Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          o8jOCgUq+J3mt+8YKXR1PlQAmRbYLMkgfM8Pe3Ge+JQ=
Subject key identifier:   6D:51:B8:90:90:2C:82:F8:53:C2:01:44:13:74:38:5E:13:93:10:42
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          07D7
Signing time:             Tue 22 Jul 2025 21:18:52 +0000
Manifest this update:     Tue 22 Jul 2025 21:18:51 +0000
Manifest next update:     Tue 29 Jul 2025 21:18:51 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: MCJpXApG5BgO9h8cJVdkNyuZdXx6h0dcXsRS7mgIo9E=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Jul 22 21:18:51 2025 GMT
            Not After : Jul 29 21:18:51 2025 GMT
        Subject: CN=6880003b-be53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:2b:e6:d0:df:7c:4f:c0:a9:7c:96:bb:f4:
                    8c:8f:cb:a9:7b:a7:e5:e5:aa:48:36:37:31:d5:08:
                    b1:0e:17:71:c9:3c:f3:e0:30:60:58:a2:9b:49:fb:
                    12:d4:da:e1:92:f0:ff:c9:85:7d:c0:b1:c3:e8:b0:
                    66:fd:79:b2:6e:4c:69:dd:99:5f:af:46:5c:68:ef:
                    9e:da:45:10:bc:91:3b:3c:f1:e1:12:77:39:e6:0b:
                    83:7c:64:8e:58:60:f0:52:2d:0d:b0:d3:18:1f:9d:
                    25:75:63:b1:3d:3a:34:19:df:4b:b3:eb:8a:a9:b2:
                    f7:85:4d:e6:d4:aa:7a:f3:a8:34:8e:60:aa:81:b7:
                    94:87:9b:f5:97:34:46:01:ed:c1:04:06:52:4e:bf:
                    b3:e2:56:4f:70:30:66:78:95:35:8d:6a:0a:32:ae:
                    ed:46:ab:f7:6a:de:48:b2:0b:ba:d2:08:3d:7c:48:
                    be:d1:8a:63:90:3b:03:b8:6f:8c:63:98:bf:14:90:
                    cc:eb:4e:4d:d4:06:39:82:9c:1c:f0:1a:ee:ab:db:
                    3f:cb:ba:08:b3:e8:c1:9d:71:ba:6c:b5:de:f2:7c:
                    c0:d8:8d:29:9f:3d:c6:f3:6a:28:44:22:37:8b:35:
                    58:b7:ce:60:1d:d2:a2:de:2e:bc:ea:2d:2b:dc:35:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:51:B8:90:90:2C:82:F8:53:C2:01:44:13:74:38:5E:13:93:10:42
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:31:4f:9b:2f:ff:00:d1:a5:35:4f:8d:1d:f7:a9:01:86:
         17:8c:04:0a:3c:f4:a7:0a:69:db:a9:0c:df:51:19:d0:47:dd:
         da:1b:ec:c7:0c:d2:b2:c9:e9:f5:50:66:c5:3d:02:fb:e8:6e:
         ee:27:3d:dd:27:c5:28:8f:3a:9e:7c:ba:bf:c7:cb:e7:80:9e:
         d1:a2:0e:dd:e8:07:d7:c6:46:54:d7:05:79:1d:5a:84:94:db:
         c5:e9:ba:f7:58:7c:4c:0c:e5:03:eb:dd:f9:2b:a3:ab:0e:eb:
         68:c9:44:e4:70:2e:d0:28:48:5d:33:e6:59:4a:9a:30:75:11:
         e5:69:99:17:e0:69:c6:ae:85:f8:f1:48:bd:8a:8a:5e:c4:81:
         20:4a:b9:45:30:9a:79:9c:4e:e6:1d:25:f2:f8:8e:5d:e4:9e:
         27:e1:3e:d4:e1:65:d7:41:ea:6c:5d:d6:78:3b:8f:ef:52:af:
         ef:d2:f0:f4:cc:a5:59:30:ee:d0:71:c5:25:66:a4:ed:56:07:
         97:d8:19:70:6e:52:38:4b:81:b2:78:ce:36:8c:88:56:03:f2:
         a6:e3:1b:43:b7:55:9c:c6:4b:97:1b:51:bf:22:bf:c3:c6:67:
         61:c5:bb:bc:e3:e7:4f:55:61:71:e5:b7:c2:58:08:46:d6:cd:
         0c:c0:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:19:00 2025 by rpki-client