Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          9CqTKJumRN1LvB+xudJal55FdZn7xME7ztneldyHiyA=
Subject key identifier:   5E:A7:1B:A9:F0:53:11:3B:AF:60:1C:2D:B8:93:56:91:1F:D5:12:56
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1E3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1E1E
Signing time:             Fri 06 Jun 2025 16:09:03 +0000
Manifest this update:     Fri 06 Jun 2025 16:09:03 +0000
Manifest next update:     Fri 13 Jun 2025 16:09:03 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: 5Jd3bcUH+VgejgzAjtNdCZLtdmlS8qxWJFaqjJdbYIU=)
                          2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=)
                          3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=)
                          4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 16:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7741 (0x1e3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Jun  6 16:09:03 2025 GMT
            Not After : Jun 13 16:09:03 2025 GMT
        Subject: CN=6843129f-2143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:14:94:b5:06:de:60:ff:c9:d5:2e:d4:b2:
                    6c:23:22:2b:07:39:03:5c:dd:76:b8:c3:2a:d3:b6:
                    03:ff:71:55:86:ab:86:da:33:1c:06:a8:84:25:e4:
                    9c:99:50:45:6b:41:30:17:e7:ea:a6:06:ae:f9:90:
                    d0:8d:a4:18:2c:6a:e8:62:78:64:0a:e9:51:a5:81:
                    7e:4e:d5:43:53:43:df:cf:bc:ae:75:41:bf:0c:83:
                    e0:7c:da:56:fd:db:ae:1b:ae:55:5c:70:ab:e7:1d:
                    45:b3:fa:77:e9:eb:60:ba:7b:60:57:5f:eb:31:4a:
                    d4:28:b0:f0:ee:65:7f:0d:d0:74:27:90:ee:46:f8:
                    fc:fa:07:40:ef:3c:2b:de:92:84:f4:7b:8d:d9:ce:
                    fd:c9:5e:3d:16:66:a4:05:de:c1:fa:8c:98:fb:83:
                    54:33:0b:52:e6:a6:f3:08:2e:44:3f:a1:af:80:8f:
                    c9:a8:67:c5:04:1b:04:38:31:ad:1f:d8:77:eb:ef:
                    3f:c1:26:99:ce:67:9b:04:b4:b7:f7:cd:94:e9:f5:
                    e3:72:08:91:20:f4:a7:2a:bb:cc:05:1a:8c:20:2c:
                    b7:9f:b2:64:83:61:88:54:dc:66:43:04:f5:c9:a4:
                    ca:1d:34:bc:ca:1d:18:b3:99:dc:b4:2a:b5:a4:f7:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A7:1B:A9:F0:53:11:3B:AF:60:1C:2D:B8:93:56:91:1F:D5:12:56
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:28:0c:a7:e9:ea:3c:fe:2b:2c:e9:4a:4b:bf:16:c1:0d:
         dd:96:9e:a1:c9:84:a3:73:27:be:11:bc:45:19:34:5b:7f:a4:
         52:4d:59:cf:f8:26:2b:18:e1:05:23:9d:cf:10:91:32:fe:dc:
         c7:5a:5a:1f:37:b4:09:0c:c2:39:b9:1a:df:96:58:42:cd:89:
         e3:f2:cf:e1:7d:3b:6b:d8:28:f3:77:22:18:7a:5b:a9:ac:29:
         e2:38:5d:4f:49:ad:3a:44:d1:ce:31:b6:d3:b3:c1:71:f2:cb:
         89:31:71:c8:b3:45:e6:d1:de:5e:90:4a:af:aa:b7:02:32:28:
         cd:c3:9d:86:aa:16:00:dd:56:21:cc:10:1e:c1:44:88:0a:ce:
         23:f4:9c:35:04:d4:5d:14:a4:93:50:c2:98:bb:82:18:b2:d9:
         41:8f:85:31:a3:f1:d3:b2:53:84:0b:c3:a5:7c:95:82:1f:15:
         11:21:28:26:f7:51:e7:74:68:57:c8:46:81:fa:ee:23:72:bc:
         79:c8:43:f2:aa:0f:6d:49:eb:49:e4:b4:b1:4e:61:79:c6:5a:
         3f:16:b8:6a:0d:3b:fd:58:2b:2c:11:0f:2f:09:8b:91:ef:9c:
         89:da:c6:52:de:6d:99:f8:df:49:07:3e:8f:bf:af:c8:8e:f0:
         00:19:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:51 2025 by rpki-client