Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          z0WZ5xXuccvTljI2qmE11p0c4IuUGVUIZC2FiKUojWY=
Subject key identifier:   21:85:D3:26:E3:23:1B:B0:F8:E2:52:5E:B2:6B:A4:16:72:0D:62:92
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          04BD
Signing time:             Thu 12 Jun 2025 23:30:54 +0000
Manifest this update:     Thu 12 Jun 2025 23:30:54 +0000
Manifest next update:     Thu 19 Jun 2025 23:30:54 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: KxsGbD8MwygVIVPbrgWtXjJZ9J/yUEpXl4eCltuh8Ms=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Jun 12 23:30:54 2025 GMT
            Not After : Jun 19 23:30:54 2025 GMT
        Subject: CN=684b632e-46de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:ec:7a:e4:c4:41:85:57:3e:91:fa:c5:40:
                    e0:14:73:e5:6a:b8:ef:d8:b1:b1:18:c0:f7:93:90:
                    57:53:dd:0e:fd:38:63:a1:c0:94:9e:c1:a6:d0:d4:
                    34:d6:c2:52:eb:b1:e7:d9:a1:16:21:03:2f:5d:37:
                    31:f5:50:d1:47:34:1d:9f:f4:a3:fc:94:b3:51:55:
                    61:1f:20:a3:6b:5e:35:89:19:da:1b:48:b2:3a:1f:
                    9b:33:2a:f1:08:ef:02:50:7f:20:b5:da:6c:7a:c4:
                    21:f3:37:91:a1:54:93:35:55:b2:58:d7:8b:bc:99:
                    0b:fe:47:9c:ae:c2:6b:4c:66:78:eb:fb:ad:6c:1c:
                    e0:5d:b2:47:14:f6:17:ec:08:83:77:3b:ee:ea:1f:
                    00:ca:eb:04:f4:db:1d:3f:a4:96:bb:29:bd:38:16:
                    f7:e2:5e:56:a7:15:d6:f3:45:76:d4:40:37:74:02:
                    e1:68:65:83:27:f0:f9:3b:e2:40:22:ed:cc:ba:c5:
                    b4:74:ef:00:f5:7b:49:02:07:45:b8:12:16:23:0e:
                    30:a8:c4:f5:23:57:ec:b4:a9:0a:d3:cd:b7:e9:08:
                    b8:7d:62:48:a8:48:c2:e1:2f:f9:15:ca:32:c6:f8:
                    28:6b:78:20:99:bd:9e:fe:89:9a:a1:15:09:b2:b7:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:D3:26:E3:23:1B:B0:F8:E2:52:5E:B2:6B:A4:16:72:0D:62:92
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:f4:8d:ac:41:7d:95:b6:18:6a:7f:f5:92:ea:fd:f7:26:
         cd:df:d7:b0:a3:d5:9b:cc:1a:83:d0:74:cb:16:2d:74:73:45:
         c4:46:ce:07:e5:ba:10:40:f5:48:cc:03:a0:0d:c5:8f:58:9c:
         66:98:90:64:bd:8a:93:4a:c6:5f:be:c6:58:9d:bf:97:8e:42:
         15:85:5d:d2:f9:a7:14:10:55:da:6f:23:b3:b1:b1:f2:f1:9c:
         7d:ee:df:3c:c4:53:80:22:79:81:fc:15:9f:63:65:97:99:01:
         aa:8d:ab:33:1f:d9:0f:ef:e0:13:26:47:d4:39:48:e4:70:f1:
         8d:a0:1a:1d:fe:48:30:e6:d4:06:f3:1f:17:d6:9e:91:2e:52:
         8d:1b:ce:8c:23:b6:b6:34:e3:8c:ea:1f:c4:3d:4d:c7:f9:1d:
         cd:52:db:5e:8a:80:3f:49:26:b3:c5:d2:bb:b7:a3:d7:c8:a5:
         d8:0e:bd:e2:cb:42:2e:6e:2a:39:d0:5e:23:bf:f4:42:5f:f3:
         a7:39:19:5c:16:1d:03:e3:35:13:47:4b:13:35:07:4b:c4:4f:
         5b:db:c2:27:59:de:2d:f1:2a:28:34:07:98:d4:b5:94:f4:97:
         fc:9d:ee:06:02:c6:80:06:f3:32:44:01:6a:90:b5:29:94:b8:
         07:7e:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:38:24 2025 by rpki-client