Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
File:                     bcDHAorrOzsmYx9pJXBQC2DtJxk.mft (raw, json)
Hash identifier:          eJEYnTXchLXSdeKXHebXOooW5JluMWNgiv3asqrsDtw=
Subject key identifier:   79:D2:E6:09:89:2A:9A:CF:3F:C2:97:EE:7F:CE:3A:98:1B:2F:B1:A0
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
Manifest number:          0730
Signing time:             Thu 12 Jun 2025 21:27:53 +0000
Manifest this update:     Thu 12 Jun 2025 21:27:52 +0000
Manifest next update:     Thu 19 Jun 2025 21:27:52 +0000
Files and hashes:         1: bcDHAorrOzsmYx9pJXBQC2DtJxk.crl (hash: 7Bn3aXsQrJzPcOAdZhN9aBxm0zTA9SxUMKVcEzr/su0=)
                          2: C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (hash: iwf2bc8877eQNQdlvgE9Pwyqx+IwGNsKelNjJ8iJuYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E, serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: Jun 12 21:27:52 2025 GMT
            Not After : Jun 19 21:27:52 2025 GMT
        Subject: CN=684b4659-34a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:8d:62:b7:ed:66:a7:b2:74:63:fb:f2:f2:
                    65:e9:5b:66:1b:a0:96:6d:98:6e:0a:11:74:58:0f:
                    44:7e:a5:de:82:ba:8f:72:c5:67:82:58:d2:d8:37:
                    fd:3f:dc:ad:e4:c5:b9:8d:b8:95:61:2f:c6:28:55:
                    75:e9:af:38:55:d5:52:03:e0:a8:d2:07:47:0b:a2:
                    14:b9:f7:db:db:01:57:20:36:c3:b3:d1:0c:c9:18:
                    27:7c:f1:60:e6:5d:89:71:a3:88:72:31:71:23:e2:
                    47:3d:0a:d0:a1:a1:6a:35:46:fd:b5:ba:e5:9d:d0:
                    a6:c2:00:bd:bc:9d:97:c7:8d:a3:f9:c7:9b:af:40:
                    59:94:3c:70:bc:cd:5b:d6:1d:26:56:17:05:42:d9:
                    02:3b:58:9a:dd:3f:d5:07:41:be:ed:da:65:db:9b:
                    61:1d:fe:a3:ab:f5:e6:9e:f9:42:4b:ce:ad:da:b8:
                    14:fa:d1:88:83:93:97:16:d3:c6:d7:36:3c:1c:b2:
                    64:c3:35:e9:64:66:ed:68:b6:e9:a7:f7:02:77:13:
                    19:19:0c:0f:2d:3d:bc:0c:db:d8:56:56:14:84:72:
                    29:d5:09:b0:70:8f:00:7a:9e:b2:fb:db:27:10:e5:
                    cb:bc:c1:7a:67:1b:5a:f4:20:f4:fd:57:5c:e6:94:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:E6:09:89:2A:9A:CF:3F:C2:97:EE:7F:CE:3A:98:1B:2F:B1:A0
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:a3:f0:f8:05:6e:47:88:ab:2f:f7:74:b7:95:ea:fe:fd:
         bf:3a:61:2d:0d:2c:7b:34:13:41:58:2f:0b:5c:d1:6a:31:2d:
         50:f2:57:52:06:7b:2b:56:58:b4:cc:2b:81:1b:0d:6b:04:74:
         9f:36:c7:7e:26:fe:94:af:58:93:24:db:35:07:27:ad:2c:07:
         5e:b1:b9:ed:dd:27:e9:58:1c:06:60:9c:fb:4b:d5:54:7b:ea:
         9d:e9:72:be:77:96:6e:73:a1:15:aa:b8:58:0f:e2:48:28:5d:
         f7:0f:83:e5:b4:85:5c:05:05:e5:16:bd:d0:2f:e9:8d:35:1d:
         24:48:09:f3:b4:6e:85:ab:8b:54:9b:48:4b:03:53:61:8c:43:
         9b:e5:8d:ee:fc:ad:39:50:b5:8e:d2:24:67:fe:0f:b3:08:0c:
         14:53:25:e1:89:94:90:9c:19:b6:c7:f7:04:39:4d:09:b3:35:
         14:1a:ad:92:9d:72:03:86:98:b9:78:14:97:d8:8f:9c:f6:fc:
         82:f4:97:07:ac:7c:20:60:ac:b8:d5:1e:c6:5b:60:2a:fe:e4:
         ae:73:11:95:48:77:c6:68:14:09:3b:17:1b:48:04:d6:89:24:
         99:0e:5f:c4:61:2c:f0:fc:50:c5:29:86:02:7e:71:d5:c3:05:
         b6:63:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:12:23 2025 by rpki-client