Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File:                     KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier:          kRQZy6/F34QRkcxEcssYQjkJaQOCrG8QnkvdmkGkUfI=
Subject key identifier:   2F:47:FD:53:C2:54:8E:1A:80:23:6F:B8:D6:7C:79:3B:31:C0:2E:4B
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number:          0A3F
Signing time:             Thu 24 Jul 2025 19:53:13 +0000
Manifest this update:     Thu 24 Jul 2025 19:53:12 +0000
Manifest next update:     Thu 31 Jul 2025 19:53:12 +0000
Files and hashes:         1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: tK5I5HTQfJNpoJOfjgXJLX0wuoAtTl3dh5zrDrjPaMo=)
                          2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 19:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Jul 24 19:53:12 2025 GMT
            Not After : Jul 31 19:53:12 2025 GMT
        Subject: CN=68828f29-e869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:20:57:02:39:19:c4:02:77:0a:6c:9a:65:
                    b8:df:26:fb:63:23:c2:22:e8:77:ca:d4:bc:1c:4c:
                    54:01:95:b9:94:a6:48:7a:28:74:33:3b:24:b8:6f:
                    da:c5:70:d9:ff:3c:56:b9:46:3a:14:e0:bf:b2:de:
                    05:30:b1:5e:f1:7b:4e:c0:6f:3f:ab:4c:b1:13:80:
                    b9:d3:a6:94:a4:8b:7a:e8:d8:7a:77:9f:03:cc:04:
                    8f:31:20:f2:c4:7e:e5:d4:0d:0d:18:12:6b:23:24:
                    2e:ae:c0:a5:2f:d6:2e:fe:4e:b8:a1:6c:b7:4f:25:
                    e7:52:23:bf:11:40:a6:d1:5f:b0:e2:ea:c7:1b:f7:
                    4b:fb:e0:d8:81:db:af:1d:36:85:1f:e8:a9:17:42:
                    80:1a:82:08:75:1c:82:68:3f:61:c4:bd:6d:ad:6e:
                    4e:54:ee:4d:44:91:ae:fe:44:73:f3:2f:02:bd:a1:
                    e6:1d:28:15:63:61:9b:54:c5:34:78:1d:cb:e5:50:
                    9e:0e:54:d7:ca:31:ee:53:9b:38:4c:de:48:85:63:
                    cc:b7:60:a3:45:db:a8:45:51:c3:5a:48:6a:33:70:
                    0d:5e:c7:71:dc:52:11:e1:9d:42:83:b0:cc:a7:2b:
                    5c:8a:34:32:e8:c6:41:96:d9:b3:ba:63:a5:a5:af:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:FD:53:C2:54:8E:1A:80:23:6F:B8:D6:7C:79:3B:31:C0:2E:4B
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:4f:ac:7c:4e:4f:57:9a:83:e6:c2:69:f2:8d:7e:1b:0f:
         ab:d6:9d:c8:0c:72:b5:ff:73:52:1a:a5:bc:3e:47:27:11:08:
         f2:e5:c8:db:2f:47:7a:7f:eb:a2:cd:09:6f:51:74:b3:b2:85:
         37:ff:63:48:ed:5d:04:02:a3:8e:06:bd:c7:43:82:01:c4:4e:
         e0:70:1a:6d:1a:7f:cc:5d:62:43:dc:08:b5:79:cb:22:ea:76:
         aa:46:ed:74:62:4f:f7:49:14:09:82:0d:59:e6:a4:85:aa:54:
         9b:9d:6c:a3:cd:0d:95:33:e9:5b:c5:8e:dd:f2:7b:d9:62:16:
         14:39:2f:95:52:80:e0:a3:d5:1d:82:61:46:e5:94:45:53:1c:
         07:92:06:6e:ea:71:ce:c9:66:58:b1:c5:1b:1a:57:04:93:f3:
         92:82:2b:58:fb:30:d4:2b:cd:ab:16:b3:6e:4c:a7:b7:47:e6:
         39:7b:00:8a:7f:1f:d4:2e:e6:93:6d:b8:d3:17:8b:29:0f:d6:
         f3:b7:44:f1:d6:d3:b1:90:f4:bd:72:e6:32:52:e0:15:58:6c:
         3d:b5:3f:27:53:ee:2f:fa:c6:b1:25:5d:f9:c0:93:61:60:c1:
         da:a5:0d:ae:e9:2e:11:43:0d:aa:b1:f1:4d:d8:f0:74:5e:50:
         79:f1:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:01:50 2025 by rpki-client