Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
File:                     k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json)
Hash identifier:          q9wFY5OJD8VLCfBs6YRg4DAlmedt2JNOh2Kf8G2xweM=
Subject key identifier:   E7:6A:5C:78:09:36:D6:F8:BF:8D:2D:71:EF:D7:87:C2:55:22:CB:AB
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0C0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
Manifest number:          0C06
Signing time:             Thu 10 Apr 2025 18:37:15 +0000
Manifest this update:     Thu 10 Apr 2025 18:37:15 +0000
Manifest next update:     Thu 17 Apr 2025 18:37:15 +0000
Files and hashes:         1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: yfx6gB2ipiUwGENdED7TRPiUEhLOAwMJQZxlEP8bThA=)
                          2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: L5tqJHyg+8gIFIm1ykvt4HmQLazog9tmOzpHF2+Hn9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 18:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3083 (0xc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: Apr 10 18:37:15 2025 GMT
            Not After : Apr 17 18:37:15 2025 GMT
        Subject: CN=67f80fdb-c7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:ee:12:f1:60:19:fa:64:89:97:70:35:97:
                    e2:74:29:a7:5f:7a:34:35:9e:9b:58:22:cd:82:5f:
                    d5:7a:e6:7b:db:89:f2:0a:ba:56:a5:fc:b9:bf:f7:
                    29:f9:5a:39:88:79:e1:f3:ca:6c:95:7b:de:42:2d:
                    f4:13:e3:4e:ca:00:14:02:60:e0:55:23:4a:78:bc:
                    c9:d5:8d:63:a5:9b:0b:0d:f5:65:b2:53:d3:da:19:
                    bc:ce:ac:32:19:39:60:e8:22:08:b5:a7:cf:fa:48:
                    31:a8:1f:af:a4:52:c7:12:71:b9:0a:ac:0f:c4:81:
                    e6:54:db:3c:8a:57:2d:4b:16:4f:61:61:f3:31:dc:
                    6b:10:5e:79:e7:02:30:40:25:d6:78:cd:0a:db:61:
                    ae:18:23:c9:69:15:e1:6f:66:71:47:ff:5e:27:d8:
                    9a:84:b8:a7:33:e2:8a:68:d0:16:ee:dc:9c:58:09:
                    e0:2a:b8:c9:7c:1f:04:4f:25:73:79:88:5e:90:cd:
                    a3:f0:c6:9a:0f:94:6f:b2:6e:ab:d5:55:d2:bc:a8:
                    f7:3d:29:16:fa:93:e0:ca:f1:45:c2:47:23:f8:8b:
                    24:a3:a9:68:12:33:c5:2d:51:5c:ad:7e:dd:73:55:
                    28:40:96:90:f6:f6:65:25:12:9b:bf:4d:dd:64:e2:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6A:5C:78:09:36:D6:F8:BF:8D:2D:71:EF:D7:87:C2:55:22:CB:AB
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:94:cd:a8:db:e1:f3:d8:e8:a4:a7:ad:14:d8:5d:20:b9:70:
         9d:9f:05:4a:67:7e:4c:6e:f7:34:96:e2:b2:e9:88:8d:51:70:
         87:cb:36:7b:8f:9e:7d:6b:f6:6a:1f:39:e6:8b:84:0b:7c:af:
         95:79:a6:21:e7:86:19:7c:1c:7a:cd:48:78:dd:74:e7:47:5a:
         5c:64:f4:32:5a:6a:53:47:bf:79:ef:d9:eb:c7:2e:44:36:ce:
         ef:7a:a0:09:44:c5:47:3e:91:49:18:16:88:f5:00:7b:6a:e0:
         20:48:63:ec:d7:5e:37:e9:4c:61:a5:2f:df:30:54:e3:37:ca:
         7d:aa:b3:7f:43:ab:a7:e9:f1:ba:66:a4:ed:ef:03:d2:51:98:
         74:39:28:56:72:f4:44:dc:5f:76:34:e4:8e:f6:60:99:33:b0:
         cb:db:5f:17:d1:14:4e:51:6e:05:f1:e5:b4:be:3e:ad:a0:16:
         fa:b3:ec:4b:e5:73:cb:73:e8:c4:4e:9a:14:69:8c:b9:2a:2a:
         0f:f3:93:11:5a:2c:09:b8:0f:e4:a5:38:8d:5d:72:8a:71:d9:
         41:a4:32:c3:07:6b:e3:b7:c7:c4:3b:9b:16:c3:f9:43:63:db:
         90:bf:2f:6b:5d:5d:3b:46:88:f7:7c:33:58:bf:d5:7b:df:85:
         6b:fd:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:11:53 2025 by rpki-client