Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
File:                     2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json)
Hash identifier:          z7UAAEGPGKCTQP6qn7U3nCqOKYLSwLM82r1do41s2fs=
Subject key identifier:   02:9C:F3:6C:A9:A4:20:AB:1F:0F:38:5D:27:28:13:ED:F7:16:14:3E
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Certificate issuer:       /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
Manifest number:          06EF
Signing time:             Fri 30 May 2025 22:14:15 +0000
Manifest this update:     Fri 30 May 2025 22:14:15 +0000
Manifest next update:     Fri 06 Jun 2025 22:14:14 +0000
Files and hashes:         1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: 2483TgUy+YZLjv8+WtfcXejgEt8srorRsUBVxQ8fui0=)
                          2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=)
                          3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=)
                          4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
                          rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
        Validity
            Not Before: May 30 22:14:15 2025 GMT
            Not After : Jun  6 22:14:14 2025 GMT
        Subject: CN=683a2db7-86b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:c3:b8:8b:44:97:c6:65:c7:22:0c:ea:14:
                    47:1a:ac:3a:53:e5:78:fc:50:83:cb:2e:62:0c:1b:
                    17:4b:8e:c0:14:77:45:26:55:35:49:4e:2f:0c:de:
                    2f:4c:d4:7c:e6:17:c9:cf:a4:fb:cc:9a:bc:3e:eb:
                    5f:92:d1:5d:d0:a9:99:5e:e5:4b:48:df:71:91:31:
                    72:1c:f7:a9:eb:e5:90:4f:e0:7b:be:a2:df:54:6f:
                    b3:38:08:25:0d:d0:44:70:95:d8:6e:67:8c:03:e8:
                    2b:ba:2c:f5:a2:67:b1:fc:f4:99:15:8e:08:3e:0e:
                    fa:fa:19:06:5e:e9:fd:62:7d:7a:f6:51:c9:fb:e6:
                    a0:20:b8:62:24:8e:09:60:75:fe:2c:e0:e6:4f:8a:
                    70:6c:38:da:0c:5b:1a:e9:ee:97:15:94:4f:9d:9a:
                    10:3b:4c:55:da:f3:cc:e3:16:20:7d:a5:2c:49:6c:
                    e6:6d:26:43:2a:e4:35:3f:66:d6:58:c3:10:95:24:
                    4b:cf:8b:3f:82:ea:6a:69:a5:ca:3d:ab:da:2d:eb:
                    0d:67:4b:ce:dd:18:76:be:b2:44:e8:63:a5:64:ff:
                    c7:88:31:c2:06:8b:e2:78:c8:af:c2:09:c4:f7:e0:
                    c1:00:09:8a:66:7f:5b:f1:af:83:73:57:42:d0:83:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:F3:6C:A9:A4:20:AB:1F:0F:38:5D:27:28:13:ED:F7:16:14:3E
            X509v3 Authority Key Identifier:
                keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:eb:3e:fa:ef:59:72:f5:0d:70:4e:76:c3:32:02:51:63:
         8a:6c:13:57:3a:49:0d:c3:10:64:04:ed:c7:9d:ec:ad:a2:93:
         ba:79:23:50:80:b7:54:73:b1:bb:46:b2:51:b3:fb:f1:7a:5f:
         95:46:b2:28:16:84:ce:11:ca:c2:1a:e7:0b:f9:f5:3a:05:97:
         c4:d6:cc:63:45:5f:ad:39:dd:27:ad:58:10:2f:a5:a3:34:42:
         ca:fc:a0:e5:32:b6:3f:66:22:f1:b9:4d:8f:90:7c:c5:3c:f5:
         25:65:d0:b1:29:a1:a0:50:71:92:51:e6:d8:70:3a:3f:88:ba:
         3e:9a:29:02:cb:37:11:19:f6:f2:f3:a3:3a:d2:6c:1e:19:69:
         fb:7d:ed:ce:23:b9:23:c4:5f:ab:61:0a:39:31:78:9c:40:55:
         1f:ed:38:52:92:c7:5c:d2:2f:f9:e4:4a:2c:6c:1c:1f:67:ef:
         57:8b:09:19:20:68:48:2d:70:97:1b:9d:76:1c:17:1f:d7:0e:
         0a:b2:0b:70:9c:1c:4c:34:8c:82:07:a3:f2:50:e0:04:8e:0a:
         57:ce:81:3f:00:21:81:e2:83:3d:ad:d7:60:23:84:f8:61:39:
         fc:16:bb:21:05:9a:df:08:40:35:75:df:cf:89:70:bf:3c:dd:
         1e:13:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:29:34 2025 by rpki-client