Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
File:                     6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json)
Hash identifier:          wd/17XjGb1Ja8/Isac5a3zl26zYnYH1nZ+7EocZv73Q=
Subject key identifier:   DA:CA:48:AA:E4:02:65:D2:6D:41:21:C3:74:FF:31:C7:74:D1:8B:10
Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
Certificate issuer:       /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
Manifest number:          43
Signing time:             Wed 17 Sep 2025 08:09:39 +0000
Manifest this update:     Wed 17 Sep 2025 08:09:39 +0000
Manifest next update:     Wed 24 Sep 2025 08:09:39 +0000
Files and hashes:         1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: Zhfax4znT0C6hfjeGenKgomjsVgWf/L0aZbiAjSRNdU=)
                          2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
                          rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
        Validity
            Not Before: Sep 17 08:09:39 2025 GMT
            Not After : Sep 24 08:09:39 2025 GMT
        Subject: CN=68ca6cc3-62c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:56:48:65:6e:11:aa:d9:82:2f:e0:26:25:
                    72:88:2f:85:26:73:90:2c:86:b3:38:1c:60:ca:c8:
                    81:31:43:89:c2:69:ff:d6:c6:4c:77:0f:d8:8a:d6:
                    2d:cc:cf:cc:d8:69:b3:f2:09:67:b4:b0:84:5e:8c:
                    e1:96:08:66:e1:66:f2:ef:c0:de:57:04:df:90:cc:
                    37:e7:83:cd:dc:a9:80:d7:34:aa:f1:65:bb:c6:91:
                    92:52:f2:55:a0:de:6f:14:da:36:8b:4f:d9:6f:ee:
                    7c:f8:97:0c:da:3d:6b:24:96:a8:2f:e6:d4:93:e5:
                    ee:55:31:8c:04:c0:21:95:27:7c:d3:b4:70:0f:bb:
                    5a:3c:04:94:37:57:b9:d7:be:0c:77:a4:e5:df:88:
                    6e:3a:2e:08:08:8c:65:bc:14:ef:10:5f:5c:c7:1c:
                    eb:f0:ac:d5:51:41:0d:92:de:05:df:ef:61:6e:6e:
                    5a:ed:25:59:44:ad:62:01:dd:98:a0:e8:59:8b:0a:
                    00:4c:94:a5:0e:b1:47:d3:b8:c0:28:84:fb:b2:17:
                    00:06:c3:33:2c:17:fe:61:dd:c7:b1:c9:ce:56:83:
                    5f:c3:40:0e:b3:19:bd:21:41:60:6d:43:27:cf:f5:
                    dd:b4:2f:28:42:c0:5e:a0:6f:1e:ca:42:89:84:e0:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:48:AA:E4:02:65:D2:6D:41:21:C3:74:FF:31:C7:74:D1:8B:10
            X509v3 Authority Key Identifier:
                keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:92:d7:a3:20:15:78:88:2a:03:ab:47:8b:dc:ba:37:5b:09:
         28:90:a3:49:c2:76:3a:46:e4:5d:cd:de:a3:b6:1d:c9:ba:11:
         61:93:bf:a3:b7:c7:56:3b:26:02:6f:1f:30:2d:79:5c:b4:0b:
         c1:fc:61:72:37:07:95:72:21:79:ee:96:b2:b1:0f:22:1e:01:
         a6:4e:ee:fd:fc:90:f9:ff:38:f5:2e:df:28:c1:71:15:fa:24:
         25:6c:d2:ce:e7:a1:64:35:4b:d6:5e:3b:e2:64:5c:33:40:83:
         02:86:02:d4:b1:79:d8:b5:4d:56:33:12:2f:71:09:1f:d8:ca:
         f6:07:45:70:43:db:b3:05:e3:54:fe:22:d8:05:b6:cb:7f:53:
         1b:f5:aa:ab:58:f3:69:f2:f9:d4:e9:41:0b:f4:1b:92:0f:73:
         9b:31:db:f3:a7:68:ef:15:72:1c:53:03:46:82:3b:91:6b:c3:
         6a:47:49:77:e4:2c:57:f9:63:31:80:ef:39:08:3b:07:37:91:
         a1:1b:6a:ae:1f:dc:35:40:67:37:c1:19:29:af:f0:da:61:3b:
         50:54:25:7e:5e:9b:f2:ec:e9:05:15:cd:78:da:25:3f:3f:b1:
         3b:8c:4a:75:71:96:22:05:93:06:ad:d9:08:45:78:90:d1:4a:
         39:d2:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:49 2025 by rpki-client