Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
File:                     k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json)
Hash identifier:          MFmXgAZG7fNJ1R++baV1svDqHdHbPp3+Kel3U3ClxmM=
Subject key identifier:   3B:D8:3D:6B:AF:AA:75:87:93:94:53:B5:E9:92:70:5B:5F:BE:35:65
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0C5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
Manifest number:          0C57
Signing time:             Wed 10 Sep 2025 18:43:25 +0000
Manifest this update:     Wed 10 Sep 2025 18:43:25 +0000
Manifest next update:     Wed 17 Sep 2025 18:43:25 +0000
Files and hashes:         1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: cxX5YfveaC2s/yUBxA/GXYErKZ3EjQbW7mDcP8JSD0w=)
                          2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: h3TRrCigN3ijDCgnDw2m4xSxP+YwbT+U2kZcnUsoK8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 18:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: Sep 10 18:43:25 2025 GMT
            Not After : Sep 17 18:43:25 2025 GMT
        Subject: CN=68c1c6cd-4858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:98:b2:2a:eb:78:4a:74:08:79:10:51:bd:
                    b0:d1:f6:1a:f9:66:94:0a:b3:e9:c8:94:37:0f:22:
                    30:14:0e:2b:23:ac:f8:86:8b:21:ad:af:89:23:b7:
                    4e:8c:1c:9e:e0:ba:1e:50:ae:cc:37:65:25:f1:7c:
                    c3:50:ff:3e:a3:34:eb:08:3d:d2:35:c4:d9:8f:26:
                    6a:6f:61:d8:f4:fa:5c:89:fc:52:67:ac:f6:10:7d:
                    6e:d9:c9:cc:f3:40:59:d1:2b:d2:b7:7b:c7:b6:17:
                    fc:b4:e6:db:7d:72:af:71:6f:ba:65:34:19:1a:48:
                    8a:9f:b8:18:1c:a0:0f:62:bb:ef:5b:2d:e1:35:ea:
                    fb:72:aa:7e:3e:f6:98:9a:5a:90:a1:2b:a3:87:31:
                    39:b8:1b:0d:c9:83:78:74:c7:4b:90:3b:d4:b6:c3:
                    84:44:66:a5:c9:2f:fb:09:ea:86:44:9e:79:ea:df:
                    73:e2:3e:77:b5:42:1e:de:89:88:61:10:05:d6:3a:
                    3e:be:a4:57:c3:a5:e0:e7:b8:ff:7d:f5:51:4d:4c:
                    e8:b2:aa:9e:8f:43:27:96:80:40:3b:aa:8d:d9:67:
                    6b:1b:ea:c4:94:ac:b1:94:6f:89:af:a3:88:85:52:
                    72:53:d4:14:5f:15:4b:11:65:72:fc:91:27:95:40:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:3D:6B:AF:AA:75:87:93:94:53:B5:E9:92:70:5B:5F:BE:35:65
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:81:f5:1a:3c:52:e1:68:63:e6:a3:3a:40:b4:ca:c4:25:
         47:22:83:18:82:71:88:80:c7:56:06:b3:56:6d:67:60:66:4f:
         45:ad:19:c6:57:16:5f:fa:bc:29:8a:5d:d2:d5:9d:b8:54:b2:
         cf:22:12:16:f9:9f:8f:61:98:68:8b:c4:38:55:be:95:18:0a:
         9f:98:f0:26:f1:d0:5a:0f:fd:34:61:dc:40:79:96:0f:2d:f1:
         be:ac:b2:72:3d:06:da:f1:5c:db:41:40:c6:d3:c9:b5:46:2a:
         b0:e4:8c:08:89:95:f3:f3:e9:da:b4:f3:bd:a4:66:49:7c:d0:
         37:06:76:9b:5a:2c:2e:23:6f:dd:4a:5a:28:18:6b:ce:c6:6d:
         be:ab:05:f1:83:35:3a:92:72:d4:c1:e7:f0:60:ba:3d:63:ff:
         05:6d:c8:d2:1b:18:92:12:ae:c7:c8:85:18:23:ac:2d:37:14:
         1e:61:6d:75:bb:e4:a7:21:24:65:5d:a6:12:ea:e1:fb:4c:11:
         f6:c5:45:ae:b3:ed:3a:a8:68:31:ab:f7:9a:52:85:2a:02:68:
         4c:6f:bc:9d:08:db:de:e2:f2:8c:55:ed:1d:d4:59:e2:9a:3e:
         10:98:9b:d0:a0:fd:41:7b:a8:ab:57:df:de:7c:0f:57:5e:12:
         21:d7:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:13:25 2025 by rpki-client