Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
File:                     a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json)
Hash identifier:          LjfCqKqIF/jyrmHo8+xvMEM4cWxQ9SdFsnRC+lin3vo=
Subject key identifier:   B4:AD:3F:2B:D3:1F:2F:91:90:A1:15:F2:F5:C6:76:57:1E:D9:50:DF
Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
Certificate issuer:       /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
Manifest number:          0108
Signing time:             Mon 21 Jul 2025 05:16:51 +0000
Manifest this update:     Mon 21 Jul 2025 05:16:51 +0000
Manifest next update:     Mon 28 Jul 2025 05:16:51 +0000
Files and hashes:         1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: a4sizTAJIk4f/DSMlMxz9brgGrE489yA49KSjvN5bq4=)
                          2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
                          rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
        Validity
            Not Before: Jul 21 05:16:51 2025 GMT
            Not After : Jul 28 05:16:51 2025 GMT
        Subject: CN=687dcd43-470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:01:fb:8a:06:d0:33:bd:5d:44:dd:b6:00:a3:
                    1c:0c:61:0d:31:6a:76:9a:0e:31:db:f7:c8:84:78:
                    be:58:2e:35:d5:ba:f4:d6:1c:9f:10:7b:86:2e:8b:
                    b4:0a:1c:27:1b:20:6f:b9:99:b9:7c:62:8d:ce:e3:
                    63:99:3b:45:de:0b:7e:36:44:eb:7c:f4:67:53:b7:
                    1e:30:a8:02:9e:12:9d:34:52:d0:df:e1:ff:f9:cd:
                    7f:ce:85:cb:7a:d9:f4:6a:74:ce:ba:0f:17:bb:1d:
                    0e:0f:40:10:30:bd:1e:a6:d7:14:14:af:b1:fa:c9:
                    5c:56:55:f5:86:5f:6b:71:c8:03:29:19:04:7a:92:
                    c6:6c:68:b2:bf:e9:21:45:c0:69:f3:23:7f:d2:94:
                    b1:79:3d:6d:6b:33:47:f1:60:00:5b:f1:18:b9:89:
                    10:4b:5a:f6:45:4d:0c:ee:aa:b7:51:e5:66:3a:c1:
                    9d:73:42:34:61:e4:b1:cd:29:ed:cc:a3:7f:d8:95:
                    a8:ef:67:88:c0:8a:e2:e5:7e:0b:3b:0f:ca:e5:84:
                    41:0f:da:3f:1e:b4:9b:08:1a:cb:c3:c9:98:8d:90:
                    8c:57:46:a9:ee:11:24:30:84:b0:9a:68:c4:4d:72:
                    e8:46:0f:aa:7d:11:0d:d2:cb:42:06:ee:e3:f5:d5:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:3F:2B:D3:1F:2F:91:90:A1:15:F2:F5:C6:76:57:1E:D9:50:DF
            X509v3 Authority Key Identifier:
                keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:89:18:2b:f9:4d:01:e7:f8:3f:c9:7c:87:7d:5a:c9:ba:
         de:79:eb:27:e4:01:72:fb:c7:fa:72:3c:f4:a7:fd:79:7e:7b:
         ec:5a:7a:13:c6:a3:a9:51:64:34:a0:fa:7a:1d:63:2c:3a:91:
         1c:1e:59:f8:00:d0:93:0f:38:ff:d2:82:ac:44:27:e2:42:86:
         95:a6:f7:dc:e6:d2:d8:f1:93:4d:68:7b:d1:58:c0:65:86:28:
         1b:65:9f:e8:d6:98:73:fc:6d:d1:9e:56:27:74:02:1a:f3:ad:
         fa:d3:d5:e7:3f:18:e3:74:82:51:37:74:2e:42:58:18:90:a1:
         a7:93:aa:ac:fe:df:66:1a:ee:e5:8b:48:88:df:88:e2:36:b6:
         0b:77:b7:e2:91:f1:15:13:0e:1c:d9:df:49:3d:d3:4c:3c:8b:
         db:1d:25:22:96:72:35:36:71:ff:2f:5f:72:9a:85:65:61:12:
         bb:49:fa:e5:8e:2c:fe:5b:ca:3b:d7:43:fb:ee:d0:90:a3:42:
         f4:58:3d:8a:99:ad:77:c2:55:6a:37:97:0d:20:39:86:05:89:
         91:2d:98:e6:94:87:b7:9d:4e:5d:e9:f8:ba:31:ed:b8:9f:e5:
         03:9a:71:77:55:9c:ec:5d:da:f7:74:2c:1a:38:92:78:9c:f4:
         76:48:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:49 2025 by rpki-client