Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
File:                     RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json)
Hash identifier:          HXZCFlFbFkjjci7gz5oJOgBYbXfK6ax9uUh3M39EOJI=
Subject key identifier:   09:7F:8F:F0:8B:B8:20:1D:78:CF:90:B8:26:14:83:FB:73:9B:54:F7
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
Manifest number:          066C
Signing time:             Fri 18 Jul 2025 22:49:06 +0000
Manifest this update:     Fri 18 Jul 2025 22:49:06 +0000
Manifest next update:     Fri 25 Jul 2025 22:49:06 +0000
Files and hashes:         1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: JHNrY00hx58502g2jAWCErdPMJt+THR8ZrLap59qLwU=)
                          2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=)
                          3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Jul 18 22:49:06 2025 GMT
            Not After : Jul 25 22:49:06 2025 GMT
        Subject: CN=687acf62-9087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:39:36:1a:7e:68:5e:3a:1a:5a:47:ac:a5:
                    33:78:c7:54:01:8a:c6:04:eb:b5:da:a9:a1:f0:62:
                    3b:96:f9:ce:33:0d:6f:44:7f:04:d4:7d:1f:2e:84:
                    30:d5:a3:17:10:96:8b:c3:03:af:15:ff:2d:72:03:
                    78:0c:b5:0e:fa:0d:0d:bb:4c:02:25:4d:9c:03:db:
                    14:04:b8:dc:ba:ee:a1:ae:a8:ef:ed:40:68:08:c3:
                    f4:fa:da:b7:dc:b0:78:93:38:f3:13:8a:81:d9:db:
                    52:4c:18:b9:5f:fc:c4:be:07:61:59:20:4e:72:de:
                    15:11:a2:5c:ff:e0:84:3c:39:2a:7d:d9:a4:94:f2:
                    88:7f:b0:43:6d:48:b1:58:98:3d:ac:c5:5c:32:9e:
                    13:1b:f6:5a:04:2b:73:c3:92:79:0c:67:c5:26:35:
                    7e:5c:b8:74:b1:1f:e8:a0:7b:6b:80:cd:cb:ba:84:
                    2e:54:09:e0:fc:28:0b:ec:a2:b8:7b:20:80:24:ff:
                    67:1f:70:21:c0:c9:89:59:6e:c7:0d:d4:e4:c4:ca:
                    70:51:c0:c8:64:6e:00:90:5e:7e:e9:f1:19:cb:d8:
                    2d:43:84:d6:6c:d6:0f:7a:31:18:3c:b8:66:d3:92:
                    4d:5e:2e:64:21:61:d4:3d:5e:4e:3d:bd:bf:ec:87:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:8F:F0:8B:B8:20:1D:78:CF:90:B8:26:14:83:FB:73:9B:54:F7
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:65:a6:f5:77:37:cc:bd:b4:57:09:7f:a8:f5:2e:ec:21:
         c9:90:94:3d:5a:e9:05:cc:6d:fe:c7:31:ad:cb:f7:25:74:82:
         72:79:1e:1e:1c:e9:22:a6:c3:13:e5:1b:4c:8b:69:14:22:ea:
         41:97:c0:f2:5a:b3:cb:a3:dc:16:16:e2:7d:f6:40:11:90:a6:
         d6:40:54:29:05:af:b4:8f:a0:33:4a:d8:e3:9f:90:92:06:5d:
         62:04:1f:e7:5c:61:10:fc:a8:59:7f:4b:66:d8:20:d7:ba:91:
         89:71:37:f3:3f:e0:9b:f2:fb:ec:dd:1f:e4:77:a1:2a:8d:d3:
         b4:b8:cb:a8:f7:2d:74:12:2c:f6:13:77:91:4c:09:d4:6e:c7:
         6d:e9:f9:2e:d8:f3:ac:ac:af:a0:20:b6:48:ea:22:9d:e1:64:
         8f:49:2d:0f:80:6d:80:62:2e:e0:33:4c:3a:b3:68:40:a1:ee:
         0a:b8:7e:5f:eb:0e:84:14:0e:c1:f9:c3:fe:d0:2c:d4:65:fb:
         2c:84:a4:1e:f9:88:42:be:21:10:4f:52:86:49:d5:0b:26:fd:
         60:9b:00:07:73:0d:54:eb:31:dd:f3:f0:d8:08:ac:3e:ce:5b:
         2c:cb:62:8a:ed:0b:3a:89:b5:58:fb:f0:de:34:75:ef:e6:d8:
         2b:ca:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:14:12 2025 by rpki-client