Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          6p9ff3BHfUL6MbHI7TY1V56ddCjXZNJBhiZgGDPXVwo=
Subject key identifier:   CA:A4:FD:51:D8:A5:53:63:A2:03:EF:AA:0B:C0:C4:37:8D:36:5A:5D
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          4F
Signing time:             Wed 17 Sep 2025 08:06:06 +0000
Manifest this update:     Wed 17 Sep 2025 08:06:05 +0000
Manifest next update:     Wed 24 Sep 2025 08:06:05 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: 4HJn73uSgmwBKGC2hfKEDkjngrY5D8YYfThAxzi2Eag=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Sep 17 08:06:05 2025 GMT
            Not After : Sep 24 08:06:05 2025 GMT
        Subject: CN=68ca6bed-9cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:cf:20:87:5f:2d:34:42:ba:5f:a0:32:ab:
                    69:27:b0:6d:36:0c:7b:49:69:50:e4:a6:a2:13:4a:
                    98:f9:f3:80:8a:bb:79:c7:7d:75:03:43:33:d2:f1:
                    ea:0a:cd:19:b7:c7:a6:34:50:42:b2:48:ab:fc:d0:
                    c4:f8:69:49:74:de:7b:0d:13:ec:bf:75:86:01:d5:
                    c0:ad:7c:b0:4e:3b:ee:9b:bc:2b:07:a2:3b:e3:bf:
                    9d:a6:44:bd:97:69:c4:ec:b4:bb:a2:25:60:3e:9a:
                    cc:22:9c:e0:37:e5:6b:ad:e8:d4:b2:63:e2:c0:2f:
                    99:ec:13:86:53:9a:5f:22:d9:0a:0e:ed:78:03:be:
                    a6:1b:91:46:c1:73:9d:9f:eb:17:a9:e0:37:66:c0:
                    40:f3:1f:5a:91:0a:f2:09:9a:f6:61:6d:a6:5d:c1:
                    5a:50:5a:be:62:d7:91:ee:49:2f:f0:a1:75:31:7a:
                    ff:1b:bc:d8:d9:bf:a1:ee:a1:22:98:fa:0c:c4:33:
                    f0:81:99:4f:6d:9e:75:4d:4e:ad:fe:91:b5:be:40:
                    3a:52:7d:33:4e:db:5b:97:25:e8:a0:ea:cc:39:7d:
                    f1:18:f7:f3:70:47:17:5f:f0:7b:5d:bc:36:02:6a:
                    36:9e:52:39:26:8c:fd:81:4a:e5:81:05:2b:cb:fe:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:FD:51:D8:A5:53:63:A2:03:EF:AA:0B:C0:C4:37:8D:36:5A:5D
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:12:bd:82:9f:1e:c3:ec:ca:46:45:66:15:1a:5d:dd:31:37:
         d7:70:22:e5:15:01:d7:e5:dc:d3:0d:7e:1b:b9:76:87:a4:72:
         79:b1:8b:f4:b4:0e:bd:15:48:e5:16:19:d2:81:5d:32:c6:78:
         e7:fc:df:bf:74:2e:f4:1e:8d:7f:ba:ae:60:dd:ff:bd:90:20:
         2e:01:53:72:ce:b7:e0:de:59:61:38:2f:28:51:69:d6:3d:f5:
         ae:57:d4:9a:a8:9f:e5:d5:3e:62:f4:0c:99:b1:4f:ab:19:51:
         3b:02:10:d9:52:b1:66:e2:8c:d9:20:9f:02:56:12:6c:af:88:
         7a:00:25:2c:36:08:87:65:c4:de:89:c3:56:7f:67:f7:98:b9:
         7e:e9:3c:3e:3a:3a:af:07:6a:78:6c:5b:b1:00:97:af:2a:0e:
         ec:f2:b8:cc:53:e9:12:c9:3e:85:ae:1b:88:b2:78:a6:46:4d:
         63:1e:07:ec:ad:4d:78:7b:f6:51:32:84:50:5d:db:a4:ff:9b:
         07:31:27:64:0e:01:3d:52:44:a6:cb:73:59:53:23:e1:98:f0:
         e5:05:f9:07:64:f9:2f:75:a4:a8:9d:67:7b:f5:7a:6a:40:26:
         b9:19:12:a8:1d:ed:a0:43:3e:3d:a0:2c:eb:5d:8f:2a:f9:25:
         1c:51:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:53:06 2025 by rpki-client