Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File:                     gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier:          iV/Hj/Habxf6lAFaDCsqecw2z1Pm7gMMrN7vJ2bl7Bo=
Subject key identifier:   72:26:99:90:CC:E5:FE:F7:B5:74:98:2C:6D:48:78:C5:F2:50:9A:9C
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer:       /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial:       0B46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number:          0B3F
Signing time:             Sun 08 Jun 2025 18:55:52 +0000
Manifest this update:     Sun 08 Jun 2025 18:55:52 +0000
Manifest next update:     Sun 15 Jun 2025 18:55:52 +0000
Files and hashes:         1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: FBzcIV+uojRInUdn1QD4GzrUqALOQZCX/Yccd+STAxI=)
                          2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
                          rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 18:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2886 (0xb46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
        Validity
            Not Before: Jun  8 18:55:52 2025 GMT
            Not After : Jun 15 18:55:52 2025 GMT
        Subject: CN=6845dcb8-49aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:77:1f:1c:cd:05:a5:53:5c:3a:18:b8:20:
                    73:a4:a3:98:06:f4:2f:96:f7:2e:77:c9:e4:c8:26:
                    ea:0f:17:9f:bf:45:c8:12:da:b6:4e:37:52:54:aa:
                    d5:ff:a0:ce:08:9f:7e:ae:ea:20:0a:0f:31:21:ff:
                    91:b6:b9:7a:2a:c6:8c:32:16:93:6f:0e:a4:ff:c5:
                    e0:ee:b3:29:0f:30:98:22:23:54:97:91:90:08:1b:
                    54:25:0d:69:eb:33:19:e2:c2:9f:4f:0c:6b:5d:be:
                    a0:d0:82:34:39:40:74:cc:f3:46:59:33:f1:77:9f:
                    0b:02:79:e7:19:d8:cb:37:a2:ba:6e:7d:94:15:23:
                    a0:30:09:0e:e5:81:9c:84:b2:06:ff:54:5f:25:73:
                    ae:10:02:41:30:81:44:01:51:ad:dd:18:01:4a:f1:
                    af:19:58:37:48:c1:40:69:02:d5:e6:d0:7e:c4:3e:
                    e0:e2:de:39:cc:13:0b:cd:58:17:7a:d9:ed:20:31:
                    da:2f:a4:35:89:3e:47:7a:7c:97:bc:93:a4:f6:12:
                    bc:ac:ad:af:a3:c1:6e:3f:c7:9c:ed:d3:7f:a7:df:
                    99:a6:1e:20:ba:44:77:a6:f7:7b:e5:3b:7e:60:1d:
                    6a:11:32:b7:bd:36:83:b2:4b:34:52:e4:76:08:01:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:26:99:90:CC:E5:FE:F7:B5:74:98:2C:6D:48:78:C5:F2:50:9A:9C
            X509v3 Authority Key Identifier:
                keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:ab:d1:56:6a:53:6f:76:fa:29:88:dd:81:48:4d:81:ed:
         b0:f3:93:d0:d1:f5:38:82:a4:4a:a3:92:17:0c:fc:f9:32:b1:
         a9:7a:53:3c:8f:15:fb:cd:48:4e:14:58:3d:28:ac:5c:e8:29:
         db:e2:13:6a:eb:a6:60:67:6c:16:c5:05:9c:e3:d7:60:e7:45:
         4b:b7:4c:f0:f2:9d:b9:58:e2:2a:56:44:7f:5c:8b:7a:ce:6e:
         76:8f:2c:65:72:38:06:5f:0e:db:e0:9e:6a:87:0b:8c:df:2a:
         e6:c6:2f:f0:ea:be:8c:63:7c:2b:cd:ef:d5:e5:8f:0f:77:c6:
         0e:58:af:05:60:ab:99:c4:16:ca:23:6e:3e:90:30:91:60:8e:
         e3:46:ae:28:34:7a:be:aa:5f:79:2f:6d:57:0d:c8:9e:4b:cb:
         cf:f3:b6:ec:cc:7b:49:86:55:e5:e8:ec:99:1d:3a:d6:e6:35:
         0c:f5:54:3b:65:94:7d:5d:8f:2e:c1:99:64:92:eb:56:01:9f:
         0a:a0:d9:0a:a3:b4:f0:49:18:83:bf:bc:39:e2:ae:52:8e:94:
         b5:30:4d:3d:e1:90:53:6f:a5:21:e3:77:b4:f5:25:32:6c:f5:
         2d:4b:f0:90:44:57:07:66:83:70:19:09:a8:9f:94:7d:65:80:
         38:39:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:35:15 2025 by rpki-client