Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          /Kcwq9QdzkQQcmqiYEe1s+v4i7scXJYSU9Xxv3u1Yss=
Subject key identifier:   D3:FE:04:2D:1D:79:65:FC:1B:3F:37:16:4D:90:D6:0C:FD:2D:89:6A
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0BC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0BBE
Signing time:             Thu 12 Jun 2025 18:45:28 +0000
Manifest this update:     Thu 12 Jun 2025 18:45:27 +0000
Manifest next update:     Thu 19 Jun 2025 18:45:27 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: yeDko36tFfUmqAVfK1NooyjxTlxnN6lIY2qsPhq/QTg=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3017 (0xbc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Jun 12 18:45:27 2025 GMT
            Not After : Jun 19 18:45:27 2025 GMT
        Subject: CN=684b2048-caa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:0d:37:79:fa:ed:e6:3a:70:e5:9d:28:d8:
                    ef:e7:dc:eb:9f:fd:aa:09:58:f5:eb:6f:dd:72:8f:
                    1b:a4:45:16:bc:56:e6:41:c8:a8:6f:9e:57:c6:14:
                    c0:17:ca:cc:f9:ce:1f:8e:32:b4:1c:2a:de:c1:a1:
                    5f:12:18:fd:e8:59:ea:10:88:4d:e2:85:81:06:9f:
                    22:73:4b:95:08:ce:ae:cc:96:f9:ca:22:16:9e:39:
                    52:67:c0:ec:04:26:11:86:38:6f:48:99:0a:7c:26:
                    62:64:a4:99:23:07:91:9e:69:4c:7d:b1:ed:12:f6:
                    d9:ae:e9:9f:1f:84:c0:43:4c:87:39:2b:9d:3d:86:
                    58:ea:af:64:48:46:5c:ee:ca:83:19:20:9d:e7:f2:
                    13:18:37:e4:19:6a:e4:2e:50:30:24:6e:3e:74:26:
                    b8:d4:d3:0d:a0:8b:72:ed:c2:71:f5:a0:11:9e:a1:
                    cc:11:11:06:b6:ef:00:da:6b:07:a2:68:20:9b:cb:
                    83:2d:60:7e:98:a4:9a:09:e2:8b:32:99:25:3a:ec:
                    7d:fa:41:50:8b:55:ed:10:71:27:f1:0d:d6:37:8a:
                    ea:67:8e:53:d9:15:7a:d5:9f:ff:8f:cc:c7:31:d6:
                    62:9b:42:d2:d4:e0:e2:58:a2:90:fd:9f:2b:ab:50:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:04:2D:1D:79:65:FC:1B:3F:37:16:4D:90:D6:0C:FD:2D:89:6A
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:bd:2e:4b:1a:96:e5:57:a9:70:67:71:87:f6:20:14:bc:
         9d:73:dc:44:6b:0a:28:fb:71:ae:81:2a:44:41:6d:7b:05:bf:
         f3:6c:d3:13:69:1e:3d:24:af:00:4a:6e:7b:4e:1a:8b:93:32:
         6c:a2:18:7d:f7:8f:83:2b:b1:0f:9a:65:16:22:a3:73:21:11:
         ab:38:aa:75:ac:bd:e9:83:2c:8a:0c:6c:3a:33:07:fc:fb:37:
         34:41:d3:0f:8e:08:59:a2:5d:9b:92:f5:ea:af:ae:e6:48:61:
         b2:a3:e6:9a:73:58:1a:f8:7d:c8:2b:26:f9:97:06:89:b8:06:
         72:80:fe:08:58:55:04:4b:72:4d:86:9e:f4:ad:0d:79:05:c3:
         ec:7f:45:72:20:16:b3:4a:2d:7c:ad:5e:0d:18:85:86:21:11:
         bc:52:1a:84:94:46:77:be:7e:6d:24:e0:91:bd:8c:86:2f:43:
         8c:1a:93:32:68:27:e7:ab:bd:23:75:4d:70:82:c8:64:51:32:
         f3:4b:9a:72:28:ae:fb:87:84:4d:76:16:1b:46:04:0a:83:1a:
         3d:c4:a4:37:9f:41:f5:78:1f:45:45:3e:32:01:34:51:45:b3:
         78:fe:3e:84:f9:95:fa:33:aa:d7:ca:67:b2:b7:89:62:ec:ed:
         35:65:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:31:29 2025 by rpki-client