Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          B3/IDQ8kpIjOV+EIYR2RdawIsisfkY9JtuTOk15aFp0=
Subject key identifier:   DC:CD:C9:07:3A:7B:18:C4:F2:CB:F7:E4:0F:44:B8:29:75:24:3E:FA
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0CCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0CA8
Signing time:             Sat 14 Jun 2025 18:06:56 +0000
Manifest this update:     Sat 14 Jun 2025 18:06:56 +0000
Manifest next update:     Sat 21 Jun 2025 18:06:56 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: Cnhu1d0ye/8QbQR1wSFkUSvnDvDk3/HRWak6sS3ur5o=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Jun 14 18:06:56 2025 GMT
            Not After : Jun 21 18:06:56 2025 GMT
        Subject: CN=684dba40-c93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:65:fd:a7:6c:41:a7:ab:18:da:2b:2f:09:
                    ee:79:c8:db:92:79:54:36:9c:58:46:ee:c4:ed:e0:
                    fb:46:56:09:1c:d0:4a:58:54:02:de:a6:79:95:75:
                    f9:50:6a:36:c1:6c:0f:0d:79:f8:f8:d6:32:09:10:
                    49:d3:4e:1e:87:b2:5d:e2:2e:b9:69:8d:9e:59:43:
                    69:e4:48:d3:02:d4:9e:cb:75:3f:5e:85:be:13:bc:
                    bf:52:7b:3e:b8:60:3b:eb:9d:9b:7e:c5:d7:ba:9a:
                    f7:76:93:34:e8:43:82:db:2e:35:f1:bb:e7:45:e1:
                    5b:df:db:3a:8e:d2:14:e8:15:00:6f:28:be:49:4f:
                    9d:a3:49:f3:4f:9b:6c:7d:7d:ff:3a:b0:a6:dc:59:
                    29:b6:d1:13:14:c6:ba:f7:05:db:84:f4:91:a2:e7:
                    ca:8e:eb:f2:dd:be:64:d9:ce:12:aa:e3:04:6f:f3:
                    73:2d:4a:cc:c9:40:2c:8c:bd:e5:e9:2a:d9:9b:9b:
                    f6:77:a8:a7:3c:3a:d2:8c:2d:2b:8a:30:99:4d:eb:
                    8f:06:68:58:f6:50:6e:f8:f9:43:c4:a7:80:88:8c:
                    81:02:3f:fd:36:c2:90:49:df:9b:d4:bc:77:8f:16:
                    0c:4c:c5:be:9f:41:c4:87:8f:97:ec:e0:0f:78:9e:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CD:C9:07:3A:7B:18:C4:F2:CB:F7:E4:0F:44:B8:29:75:24:3E:FA
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:3a:88:83:16:6b:2a:9a:01:2d:1f:26:35:46:89:17:e7:2e:
         ad:dc:cd:31:65:f0:2e:19:4c:62:c3:9a:d5:bd:6e:8e:2d:44:
         88:e3:03:ac:10:e5:0a:50:c7:58:f3:b0:5b:4d:d0:d0:fe:92:
         53:c9:72:c5:86:8e:96:50:28:26:63:bf:53:30:19:56:4e:7c:
         b1:e7:ab:8a:c3:10:46:49:11:0f:31:18:3d:1d:d6:35:15:2d:
         c9:cb:c6:f6:f3:89:67:a0:8d:93:23:2c:18:86:68:32:dc:18:
         32:84:d5:8d:21:07:7c:aa:10:db:b8:d8:8e:51:19:5a:ee:3f:
         79:f2:bf:be:70:14:73:82:80:43:db:12:86:f8:1b:34:a9:d8:
         24:f3:10:b1:55:30:1d:74:27:6e:62:b4:75:40:ba:da:f3:74:
         8c:46:0a:20:79:8d:27:c5:8a:c6:b8:64:fa:02:ff:3d:8c:5d:
         1a:d9:cf:aa:a5:85:06:a9:af:03:60:ee:d6:e3:af:cd:af:46:
         1f:b5:f2:5c:26:e9:a5:8c:de:4d:dc:cf:af:fe:7a:6c:57:ad:
         53:db:4c:7c:23:75:f5:ac:14:ca:1d:a0:ed:37:00:0b:bc:03:
         6e:8c:35:0c:45:d4:74:1c:3a:e0:e8:90:6c:9f:c4:50:e6:ee:
         13:97:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:05 2025 by rpki-client