Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          +4A+KOFnvtYOXT8fv+GX7E0xMEmfYqAYyQdSLF8DYUU=
Subject key identifier:   D9:EB:F0:9E:1E:10:97:A2:14:52:85:40:54:D4:35:C4:57:C9:FD:D3
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       74A21AF2D4695F24C228C7FC3138E2BB714F1410
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          06C9
Signing time:             Fri 25 Jul 2025 16:46:37 +0000
Manifest this update:     Fri 25 Jul 2025 16:41:37 +0000
Manifest next update:     Sat 26 Jul 2025 18:04:37 +0000
Files and hashes:         1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=)
                          2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 4ST+5apxw6qVsTElhnlAA+wtLA6AHMaTdaSfq8aRET0=)
                          3: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: f84YcxuwIHK+L8aIEhQTiPH66YcTKAJ7vZZo9VkG0+4=)
                          4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=)
                          5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=)
                          6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=)
                          7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=)
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 18:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:1a:f2:d4:69:5f:24:c2:28:c7:fc:31:38:e2:bb:71:4f:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jul 25 16:41:37 2025 GMT
            Not After : Jul 26 18:04:37 2025 GMT
        Subject: CN=D9EBF09E1E1097A21452854054D435C457C9FDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:3e:4b:ce:ac:42:f2:c4:1f:24:86:60:58:
                    86:48:73:f4:e9:37:b2:8a:25:10:14:25:4a:df:3e:
                    61:eb:10:c9:f4:25:40:2c:95:6d:9f:06:ad:92:b7:
                    79:1f:7d:8a:44:ab:d0:dd:ff:93:e3:95:aa:2d:4b:
                    8b:f4:db:18:8f:f5:24:81:05:9d:ee:8f:fb:4e:af:
                    f3:75:66:77:e2:f6:86:fa:fa:9f:d5:73:94:4f:c1:
                    ae:4b:3c:40:90:e0:38:12:9a:25:c3:2c:9c:35:2e:
                    3c:18:a2:34:05:76:02:59:f0:d3:c0:ed:55:15:2c:
                    ac:31:18:15:62:70:bc:df:a3:95:16:8d:a3:35:87:
                    84:ce:30:65:de:34:3a:cc:79:55:07:b3:c7:4b:9f:
                    b0:0d:b4:7d:06:43:42:df:8c:96:5b:d6:6e:96:31:
                    9f:1a:46:21:6e:3a:a1:1c:17:b8:b6:13:ce:22:38:
                    d7:9a:fc:a2:63:93:a0:09:9f:d0:63:59:ff:27:57:
                    ef:b9:d9:1d:07:06:57:35:e4:b4:16:dc:bf:dd:cb:
                    16:98:e2:f0:02:9a:9f:ac:d6:5b:ff:19:36:25:f8:
                    62:60:c2:f4:b5:0c:90:63:db:64:30:6c:d5:27:94:
                    ce:9c:57:d2:ea:9c:f7:3a:8a:ed:0c:9e:24:d0:9d:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:F0:9E:1E:10:97:A2:14:52:85:40:54:D4:35:C4:57:C9:FD:D3
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:f6:b2:62:db:2a:c3:c3:b6:96:9d:05:24:74:a6:f2:f5:
         04:26:be:66:38:0f:e5:88:a6:10:09:e0:83:d8:94:7f:e5:5f:
         3a:6a:a5:d5:02:e2:8d:dd:50:20:fc:f0:05:09:de:c5:4e:c9:
         df:3e:4e:38:5c:f4:11:05:0b:57:78:5e:67:d7:18:33:62:54:
         b9:dd:59:a6:dc:47:e2:9a:7e:10:51:e9:08:ee:6c:ac:40:2e:
         e3:d8:ae:4e:bd:65:f9:4c:9f:de:4c:62:02:76:52:a7:c2:cf:
         25:8d:cc:75:21:b8:9d:ce:15:84:6c:c8:c2:79:ae:80:6b:87:
         5b:86:32:38:13:3d:20:ee:e4:54:24:2c:bc:55:c7:f6:88:2f:
         53:fd:bc:dc:af:67:c0:1d:77:38:be:44:7d:21:ca:16:68:f5:
         06:a9:71:be:6c:5a:c2:25:bd:ef:49:52:cd:76:92:6f:f1:b2:
         c6:6b:04:7d:b1:dc:06:34:84:f7:e1:20:c8:32:df:a4:02:8b:
         41:9d:bf:cb:a0:75:78:a3:ca:25:e7:f4:21:8f:b6:69:b8:bb:
         0a:ba:42:10:01:fa:95:6c:ec:15:dd:d4:96:73:5b:fa:c6:54:
         47:ba:7f:38:b8:c8:77:04:dd:11:3e:6a:e5:35:a7:3a:a6:2a:
         6c:70:c2:14
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUdKIa8tRpXyTCKMf8MTjiu3FPFBAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDcyNTE2NDEzN1oX
DTI1MDcyNjE4MDQzN1owMzExMC8GA1UEAxMoRDlFQkYwOUUxRTEwOTdBMjE0NTI4
NTQwNTRENDM1QzQ1N0M5RkREMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK0PkvOrELyxB8khmBYhkhz9Ok3soolEBQlSt8+YesQyfQlQCyVbZ8GrZK3
eR99ikSr0N3/k+OVqi1Li/TbGI/1JIEFne6P+06v83Vmd+L2hvr6n9VzlE/Brks8
QJDgOBKaJcMsnDUuPBiiNAV2Alnw08DtVRUsrDEYFWJwvN+jlRaNozWHhM4wZd40
Osx5VQezx0ufsA20fQZDQt+MllvWbpYxnxpGIW46oRwXuLYTziI415r8omOToAmf
0GNZ/ydX77nZHQcGVzXktBbcv93LFpji8AKan6zWW/8ZNiX4YmDC9LUMkGPbZDBs
1SeUzpxX0uqc9zqK7QyeJNCdHfkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTZ6/Ce
HhCXohRShUBU1DXEV8n90zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz
eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw
OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB8kfayYtsqw8O2lp0FJHSm8vUEJr5mOA/liKYQCeCD2JR/5V86aqXVAuKN3VAg
/PAFCd7FTsnfPk44XPQRBQtXeF5n1xgzYlS53Vmm3Efimn4QUekI7mysQC7j2K5O
vWX5TJ/eTGICdlKnws8ljcx1IbidzhWEbMjCea6Aa4dbhjI4Ez0g7uRUJCy8Vcf2
iC9T/bzcr2fAHXc4vkR9IcoWaPUGqXG+bFrCJb3vSVLNdpJv8bLGawR9sdwGNIT3
4SDIMt+kAotBnb/LoHV4o8ol5/Qhj7ZpuLsKukIQAfqVbOwV3dSWc1v6xlRHun84
uMh3BN0RPmrlNac6pipscMIU
-----END CERTIFICATE-----
Generated at Fri Jul 25 18:21:51 2025 by rpki-client