Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          DNTZqAmgdNzCmH8/j0/UQ6CY0uJhbnZht93UOgvWPnM=
Subject key identifier:   A7:79:F8:A1:E6:5D:AD:F5:76:D3:3B:FF:E5:FA:ED:3C:A4:A9:27:9A
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       7BA6E36FB4278BC46EE6BB89D5DC6BAA4C0900B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          06C6
Signing time:             Thu 24 Jul 2025 00:00:02 +0000
Manifest this update:     Wed 23 Jul 2025 23:55:02 +0000
Manifest next update:     Fri 25 Jul 2025 01:52:02 +0000
Files and hashes:         1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=)
                          2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=)
                          3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=)
                          4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=)
                          5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=)
                          6: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: essxQXlxfaKy+Vtlc1R6NTj5frbjTK8eaEv93IPGXAE=)
                          7: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: BgpRuTp4N3FvLjPwvvEtKtwG64pokAYRKRLwe5Kyxrw=)
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 01:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:e3:6f:b4:27:8b:c4:6e:e6:bb:89:d5:dc:6b:aa:4c:09:00:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jul 23 23:55:02 2025 GMT
            Not After : Jul 25 01:52:02 2025 GMT
        Subject: CN=A779F8A1E65DADF576D33BFFE5FAED3CA4A9279A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:db:60:c1:a3:2a:40:e9:45:98:16:d9:56:
                    5c:41:43:83:9b:ac:da:c1:f0:cd:a6:23:60:ff:7a:
                    07:58:f3:7c:49:3a:37:2f:3f:b6:8b:22:0d:a3:7e:
                    d6:d0:80:fa:cb:0e:cb:41:9c:be:51:53:2a:0f:d3:
                    43:ef:f3:a2:1c:1c:a5:ed:b7:b7:f5:73:44:80:72:
                    1d:a1:9b:6e:b1:d3:19:1a:c0:82:0c:a7:67:1b:da:
                    30:77:bb:8a:5e:5d:a6:4b:42:ac:43:c3:42:20:69:
                    83:37:a9:f8:ac:6d:7e:8d:60:1e:21:7f:f3:18:60:
                    e9:ff:b8:36:70:82:18:f0:4b:d1:c4:ac:7e:5e:63:
                    0a:88:5c:f7:d1:7d:9a:0a:94:88:74:a1:50:ad:de:
                    6d:ff:16:30:a4:25:82:1d:16:74:ee:f5:e6:16:47:
                    49:1e:5f:56:18:94:2f:fb:52:69:fb:ea:ff:68:66:
                    e8:1c:2a:3b:fe:18:6b:1c:58:03:25:e2:1c:65:f1:
                    fc:d7:6d:97:31:76:c2:59:57:f4:65:94:8d:e3:ce:
                    7e:ed:c0:31:7c:26:5d:d9:60:8f:d0:ca:ee:de:54:
                    70:e7:be:8b:d2:a0:01:19:43:ec:4f:ea:50:c7:04:
                    50:62:f9:4f:c8:c0:fd:98:4b:12:a0:db:40:5b:d9:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:79:F8:A1:E6:5D:AD:F5:76:D3:3B:FF:E5:FA:ED:3C:A4:A9:27:9A
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:76:a3:7d:3b:81:bf:be:3f:a1:ca:d2:ea:b2:99:00:63:5a:
         03:63:77:72:88:89:26:45:6c:93:00:3f:eb:a6:1f:51:f3:25:
         20:1e:9d:ad:80:f7:62:cc:ad:c3:8f:ac:ec:c9:e7:94:14:7a:
         59:33:8e:4d:96:6c:ad:fc:a9:ba:1e:b7:dc:79:a6:d9:35:e4:
         13:f2:5f:ff:c4:9a:68:db:a8:c0:dc:8c:3b:c9:53:be:ce:70:
         7c:fc:71:f2:21:d8:9f:f4:ae:36:85:52:f0:9f:21:8f:04:5e:
         12:e7:a9:91:34:49:ee:63:d2:36:c9:4f:b7:14:eb:fe:85:0b:
         af:9f:df:0e:fa:36:8a:a8:37:65:87:49:75:ee:57:a1:1a:7e:
         53:e2:e0:14:d6:d1:63:9e:91:76:b3:b0:6a:31:b7:09:51:18:
         d9:ba:f8:bd:50:e1:e4:5e:08:b3:00:9e:16:df:cb:25:55:46:
         9b:9f:3a:c3:fa:3f:35:5f:85:0b:12:a5:e4:5e:c1:50:b1:2b:
         bd:bf:05:03:23:a6:0d:e0:cd:4a:e2:40:dd:4f:26:30:dd:71:
         38:a8:98:f6:8f:ab:cb:b0:5f:df:bb:49:f7:87:96:89:93:cd:
         91:e7:bf:a7:b9:94:54:31:a5:67:80:4b:0e:3c:57:d9:12:e3:
         17:d7:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:11 2025 by rpki-client