Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
File:                     C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json)
Hash identifier:          4o9t7n1vNk/q+68VnhK2QhePOw1gV8tKQEHxOas2xZk=
Subject key identifier:   1A:09:61:39:A2:4C:00:56:F9:BA:C5:CC:B3:39:8C:EA:30:AB:C4:BA
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Certificate issuer:       /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
Manifest number:          75
Signing time:             Tue 07 Oct 2025 07:06:56 +0000
Manifest this update:     Tue 07 Oct 2025 07:06:56 +0000
Manifest next update:     Tue 14 Oct 2025 07:06:56 +0000
Files and hashes:         1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: uod5BGmLdBCLT78nVTg3qU7l9u6VgKgFupvPt0kDHZY=)
                          2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=)
                          3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
                          rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 07:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
        Validity
            Not Before: Oct  7 07:06:56 2025 GMT
            Not After : Oct 14 07:06:56 2025 GMT
        Subject: CN=68e4bc10-f93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:a1:37:12:8d:5e:3e:3c:33:98:34:f3:cf:
                    1e:0d:a7:73:38:63:ec:f3:74:57:59:ed:7a:bf:6e:
                    f6:b7:7b:90:0c:02:16:13:20:45:8c:9a:a4:0f:b7:
                    a5:13:70:e0:bd:e8:17:da:f5:4b:cd:e4:52:dd:d7:
                    f8:9d:2b:26:ba:1a:fb:2d:6b:25:60:55:03:85:fa:
                    64:33:05:61:e7:98:19:36:bd:12:e3:6a:e1:0b:8a:
                    4d:16:9f:60:b5:3e:1f:0f:53:4d:ca:66:04:ea:58:
                    16:ef:9c:34:50:53:01:aa:d2:21:f1:45:87:28:c7:
                    70:4b:2d:11:21:15:82:50:32:3d:30:40:22:65:de:
                    d1:24:7f:0b:6d:62:81:12:8f:60:79:f9:e1:45:c4:
                    76:88:15:c8:d3:2f:17:0f:ed:0f:26:c3:68:f9:a0:
                    d6:52:6d:6a:00:68:f5:ab:0c:fc:ce:f3:86:a4:d8:
                    31:fe:df:29:7e:0b:f6:24:6c:39:dc:49:e0:c6:37:
                    78:1a:a0:96:cb:a0:e9:ba:6e:7b:f9:4a:25:d1:12:
                    d0:09:a5:ea:f9:ae:52:75:cd:6a:b4:a0:2a:fc:0e:
                    cf:5b:af:b2:b5:eb:79:d9:a9:ce:b2:9f:a2:14:00:
                    40:a1:7d:25:7c:0e:00:04:66:40:79:b1:9a:c5:da:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:09:61:39:A2:4C:00:56:F9:BA:C5:CC:B3:39:8C:EA:30:AB:C4:BA
            X509v3 Authority Key Identifier:
                keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:a9:27:b3:29:e5:dc:68:92:e6:5b:23:8d:23:7b:92:bc:
         76:b6:1c:ea:08:ee:0b:d6:7f:f4:a9:23:92:56:f6:f1:d1:80:
         40:4d:ba:c4:87:02:af:9b:5f:0e:22:20:22:f7:d5:a0:e0:97:
         f5:d4:c2:7f:43:f4:85:74:ea:7d:19:86:e1:33:df:85:44:8f:
         93:1e:f2:68:68:3d:c0:1f:51:a7:ee:90:81:73:cd:f9:ab:d7:
         f3:e6:36:02:b6:90:8a:7d:f8:43:ee:b1:0c:8e:0b:23:b0:5a:
         84:8d:02:e1:9e:b3:99:66:af:a3:77:6b:83:46:a7:65:da:22:
         d2:92:ea:37:c4:08:37:23:2b:21:d6:2b:62:49:96:93:ff:29:
         f0:33:dc:d7:ab:19:60:91:4d:fb:af:2e:e3:49:41:82:ba:03:
         33:1c:ce:f9:77:89:0f:35:21:2f:c2:eb:48:46:c0:50:3d:f8:
         0d:e6:7c:51:57:e4:2a:d0:f9:0b:99:51:8e:f9:80:c1:6a:2c:
         27:fa:cc:40:cb:92:2a:9f:24:cf:b2:07:7f:93:78:dc:ad:87:
         97:e3:18:67:0d:cf:8b:66:26:33:4d:47:d2:a1:8d:9c:ff:fb:
         e6:7f:2d:69:74:8e:db:84:3b:57:aa:4a:5a:3c:b8:2e:35:c9:
         98:c3:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:05 2025 by rpki-client