Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          6UB8T5p07c6B3rT8K0H9gBKaxCZdW/RiH4wXloCAHyI=
Subject key identifier:   05:5F:8F:BC:3B:8D:53:28:D5:67:F4:70:34:31:56:21:B3:09:37:E8
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          0199
Signing time:             Sat 19 Jul 2025 03:42:37 +0000
Manifest this update:     Sat 19 Jul 2025 03:42:36 +0000
Manifest next update:     Sat 26 Jul 2025 03:42:36 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: q2RP1/iOxeHbqP8+vUYlFX6FHBzFzQM4jdre5fLugB0=)
                          2: 9F79846406E911EE88450147C4F9AE02.roa (hash: VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=)
                          3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=)
                          4: E5925096093911EEABCFA170C4F9AE02.roa (hash: 9se4h5DVwbqK4ocwNJG41tqNbygd7PqouTQTwTnQqOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Jul 19 03:42:36 2025 GMT
            Not After : Jul 26 03:42:36 2025 GMT
        Subject: CN=687b142d-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:5a:4e:6d:34:53:28:58:5a:43:a9:54:df:
                    1c:b2:f7:b7:8d:f0:4b:71:c0:d6:e2:86:70:01:fc:
                    c6:4f:2c:5c:03:9f:d9:b9:9e:10:4b:60:68:79:72:
                    be:71:4b:53:b8:32:a1:09:f4:1b:47:90:62:67:2e:
                    38:44:5d:42:06:57:98:57:11:b0:11:4c:3d:fc:d2:
                    30:2e:c2:43:e4:23:03:67:de:9d:b2:b9:dc:7f:d6:
                    16:b2:73:e4:6d:6d:4b:4d:49:dd:1b:a6:77:20:35:
                    97:6a:67:49:17:2e:1f:87:79:4f:22:2d:fb:82:b3:
                    0b:d3:7b:df:98:08:dc:72:bf:16:b9:d4:8a:9d:e1:
                    14:49:6f:36:0b:fb:cd:90:ec:ce:b8:e7:3e:16:24:
                    27:6d:e4:44:28:ee:b4:27:54:89:49:51:53:45:b3:
                    72:ab:b9:dd:a6:8f:df:95:bd:af:ce:79:3e:0a:2b:
                    8f:46:fa:32:a8:31:ca:3f:4b:3e:94:15:de:73:0e:
                    dc:33:c4:d3:88:d3:14:37:1e:43:7f:d8:c9:72:6a:
                    57:b7:80:ca:81:c3:9e:9f:b2:cc:77:25:df:bc:af:
                    6c:f0:6d:3c:ff:17:8e:7d:7a:d4:9b:25:d3:6f:69:
                    56:6b:f9:93:8f:98:71:3b:97:54:bc:b0:33:1f:47:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:8F:BC:3B:8D:53:28:D5:67:F4:70:34:31:56:21:B3:09:37:E8
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:12:dc:f8:57:c1:19:24:b3:8c:29:b5:b8:a8:e0:f2:83:4d:
         60:55:cc:ba:fc:3b:e7:a2:39:5d:98:f9:c7:26:d1:d5:10:06:
         fa:85:88:d0:2c:47:1e:c1:d6:9b:c0:35:f2:6c:8f:d5:01:62:
         5b:db:5e:69:64:77:2c:48:23:41:5d:70:7b:3f:e7:42:0a:e2:
         1e:d6:4d:1d:f0:a6:b1:4e:28:8d:02:1d:6e:0d:a5:e3:76:8f:
         a8:06:7d:d6:46:e9:63:9c:8f:12:3d:f7:9d:3b:b9:b6:e8:7f:
         21:b0:bd:2c:9c:8b:f2:4d:e0:8c:0a:33:5d:ec:24:6a:11:7b:
         3e:94:1d:58:bf:42:32:e1:27:22:6f:f7:c5:99:d9:7c:90:48:
         40:3d:3a:6d:d3:d5:3b:79:6d:1a:4b:88:fb:b4:ec:be:71:12:
         9b:c5:c5:67:7e:12:94:fd:02:e0:72:fb:0a:86:3c:d1:f1:d9:
         b5:d8:9f:c4:b6:a1:c8:83:8f:c6:5b:d3:6b:29:c2:b4:94:43:
         6a:97:64:10:4b:cd:60:0f:2f:56:11:6c:7f:f7:f9:53:7b:a1:
         e8:92:e8:12:64:11:0c:73:9b:3a:2f:4d:3a:a8:bf:c0:68:d1:
         66:3e:4a:8c:06:73:9e:b5:41:af:bf:b3:03:9e:c3:e1:6a:a9:
         22:4d:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:24:36 2025 by rpki-client