Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File:                     exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier:          ARFDEza7eSsvEYWydJ2eVF0z6y+mvhJl0ZdE9qDuxxM=
Subject key identifier:   33:87:22:6E:A6:2E:D8:7C:50:42:6B:82:95:56:F4:05:8E:58:77:0E
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer:       /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial:       06C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number:          06B1
Signing time:             Fri 04 Apr 2025 22:17:43 +0000
Manifest this update:     Fri 04 Apr 2025 22:17:43 +0000
Manifest next update:     Fri 11 Apr 2025 22:17:43 +0000
Files and hashes:         1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: RXklrAJtu1Csfq8vrkhgPKLNYbm5NlCiwf61cF6X8iI=)
                          2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: 44B6YCXFFFx+bCdGIykmPbtlTvIuZVPUkL4VeJYbwxg=)
                          3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: ji78Z3bYDne8h3ntfFAr2jh173VOiqckcY3Gt5rpLOI=)
                          4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: gFcpYNnFwW2L/eMps8n5pMtg1/xMFxUVZSJLx7s2gUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
                          rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6B3D
        Validity
            Not Before: Apr  4 22:17:43 2025 GMT
            Not After : Apr 11 22:17:43 2025 GMT
        Subject: CN=67f05a87-4d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:19:5f:b7:ca:db:6f:7a:11:83:a0:74:f3:
                    ad:76:41:3f:a2:ea:fd:5b:23:13:93:a8:40:cd:4d:
                    0f:55:ca:73:2b:d5:2d:37:f2:3c:ca:cf:f6:c1:5c:
                    4f:58:3a:3b:b4:04:30:ab:8b:03:1c:ce:fe:2e:84:
                    cf:ed:a0:d7:38:d8:77:72:61:dc:d7:32:b1:bb:24:
                    52:d8:75:0a:8c:c9:24:82:12:f6:88:19:f6:a3:c4:
                    da:a7:d1:27:e7:15:8e:1f:34:02:5f:a5:e8:45:04:
                    0c:6e:c3:28:c5:20:08:e2:e9:12:bd:61:e9:18:89:
                    2a:1b:b9:97:38:91:2b:24:38:a2:4d:de:22:ed:fa:
                    c0:41:3b:57:68:45:e2:cc:78:0f:92:6d:58:7b:57:
                    cc:0e:f1:68:7c:f4:15:24:ce:10:24:b2:79:1d:c2:
                    fc:c3:2a:22:95:0e:78:4d:f3:06:c2:f2:fb:48:f5:
                    f3:a1:ef:47:2b:31:93:02:df:a2:92:3e:a6:51:e9:
                    9f:42:72:61:af:b7:78:b3:f4:d0:f3:e8:c5:a9:e2:
                    af:02:ec:ba:6a:e5:97:56:1e:79:83:36:01:a4:c4:
                    54:fd:65:9d:32:42:a1:e8:f2:95:cc:02:3c:9d:d3:
                    f9:8d:19:2a:56:dc:45:c1:3e:5b:c0:2c:c0:c1:e0:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:87:22:6E:A6:2E:D8:7C:50:42:6B:82:95:56:F4:05:8E:58:77:0E
            X509v3 Authority Key Identifier:
                keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:90:a1:b0:67:44:01:0c:50:d7:c1:f4:97:80:43:ef:54:
         6c:14:f4:c0:87:37:52:20:11:ea:1c:0e:e0:58:6d:23:59:fd:
         34:8d:ff:13:ef:dd:d0:4a:47:51:1a:b5:c6:26:0b:41:14:90:
         89:8f:7a:7d:01:d0:20:8f:01:4b:27:a0:d1:85:c6:9c:1a:22:
         aa:ca:54:eb:90:72:82:cd:ba:7b:9e:17:19:e4:2c:54:57:ab:
         80:3e:e4:ca:b3:6b:0a:2b:bf:5c:09:e0:95:c7:d1:68:5c:09:
         2c:c8:b1:f1:7c:dc:96:57:e8:80:e3:ff:58:76:b5:db:95:08:
         9e:7a:ce:4d:1f:6d:45:f0:e6:52:25:90:14:e1:4a:c2:f0:a9:
         86:6b:6a:29:f9:4e:df:21:fa:af:d4:d9:88:fc:8e:92:be:bb:
         6c:c5:c0:29:f6:f4:82:fa:0c:5c:9d:a4:d0:f2:39:b2:56:b4:
         14:80:15:3c:55:6a:86:d0:fc:e4:9d:e2:de:35:62:97:a9:00:
         e9:2c:c9:33:2d:30:78:49:2c:18:a6:f3:81:7e:74:74:4f:1d:
         8e:51:62:11:de:3f:75:31:63:d7:7d:aa:be:3d:bf:59:54:d0:
         ab:2b:17:f1:c1:99:c9:ed:ec:45:67:b5:a7:7f:4a:b7:f1:1b:
         8e:78:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:23 2025 by rpki-client