Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          Etgq4WA66S+K8foUb6KwTFvzsp7begAkE2ryvj7zm/0=
Subject key identifier:   28:85:32:00:86:AF:E6:58:51:BC:50:1B:16:B7:92:2A:11:87:A4:6F
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1B59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1B0F
Signing time:             Mon 08 Sep 2025 16:18:46 +0000
Manifest this update:     Mon 08 Sep 2025 16:18:45 +0000
Manifest next update:     Mon 15 Sep 2025 16:18:45 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: dtndK3KTbs3aJNd0BPXgcASO6MQkPex8ROyxUtqyWzs=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7001 (0x1b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Sep  8 16:18:45 2025 GMT
            Not After : Sep 15 16:18:45 2025 GMT
        Subject: CN=68bf01e5-9b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:88:37:38:1e:1c:82:f8:d4:92:20:93:b3:
                    87:97:9b:d1:b0:b2:90:52:1f:6d:3c:6d:a9:3a:b8:
                    2f:e1:36:dc:d5:27:15:6a:65:78:5d:35:6a:7d:be:
                    c7:ec:3c:14:3b:4d:de:46:57:94:73:d3:c5:a0:53:
                    12:6d:2b:74:28:32:f9:37:67:ff:89:dc:cb:e5:aa:
                    94:5c:df:66:37:ba:40:f0:6a:9b:0d:58:f1:47:d4:
                    a5:4e:00:d0:c7:7f:79:a4:d6:14:bf:d5:bd:df:db:
                    bd:15:96:ea:8c:45:29:fc:1d:ac:f4:94:19:62:c2:
                    81:5e:8a:05:54:35:3e:e5:c1:ab:bd:2c:a3:12:58:
                    bd:ce:66:01:d5:45:d7:8d:5c:7d:db:14:bb:04:cd:
                    aa:79:0d:4b:db:db:0e:bf:6f:72:33:89:fd:74:a5:
                    4a:6c:c5:6d:6e:e1:40:7a:47:34:bd:ce:e2:f4:00:
                    31:b1:4e:0f:75:02:27:8c:b9:c0:27:90:ee:fe:50:
                    ec:8e:0f:54:f7:d0:fe:0e:42:5d:a5:6f:6a:be:93:
                    4a:ae:1e:1b:b9:5c:5a:a5:d8:4d:9f:81:c2:6c:f2:
                    94:a1:1e:1f:d0:80:b6:b0:04:b2:4c:e2:ab:04:49:
                    30:79:a3:4a:ef:65:d8:e8:28:67:79:f4:ee:17:57:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:85:32:00:86:AF:E6:58:51:BC:50:1B:16:B7:92:2A:11:87:A4:6F
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:b7:8b:06:1e:ca:4b:47:a4:3a:70:b0:a4:70:9f:60:7b:
         4e:f1:c1:e0:64:c8:2d:c7:64:8a:61:5e:64:74:12:14:d7:9c:
         f2:88:15:29:d1:44:ec:37:3d:47:91:55:7a:68:6d:12:d4:14:
         d3:11:08:a4:67:3d:ae:1b:cd:9f:40:87:3c:3b:0b:20:6a:5a:
         cb:21:05:66:b2:bc:56:03:4d:2d:b6:55:3e:97:9e:1c:75:a3:
         30:b7:3a:54:e0:05:36:17:18:f1:18:c2:66:44:bf:4d:c5:02:
         8f:79:bf:17:ad:8a:b0:3c:97:fb:39:a0:90:c4:81:50:a9:02:
         76:47:ae:5f:47:25:66:d5:8c:82:c1:92:78:36:67:01:85:98:
         f1:e9:ea:94:3b:b3:fa:fc:ac:32:d1:e8:af:60:9c:37:68:93:
         a4:85:6e:3c:c9:f2:7f:7e:6f:79:6f:60:8d:a0:20:a6:d8:88:
         1a:9c:3e:ba:49:5f:00:f9:7d:58:7b:e2:72:ed:0a:20:e9:c3:
         a5:0c:6f:60:d9:f3:17:ad:3c:68:fe:47:d2:b6:33:f9:f0:4d:
         4b:57:f7:af:31:45:6d:e0:b9:92:dd:b4:39:57:f1:0b:8f:34:
         30:79:4c:70:46:74:d8:ec:47:88:67:a9:4e:22:42:f8:c8:bc:
         52:73:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:32:58 2025 by rpki-client