Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
File:                     6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json)
Hash identifier:          5x6M0OAwU8ZlV3pJ/H+SB/YB+bdmlg5sC0zkKFq+BZc=
Subject key identifier:   86:80:AA:BD:DB:5F:49:5C:FE:9E:13:2D:5D:C4:79:F7:07:D2:AF:87
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
Manifest number:          07CC
Signing time:             Wed 02 Apr 2025 21:04:23 +0000
Manifest this update:     Wed 02 Apr 2025 21:04:22 +0000
Manifest next update:     Wed 09 Apr 2025 21:04:22 +0000
Files and hashes:         1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: Hi9jQkY6eRAxAUbDedaOKnlszr55TIxxrZpPrS9itlM=)
                          2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: 8/9NmjJSzWwLgBSh9ZIA8mU7QUTPCv3Je8e4MkPOAoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19
        Validity
            Not Before: Apr  2 21:04:22 2025 GMT
            Not After : Apr  9 21:04:22 2025 GMT
        Subject: CN=67eda656-74cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:72:e4:c3:40:2a:76:5f:22:d2:5a:6b:49:
                    e7:91:42:4f:fa:22:d1:22:f6:91:ee:05:fb:7e:ea:
                    e7:9f:92:8a:d6:fc:8b:ce:28:6f:d6:c0:15:c3:6f:
                    38:ad:c5:0e:be:1f:38:6d:14:20:2a:b1:9b:da:f1:
                    d5:b7:fd:39:a7:d1:cb:b9:dd:d0:06:d2:f0:82:a2:
                    7d:e0:6b:6f:7e:e9:75:c7:9e:b8:d1:1c:60:bd:f2:
                    89:ee:e7:fb:aa:05:25:f4:44:ab:7f:75:57:24:72:
                    65:3d:57:81:94:fb:7c:26:72:17:da:5a:4f:7d:7d:
                    54:0d:42:f6:ff:ca:d6:bd:ee:f3:85:a5:04:b0:73:
                    a6:f4:b7:91:b2:84:29:dc:2d:93:bb:ae:d6:43:02:
                    25:b0:d7:00:1d:a8:4b:68:43:ec:64:e2:fa:21:5a:
                    cd:e0:10:1c:4c:90:d9:79:ff:7b:46:f5:a5:0c:d2:
                    a8:0e:9e:8a:32:75:ea:37:f0:27:ce:23:82:19:95:
                    e8:c4:1f:2e:38:50:22:06:3b:ae:c3:8f:ef:f4:a4:
                    12:8e:75:ac:9e:64:ea:e0:f3:38:54:3a:51:08:10:
                    f4:ef:d3:91:99:7f:6d:d1:b0:f0:6d:28:ae:11:f4:
                    bf:8e:22:18:8a:c1:37:ad:36:3c:f0:9d:87:cf:46:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:AA:BD:DB:5F:49:5C:FE:9E:13:2D:5D:C4:79:F7:07:D2:AF:87
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:30:f4:74:aa:5d:4d:96:10:d9:60:fc:bf:77:ce:a0:db:
         29:f5:2e:99:1f:8d:df:58:01:fe:52:77:7e:50:41:17:9f:9e:
         fd:53:c4:b9:3d:79:e9:c2:66:30:5c:25:4e:57:82:bb:b0:7a:
         f6:12:f3:22:da:2f:6d:73:7e:bf:7a:e2:ca:98:49:8b:a9:91:
         bf:8c:7c:fb:de:fc:22:f9:d8:d7:f8:6d:1c:53:41:2a:57:99:
         4d:eb:e2:17:96:50:46:a0:cb:23:72:e5:8a:48:a0:90:e1:92:
         30:ad:62:f6:c0:14:64:48:25:69:8b:38:9e:0e:46:f3:d4:03:
         71:33:4d:f1:7e:ff:35:27:14:2e:9b:97:32:cd:14:b8:64:4c:
         a9:2c:c9:67:5c:9f:ef:e9:5b:cd:a6:ba:be:71:3e:6d:29:a6:
         a2:87:2d:04:d3:db:c6:06:6a:26:f9:5a:39:28:e7:64:62:93:
         da:be:c0:83:d2:f2:92:32:88:3d:de:3f:73:db:19:37:c7:27:
         c2:42:85:d1:ef:a4:85:50:1d:59:9c:7c:6d:a5:5a:34:1b:41:
         d8:23:ee:cf:3d:4a:0a:d4:2b:9e:41:43:57:ae:78:f5:91:0b:
         e3:74:e8:0e:73:1d:e2:7e:fa:01:26:71:52:11:fe:c6:7e:1e:
         a1:96:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:42 2025 by rpki-client