Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File:                     dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier:          yKQkJj0Pr6NzTvrqJKDhC7vBJui5SbQ9OjoR+Ppvu4o=
Subject key identifier:   1E:C9:B3:17:63:EA:38:FD:C6:5D:6C:9F:91:AB:16:7C:2A:72:15:9A
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer:       /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial:       0C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number:          0C1D
Signing time:             Fri 30 May 2025 18:55:39 +0000
Manifest this update:     Fri 30 May 2025 18:55:39 +0000
Manifest next update:     Fri 06 Jun 2025 18:55:39 +0000
Files and hashes:         1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: 2CocCgYslbYcpr8+Rx5E2EFt/+QOvpWZfZrxWo7pXJU=)
                          2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: DROTwTMk5DUvv23krOsjnKxfQT0TAHld0vTq/cxjBfM=)
                          3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: z4WcPtmsy3sGBTXhyRrnZ77SzocIV0s6o5lPO+EbUAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
                          rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
        Validity
            Not Before: May 30 18:55:39 2025 GMT
            Not After : Jun  6 18:55:39 2025 GMT
        Subject: CN=6839ff2b-bfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:2e:aa:a7:ec:3f:29:dc:b8:25:bf:48:e1:
                    ad:b7:0e:08:af:f4:57:95:46:1d:f0:ba:a2:4d:1f:
                    ed:1d:19:87:c7:fe:ef:e5:54:21:40:46:26:19:36:
                    0a:e7:c8:6b:49:32:dd:6d:50:0f:f5:0b:a6:87:6d:
                    07:4b:19:51:ce:b3:f2:26:e2:8c:65:25:d7:58:b4:
                    ac:c8:bc:c9:ec:75:df:a1:02:2b:09:64:0b:47:13:
                    8c:64:66:35:18:47:33:98:5c:5c:b5:89:d5:55:a3:
                    7f:85:2c:f9:fc:2b:1f:95:07:56:14:ac:5b:19:77:
                    2a:4d:95:67:4c:98:6a:65:08:7a:97:5f:69:32:a0:
                    29:17:1a:1a:08:c6:68:9f:22:9a:d8:ed:d4:aa:d4:
                    6e:78:46:34:17:4b:1f:4d:f7:de:55:d5:af:bf:d6:
                    37:d2:8d:78:15:d6:c8:4b:5f:9e:ae:32:5b:73:d1:
                    db:7d:15:c5:42:05:bf:7c:56:07:5d:04:41:c1:f6:
                    7c:82:6d:ae:40:c1:8f:dc:63:54:86:10:f3:1f:ae:
                    f8:53:2c:a9:f5:fb:3a:2f:0d:47:7a:28:14:94:ff:
                    e5:a0:df:1e:22:09:62:bb:76:00:0d:8c:64:bb:e3:
                    d8:21:4b:4e:43:d2:01:96:7e:1e:be:5a:57:a6:3e:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:B3:17:63:EA:38:FD:C6:5D:6C:9F:91:AB:16:7C:2A:72:15:9A
            X509v3 Authority Key Identifier:
                keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:ab:8b:83:a7:32:72:51:25:80:7c:e6:23:92:3b:3b:39:
         5f:c3:69:b4:bb:87:8a:f8:34:ac:76:03:0f:4c:e1:ad:5f:b0:
         96:56:29:49:b3:ac:95:12:1d:01:03:ec:5c:ac:26:a7:76:0b:
         a9:04:51:c3:c2:0f:61:7f:b8:f1:80:74:60:c3:93:28:bb:2a:
         8c:ea:10:75:be:be:9e:bc:07:f3:a5:7e:0d:1d:4d:e8:2a:1a:
         0a:05:61:72:7a:cb:46:a6:04:d6:d3:c7:48:dd:bd:79:15:fc:
         ca:1f:3f:26:67:68:a6:b5:cb:bb:d9:8b:bc:d4:2b:4d:d6:d7:
         f1:06:cb:0e:96:27:b3:ec:c2:d5:a8:9e:ed:af:19:65:cb:ec:
         56:86:5e:af:91:e2:a2:f1:1b:f3:b1:46:2d:82:25:81:43:b3:
         06:ac:3e:8a:25:b6:77:1e:78:01:67:fd:1b:b8:89:4d:c0:eb:
         bf:7d:b2:16:3f:d2:b6:0a:44:c6:41:74:27:08:2a:67:2e:d2:
         70:18:05:86:01:d5:c5:40:c9:aa:c0:b0:e5:a6:16:9c:84:3a:
         90:9d:b3:43:90:fc:1d:cc:10:36:8a:6e:7b:90:1c:37:7f:17:
         d7:52:43:bd:43:cf:cb:9e:3d:b3:fb:0e:57:7f:22:e0:30:ab:
         a8:d5:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:42:05 2025 by rpki-client