Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
File:                     a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json)
Hash identifier:          HqK5N/sGXCdg/mimtskzML55sXOoaAvapVha3olqC88=
Subject key identifier:   D8:B0:85:3A:0B:48:07:BD:93:8C:46:6E:EA:81:7F:C7:5A:E3:F5:E8
Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
Certificate issuer:       /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
Manifest number:          0109
Signing time:             Wed 23 Jul 2025 05:24:02 +0000
Manifest this update:     Wed 23 Jul 2025 05:24:01 +0000
Manifest next update:     Wed 30 Jul 2025 05:24:01 +0000
Files and hashes:         1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: Dp5czjhxKHzn2wMG4xLEOJ+nRMBWeD1nap396N6R39U=)
                          2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
                          rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
        Validity
            Not Before: Jul 23 05:24:01 2025 GMT
            Not After : Jul 30 05:24:01 2025 GMT
        Subject: CN=688071f1-783c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:2d:d9:5e:66:c3:36:5e:30:2b:68:8d:7e:
                    cc:d7:e7:8c:d1:a2:e4:3d:a8:52:21:7e:9d:cd:35:
                    2f:8b:91:ea:16:9a:3a:d6:df:32:cf:7c:50:9c:75:
                    c5:9a:1b:58:a1:d6:b6:7d:52:23:77:f1:60:c4:aa:
                    21:a7:e6:ed:d4:b9:64:a7:c9:1a:1a:0b:d3:73:9f:
                    3e:36:1b:06:d5:27:21:d3:54:8a:fb:4e:f6:1e:57:
                    98:38:0b:93:85:04:08:22:21:1c:a4:44:df:4a:8d:
                    d1:92:6e:fe:8b:9a:b2:16:47:df:dc:26:ad:ed:a3:
                    0b:a2:f0:ca:30:c7:63:fc:67:fe:35:63:86:ae:6b:
                    f0:13:fd:d9:04:d4:36:cf:72:32:83:ab:29:53:3a:
                    20:06:dd:e8:cd:f2:25:9f:26:95:50:4c:75:18:37:
                    ca:bb:eb:b5:80:bc:37:17:f8:1e:2c:86:d3:a8:67:
                    5e:0b:f7:30:0e:18:59:e1:b0:a9:0b:0b:8a:d0:2c:
                    42:05:6d:76:ee:66:04:8e:e8:c3:b2:ce:18:62:23:
                    00:db:1d:3a:b1:75:43:5f:9c:5d:e3:ca:c5:98:f7:
                    79:62:6e:f3:a2:8a:54:77:1c:0c:04:d0:a6:24:95:
                    3d:de:07:51:f6:57:c3:54:33:5c:87:43:37:0b:34:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:85:3A:0B:48:07:BD:93:8C:46:6E:EA:81:7F:C7:5A:E3:F5:E8
            X509v3 Authority Key Identifier:
                keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:01:ac:8e:f4:5a:2e:98:14:50:cd:95:b9:20:df:39:ca:
         b4:bf:4c:8e:a0:1e:51:7a:e5:28:1f:10:08:af:0e:3d:82:c8:
         b0:5c:dc:d3:8d:e8:e6:84:cc:f8:1a:08:5f:ff:cd:a7:b3:bb:
         4f:c3:49:16:55:c7:b6:a8:a5:a0:7a:a9:e9:57:aa:a8:1a:c0:
         6a:2b:d4:bc:7f:bc:a2:a9:8d:17:1b:bf:53:c1:f7:43:3f:77:
         08:13:b2:88:b6:e2:87:9b:bb:c9:27:16:21:7c:a3:c3:4a:9d:
         e2:47:f7:73:29:5e:75:ec:7a:d0:99:2a:bf:3e:64:0e:89:c5:
         46:2f:48:77:35:00:c8:ab:88:83:d9:2b:d3:77:88:d3:35:99:
         52:ed:dd:56:19:ea:c5:ea:be:86:f0:78:0f:36:af:73:e0:34:
         4a:04:36:0d:57:d3:ba:d4:1d:05:f7:21:b7:80:ea:e7:e1:50:
         1e:90:31:9c:66:c6:00:12:5a:cc:5b:73:b4:28:73:4c:8e:33:
         57:7b:91:49:80:60:60:b8:ce:b2:d3:c2:c9:5e:73:b4:18:41:
         5b:e6:11:5b:c8:1a:10:ed:a0:6d:07:78:da:59:ad:28:61:b3:
         b1:fb:ae:94:ec:17:9c:ee:4d:97:28:33:e5:69:18:7d:81:f5:
         8c:a0:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:03:15 2025 by rpki-client