Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          emcUkgYKv1HALZsK+xnRK+wxkG1t4fcd/5L5vrWUwkI=
Subject key identifier:   AA:39:E9:74:85:E5:9D:A5:2D:59:41:EA:AE:69:48:97:2B:B8:2A:35
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       07C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          07C0
Signing time:             Fri 06 Jun 2025 21:11:24 +0000
Manifest this update:     Fri 06 Jun 2025 21:11:24 +0000
Manifest next update:     Fri 13 Jun 2025 21:11:24 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: Wy9i7VN2lkQHrFYHj4dKE9YMUhvHQ8RJulPcCOIZ2F0=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 21:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Jun  6 21:11:24 2025 GMT
            Not After : Jun 13 21:11:24 2025 GMT
        Subject: CN=6843597c-5824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:f4:08:0c:cc:ec:5f:a7:0e:bf:30:9c:d4:
                    35:e0:9b:3b:8d:04:4b:c5:1e:71:22:12:69:58:8f:
                    32:52:15:6c:5f:07:88:38:11:5f:16:d0:59:d3:1f:
                    5b:cf:9f:19:1c:02:a7:e2:7f:c7:ba:6c:97:f5:8a:
                    54:1b:d3:02:3f:03:dc:86:a1:e3:33:89:bb:34:85:
                    9c:41:11:15:e4:10:9b:6d:7d:14:80:fc:b3:f8:92:
                    bd:4a:c5:58:b4:22:35:22:f9:2c:20:88:3f:bb:86:
                    0a:17:1a:b3:d1:3b:6c:72:0f:56:f7:80:d1:ca:b9:
                    f3:86:d3:5a:ab:5b:d7:53:96:5d:0c:1a:5f:a1:b2:
                    1e:f4:12:f6:77:d1:a5:25:64:5a:4f:96:27:73:b4:
                    a1:d9:96:5f:93:35:d6:92:66:87:fb:f1:d8:19:bc:
                    a4:f6:55:b4:61:e1:25:92:33:42:ab:10:fd:18:c1:
                    78:cc:18:80:41:84:6f:f7:84:72:c7:82:13:0a:0f:
                    7b:33:9d:0e:35:39:da:7f:28:af:9a:ec:cb:17:fb:
                    e8:d5:0e:91:96:5e:1d:3b:62:d5:12:41:81:f6:88:
                    39:71:fe:9e:57:f4:09:4d:6e:02:d6:6d:be:e9:33:
                    48:cc:d9:0f:3f:69:d9:7c:57:71:2f:1d:b6:27:a1:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:E9:74:85:E5:9D:A5:2D:59:41:EA:AE:69:48:97:2B:B8:2A:35
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:b7:6a:ac:ee:be:3e:16:e6:0c:6d:91:9e:77:9d:79:4e:
         eb:df:25:1b:38:32:cc:13:18:42:4a:d3:9e:41:b0:24:84:c4:
         44:79:e6:91:b3:2e:d1:20:24:d4:92:d0:a5:b2:e9:74:a3:7a:
         b8:6b:b9:03:50:8c:97:db:3a:2b:f0:3f:df:63:a4:f0:fb:5b:
         cb:25:7e:84:a0:cc:a7:e9:e4:34:94:a6:d8:c5:02:e2:86:5b:
         29:86:55:d4:c5:59:e9:6a:eb:ea:aa:c3:e1:72:f7:f3:0d:13:
         57:2e:e8:2f:d9:c4:c3:b4:c3:00:52:dc:0b:e5:70:22:ff:ca:
         c8:3c:36:99:d9:1a:cc:32:17:69:26:9a:f5:35:e7:51:66:b6:
         9d:a3:b6:3f:f5:0c:65:b8:78:d6:17:4b:8a:04:b2:fc:8f:4a:
         59:17:cf:27:35:2e:76:3e:7a:90:05:09:7b:f9:ea:3d:7e:79:
         e8:a7:9c:bf:7d:7e:bc:ee:d2:65:ef:5f:f2:7c:d1:ba:45:fd:
         ff:02:66:53:a2:a8:86:99:61:f7:ac:20:5a:a1:aa:26:7c:f3:
         3c:81:9a:e8:46:5a:1d:d3:3d:16:d6:9e:d6:9a:2b:f1:5f:a2:
         90:1b:a0:7c:0e:9e:47:e2:bf:01:d4:6e:a9:0f:a7:87:b0:4c:
         78:8f:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:31:28 2025 by rpki-client