0d:05:e5:fc:12:
         10:96:64:75:f6:c2:f2:82:a3:81:7d:3e:18:cd:ad:21:be:49:
         c9:a9:b7:4c:e4:cb:54:7d:49:bc:29:34:85:a1:c1:db:b7:af:
         65:23:76:5e:08:9d:da:da:03:34:02:09:15:74:ad:be:68:82:
         ea:33:44:98:60:7a:2a:cf:91:15:c3:ef:ef:50:b1:2d:96:52:
         c4:d0:9b:3c:bb:4a:09:4b:9c:5d:2f:40:5b:53:fb:e2:65:7e:
         06:f1:0d:0a:80:cb:a2:90:5e:dd:10:59:6f:39:bc:93:9f:2e:
         4a:a8:64:58:88:9c:69:f5:c8:68:59:20:e8:cd:8a:4a:07:62:
         62:81:b3:41:88:61:3e:6e:54:fd:b7:21:6b:6f:30:fd:70:dd:
         ec:8e:ce:e8:92:83:74:31:6b:e4:aa:e0:7d:87:8e:57:48:22:
         3c:88:cd:c0:70:5b:23:96:cd:ed:78:75:bb:fb:c8:03:bb:09:
         11:66:81:2d:22:1f:71:db:9f:b3:1a:93:5c:59:12:52:7b:66:
         9d:12:e1:02:16:a4:6b:b5:71:ce:f6:b8:23:ed:cf:80:ca:51:
         04:b8:73:7e:f0:88:31:6e:5d:c1:be:94:bc:6f:24:00:f7:b0:
         b6:c1:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:05 2025 by rpki-client