Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
File:                     sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json)
Hash identifier:          kcVk6YS4Rfqmj5z1UDwNyCsHkpClhmz/D3J3NJx+TLE=
Subject key identifier:   E2:00:AE:85:E7:72:79:58:91:15:B7:8B:F5:6B:E7:48:DD:5B:CC:AC
Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5
Certificate issuer:       /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
Manifest number:          06D0
Signing time:             Tue 10 Jun 2025 21:59:12 +0000
Manifest this update:     Tue 10 Jun 2025 21:59:12 +0000
Manifest next update:     Tue 17 Jun 2025 21:59:12 +0000
Files and hashes:         1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: NFFVzUet7OFlcm0gBgH/TBOLRcHZLjn1+PrzVIdgQIw=)
                          2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: rRipsWIPpFCqvwU6GU8CPWQ7Gw24E8Icdhb0XLzQIeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl
                          rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 21:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F5, serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
        Validity
            Not Before: Jun 10 21:59:12 2025 GMT
            Not After : Jun 17 21:59:12 2025 GMT
        Subject: CN=6848aab0-8f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:5f:b1:9d:8b:ed:ec:45:cc:d2:3d:86:1d:
                    83:a9:5e:32:17:c1:64:7b:b8:c2:62:9e:51:26:04:
                    2f:5f:46:a0:f4:c4:6b:e2:ac:3b:34:ee:66:c7:92:
                    69:93:45:f0:3c:c8:f1:09:ef:5f:9a:13:ed:4f:6e:
                    25:e3:05:97:ca:47:a4:69:42:d4:f7:dc:10:5b:f8:
                    47:cf:30:a4:d7:b9:aa:c3:e7:30:0c:af:79:ff:ee:
                    6e:20:b1:12:72:17:ad:1d:92:8f:62:85:ec:a5:9b:
                    18:c3:8b:89:24:ce:84:e0:e6:07:4c:e8:23:37:de:
                    15:28:c6:1f:95:d2:b5:4e:93:0d:3f:f7:47:1e:44:
                    26:25:83:71:66:bc:90:d1:7f:83:25:2f:06:9e:7f:
                    ff:a0:c8:73:6e:b3:77:85:f2:61:5b:eb:18:83:be:
                    4b:1b:41:dd:70:b4:b9:1d:84:f9:61:bd:4c:f8:8a:
                    e5:33:d7:2c:0e:98:9a:4c:91:87:7b:a5:a2:14:bd:
                    fc:19:7a:f4:d8:2d:d5:3e:ef:f1:85:d1:c7:d6:dc:
                    e9:65:7c:cc:52:43:04:80:d5:21:fb:f8:00:68:f4:
                    d2:95:36:05:00:99:c6:26:52:a5:30:16:80:c8:4d:
                    32:fe:0f:9c:28:4c:93:44:3e:df:64:1b:e8:b7:a7:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:00:AE:85:E7:72:79:58:91:15:B7:8B:F5:6B:E7:48:DD:5B:CC:AC
            X509v3 Authority Key Identifier:
                keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:29:25:ff:23:a0:14:5a:a8:3c:99:59:ed:d3:04:dd:4c:
         c4:31:b5:7e:19:aa:4b:f6:60:e0:0f:35:cc:b1:f8:05:47:d4:
         2c:b6:06:a5:ca:1f:75:8c:bc:db:3f:a6:55:97:65:1a:51:e1:
         93:0a:41:96:15:cb:3d:f8:d3:d9:13:e9:de:e3:9f:1a:22:48:
         f0:71:8f:4c:59:e2:d9:19:8f:b2:06:bd:9a:32:98:81:87:ca:
         53:e9:b5:77:83:40:ed:78:26:c7:3b:b6:1a:6a:7a:e1:91:0e:
         16:7c:ec:3d:fe:1b:e7:1c:bd:3b:38:53:5a:3c:68:f4:05:cc:
         32:8e:72:ff:e7:40:fd:b0:12:30:a3:db:5d:f2:e0:0e:4f:f8:
         0e:dd:54:08:dc:cd:9d:c1:73:13:55:65:89:a7:be:d2:24:96:
         44:51:a4:56:ff:5a:bf:b4:ac:aa:36:8f:20:48:88:94:7b:3e:
         cd:1d:05:68:28:64:ce:d1:95:02:2c:12:df:c8:b5:77:10:60:
         f8:7c:56:37:6b:06:e3:ff:df:66:cb:cf:c5:58:11:15:e6:56:
         7f:ca:f3:47:a7:5c:f4:a8:d3:7f:68:53:2d:03:12:ac:c8:d3:
         78:09:ab:31:c4:7a:54:cf:66:60:6a:17:6d:3b:3e:0e:42:9b:
         17:56:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:04:19 2025 by rpki-client