Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          P7qyXANfOZp/oc9TnGUwm2KsOJbLXcXY1CnMPeiqFuE=
Subject key identifier:   6C:40:E2:D3:6A:32:8F:28:54:D6:85:2E:36:32:28:9D:17:D4:49:E3
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       241CB08B97A44CB5EBEF314D51577C88EB5D3327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          06C5
Signing time:             Wed 23 Jul 2025 07:03:32 +0000
Manifest this update:     Wed 23 Jul 2025 06:58:32 +0000
Manifest next update:     Thu 24 Jul 2025 09:29:32 +0000
Files and hashes:         1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=)
                          2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=)
                          3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=)
                          4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=)
                          5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=)
                          6: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: TANGbSN22qkrrr6w80bErsPQdD8LMhQIyKu5b5aDD24=)
                          7: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: T2oouqLdW8/HEdNDKcpXueGb9WviDiuNbMXQl0utXwM=)
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 09:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:b0:8b:97:a4:4c:b5:eb:ef:31:4d:51:57:7c:88:eb:5d:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jul 23 06:58:32 2025 GMT
            Not After : Jul 24 09:29:32 2025 GMT
        Subject: CN=6C40E2D36A328F2854D6852E3632289D17D449E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:c4:e8:88:3c:af:43:cb:1c:72:61:8c:bc:
                    de:e1:37:40:72:7f:6a:af:ad:25:8b:48:df:c0:f1:
                    49:87:a7:af:6b:15:a4:dd:fb:d3:12:39:b2:80:d0:
                    98:9b:0a:87:71:4c:5c:a2:7c:e8:02:80:0b:5e:25:
                    ce:6a:6e:dc:f3:df:63:31:42:eb:71:ac:bc:13:fc:
                    09:6a:ad:fe:98:88:90:fe:b5:87:35:d0:92:07:e5:
                    e3:0d:11:10:ce:01:43:52:5f:20:60:ec:37:68:a9:
                    9e:ea:5a:94:06:3e:2d:a1:fc:c4:23:14:a2:bc:45:
                    7b:3b:fa:54:55:94:da:c4:f4:a0:9a:34:a0:6c:b6:
                    3c:47:cb:48:84:fd:d3:ca:62:a2:91:52:1d:e3:38:
                    5f:50:73:ef:fc:14:3e:49:52:61:23:1d:4b:9d:cf:
                    6d:92:17:15:cb:fe:c2:a5:e2:4f:e7:e6:03:f8:ee:
                    88:a9:00:65:eb:3d:8f:cd:99:7b:5f:95:d4:c9:b0:
                    81:d7:16:3f:96:64:71:dc:90:44:77:ca:b9:01:d5:
                    88:42:3c:00:81:5b:54:51:a9:f6:5f:e9:f2:7d:37:
                    5e:24:4f:cf:99:d4:ba:37:33:d6:4e:33:3c:f8:7b:
                    64:9e:92:43:be:58:4d:66:da:5f:25:7a:06:01:6f:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:E2:D3:6A:32:8F:28:54:D6:85:2E:36:32:28:9D:17:D4:49:E3
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:b5:d2:f9:4e:d8:e3:66:fc:cf:b3:be:4f:35:49:3d:96:
         6e:41:04:34:ab:f5:08:22:3a:dd:53:28:8e:f7:7a:77:fa:76:
         96:6e:f2:c0:35:d5:2b:c9:e4:f7:13:1f:6e:00:8d:a0:c2:dc:
         1e:21:5b:8f:f9:c1:e6:7b:41:fd:3d:ad:0c:5f:dc:bb:00:97:
         f4:ff:89:c8:bb:99:62:19:17:44:2f:4f:74:01:54:6e:45:55:
         1b:cf:e8:cb:76:b6:67:be:9b:46:bc:ac:60:d4:e8:30:b9:bd:
         b6:52:f5:25:e4:85:8f:54:84:e2:65:69:ca:34:fc:32:12:96:
         9a:f9:63:84:b0:fb:1a:96:85:53:4f:9c:3a:ce:5d:53:e2:26:
         b3:7d:7f:2f:4f:33:16:56:36:b7:b0:86:a9:f9:8e:59:8b:c5:
         59:9b:f3:68:b6:ff:1f:d9:16:51:f6:00:6d:f5:68:71:61:17:
         25:10:70:40:9b:b6:36:a2:ba:74:46:bb:01:0a:55:61:f0:25:
         41:36:c7:9d:42:c4:65:57:a1:68:7c:74:fa:31:9c:1b:e4:35:
         6d:4c:59:0c:5d:49:b9:60:6f:45:13:ef:63:6b:b2:74:53:40:
         f3:75:06:2d:28:d0:a6:37:bb:9e:e2:f2:6f:a8:a2:fd:59:7a:
         76:a8:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:13:17 2025 by rpki-client