Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File:                     9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier:          8lApCkcMvfHRSKthwy86xN56kBlylWKTz7jIcMbEQJ0=
Subject key identifier:   41:9D:E9:2E:CB:1F:FE:12:CA:57:58:57:FA:6B:4B:CB:24:C6:E4:7E
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer:       /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number:          0165
Signing time:             Mon 09 Jun 2025 03:01:15 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:15 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:15 +0000
Files and hashes:         1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: Cu8g97//9MGzD5oQg0rUqVe/RnI/themrh6Q90IVCos=)
                          2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
        Validity
            Not Before: Jun  9 03:01:15 2025 GMT
            Not After : Jun 16 03:01:15 2025 GMT
        Subject: CN=68464e7b-1064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:67:af:2b:11:bf:00:c9:33:d4:f9:3a:b5:
                    5a:d9:8a:98:8a:a8:e7:08:1a:cb:35:3f:a9:c7:f8:
                    54:1c:50:7d:8b:ef:bd:b6:29:c5:3a:40:54:45:99:
                    1d:33:fa:7c:42:91:a4:65:6a:6b:86:8c:a3:03:28:
                    6b:ac:78:dc:27:e2:30:dd:ae:17:e2:25:78:c7:39:
                    92:31:8b:d0:31:95:71:67:17:a5:52:06:8c:2d:3b:
                    f6:ab:a7:8e:a5:b9:99:9d:4a:db:a2:a2:ef:28:c8:
                    a2:93:9c:6b:7b:cb:54:11:c6:10:41:92:8d:a5:6d:
                    4b:dd:c3:45:f9:af:76:9a:87:51:c4:d0:68:db:20:
                    97:01:4f:df:0e:a0:bf:d6:b6:4d:d4:91:c7:d7:6a:
                    3c:99:7c:be:42:be:da:07:22:84:d6:ad:76:81:f4:
                    7a:36:53:74:9e:06:d0:99:d5:93:82:df:1a:fe:3e:
                    1d:20:79:64:c3:3d:ab:35:ef:75:04:8b:ef:f8:1d:
                    b5:26:c2:78:ed:2f:08:37:b1:ad:3f:f9:da:fe:60:
                    fe:67:b7:04:d5:d9:6b:cb:6e:35:b5:e6:63:c2:5f:
                    29:22:9d:ae:8d:7a:8a:0d:81:95:7a:bd:54:5b:d2:
                    1b:eb:6a:2a:c4:6b:9c:cb:99:7d:bd:bc:30:45:10:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:E9:2E:CB:1F:FE:12:CA:57:58:57:FA:6B:4B:CB:24:C6:E4:7E
            X509v3 Authority Key Identifier:
                keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e8:27:a7:d1:a5:4b:a4:0d:b9:7d:c4:04:9e:1e:64:b5:48:
         5a:83:2d:e6:20:ca:2e:a5:c3:8b:5b:e5:d3:a4:3c:5c:90:6c:
         1e:8e:1f:d5:e3:72:d0:98:00:3a:cd:cc:2a:0b:14:ea:71:d0:
         29:6e:5a:23:95:4a:4e:6e:e8:62:9c:e7:c1:1f:3a:b6:a4:5a:
         dc:23:3c:81:95:5a:53:4e:52:74:df:86:ca:d2:04:e1:86:8c:
         be:f0:7a:8f:ba:df:00:81:19:de:f4:6b:56:42:89:3a:78:d2:
         e9:c8:14:f8:15:c2:6d:1b:fe:e1:f0:57:a0:42:07:3b:7d:e0:
         bb:62:1c:b2:b1:fb:52:86:7c:86:f1:64:6c:30:a5:2a:fe:f5:
         1b:c6:63:8e:72:e1:00:96:71:13:e5:7f:4e:ea:6a:ed:18:62:
         39:fc:00:2c:05:c0:f4:b0:79:06:6a:ae:6f:e0:fe:de:69:1a:
         fe:7a:d9:2a:ca:f7:e5:ce:24:3b:71:67:95:1b:1e:67:72:f6:
         18:84:a3:e1:98:d7:f2:ab:e2:8b:1e:01:58:b6:f9:69:9a:96:
         13:2d:9f:15:74:45:41:ad:ae:5c:6e:b6:f2:00:16:75:74:7b:
         8d:5f:a3:b7:eb:e6:42:7c:8d:c4:ef:9e:88:56:6d:e3:08:c6:
         02:2e:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:57 2025 by rpki-client