Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          ELCwpLxxUylMGjVmdnc7yoJhZZg8x7ZLe9jwq+2LnzI=
Subject key identifier:   26:44:45:71:98:AB:AA:74:C2:9B:C1:EB:1E:41:9B:E3:8B:93:F0:09
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          04BB
Signing time:             Sun 08 Jun 2025 23:32:23 +0000
Manifest this update:     Sun 08 Jun 2025 23:32:23 +0000
Manifest next update:     Sun 15 Jun 2025 23:32:23 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: rr9mBWs0VsqMmy4T45+ike8ekfu4FXLAhqSUKcinMik=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 23:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Jun  8 23:32:23 2025 GMT
            Not After : Jun 15 23:32:23 2025 GMT
        Subject: CN=68461d87-872c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:a2:fa:4e:07:8a:f2:4e:86:42:cd:b9:5b:
                    d7:36:df:44:07:87:af:da:18:a7:06:6c:3f:5b:48:
                    a7:23:5a:c1:c9:a5:fb:ea:7a:e2:8a:44:dc:17:a7:
                    55:10:09:ef:6f:9a:4b:be:4f:7b:54:06:b0:71:4b:
                    79:d9:17:d2:8b:44:ac:02:dd:0e:4f:7e:e1:c0:14:
                    16:d7:9b:dd:65:12:85:c6:5b:1c:99:33:5e:17:9e:
                    50:37:8b:dc:53:03:51:9a:6d:50:f5:29:7d:3c:25:
                    e6:bc:c7:75:1c:f7:b4:a8:45:d5:4e:11:4a:19:ab:
                    35:86:d8:55:a5:2b:cd:04:fc:6a:d6:fd:6c:68:63:
                    65:26:23:8f:e8:a7:c5:c0:08:a5:6a:07:2a:5e:80:
                    a2:1f:80:18:d2:58:06:f0:1d:99:74:8b:a7:19:ae:
                    a5:71:ba:ea:3b:66:38:a8:66:16:bc:db:09:1b:94:
                    9d:cc:19:5a:1e:fa:77:ce:bf:17:33:9d:7f:51:42:
                    3b:29:4a:27:04:b0:54:6d:1e:ae:b2:08:58:fa:99:
                    8e:7f:e7:4a:52:42:93:02:5e:be:15:cc:94:d5:fe:
                    67:5d:f7:fa:85:41:c7:40:70:6f:62:53:cd:e2:9b:
                    1e:3b:9e:a1:65:1a:25:29:aa:06:20:73:50:ce:ca:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:45:71:98:AB:AA:74:C2:9B:C1:EB:1E:41:9B:E3:8B:93:F0:09
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:13:36:97:a2:47:5b:44:86:b9:aa:a5:40:ac:e3:dc:29:
         cb:51:71:dc:28:32:4f:2c:c8:2f:64:b3:f2:4a:bf:8c:97:87:
         11:b6:b4:2a:7e:74:c3:53:60:ae:43:09:8c:63:df:e3:ed:37:
         75:99:14:ab:ae:5f:37:3e:68:0c:ea:4b:28:13:f8:27:4a:71:
         e0:34:a8:4f:06:42:8f:bd:0f:05:5c:89:2a:7b:3a:45:e1:38:
         40:64:43:08:71:52:1e:f7:c1:55:68:79:c9:cd:e5:1a:b7:86:
         2d:a6:8e:b1:a3:88:c6:49:c3:37:a2:7d:4b:4a:59:e1:34:61:
         9e:10:99:e3:0a:b7:41:0e:a7:dd:20:13:69:ca:e9:74:eb:40:
         55:21:00:b9:09:6f:0e:ab:dc:7e:11:b3:c5:58:6d:64:94:62:
         3b:70:ac:8f:4d:17:11:19:1b:d4:98:c3:c1:48:b2:3d:26:2f:
         df:b2:6b:45:10:ae:3b:35:73:65:ed:f9:a9:50:6d:b0:2a:57:
         86:28:75:fb:c1:11:af:41:5f:0d:ff:68:64:a6:7d:ad:e4:65:
         6e:0b:32:a2:58:ad:67:d7:0a:c7:9c:ab:81:37:c5:a4:f4:1c:
         fd:fc:fc:22:0c:c2:ab:30:ac:b1:aa:d3:57:07:46:d6:3d:8a:
         86:51:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:48:11 2025 by rpki-client