Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File:                     kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier:          7AehV/wxV5FMrpb83tmW35LDTERCyIkfgDFHxh0CT3Q=
Subject key identifier:   03:47:AF:67:AA:F6:F2:2D:F3:A0:C1:7A:7C:0F:EF:7D:EC:48:1B:03
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       16B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number:          169E
Signing time:             Tue 10 Jun 2025 16:40:13 +0000
Manifest this update:     Tue 10 Jun 2025 16:40:12 +0000
Manifest next update:     Tue 17 Jun 2025 16:40:12 +0000
Files and hashes:         1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: YmtXEP3/lu/+NyJUF2+ctCQXCbMjoEdRZHbl/K1WTXg=)
                          2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 16:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5812 (0x16b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: Jun 10 16:40:12 2025 GMT
            Not After : Jun 17 16:40:12 2025 GMT
        Subject: CN=68485fed-87d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:a4:30:2a:c6:a5:a9:c9:22:44:28:9d:43:
                    00:c3:f9:27:76:3c:d9:f7:95:b5:67:b0:65:92:84:
                    93:c6:46:e8:ac:67:6c:39:70:88:69:41:32:49:a9:
                    3c:81:32:ae:6f:6e:2b:f5:08:8a:4a:9f:ec:82:aa:
                    d2:f6:29:10:5a:5e:74:6f:75:f9:26:b9:6b:4e:d9:
                    e4:78:0c:f9:d4:00:dc:66:30:e9:a9:b9:ec:9f:0e:
                    37:da:3e:49:29:cf:3d:91:cb:1b:6f:ff:e4:e4:28:
                    48:90:9e:d5:3c:50:de:83:99:99:87:cb:f4:e7:1f:
                    c2:77:f3:b3:3b:4f:64:dd:4e:4c:0e:56:1d:b5:3d:
                    79:c3:16:cf:e4:80:3c:d2:c5:fc:9c:f4:d7:62:e9:
                    68:9f:14:33:46:7c:d4:c0:22:ab:e9:2f:74:15:a3:
                    de:cb:36:87:af:f3:ab:d5:12:d5:fe:de:cb:78:f9:
                    1e:a5:7a:b7:40:dd:02:ac:c4:fc:b7:c5:93:e4:b2:
                    d2:6d:27:b0:c5:87:f5:14:a6:fc:aa:a9:6d:35:48:
                    ed:d3:38:8c:d6:97:f8:84:41:97:15:df:f2:99:ac:
                    aa:80:95:7d:ef:4f:b2:79:75:70:e8:6f:91:cf:a7:
                    30:24:dc:80:bd:1c:18:fe:c6:1e:1c:80:35:2d:df:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:AF:67:AA:F6:F2:2D:F3:A0:C1:7A:7C:0F:EF:7D:EC:48:1B:03
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:76:fc:46:64:cb:5f:e0:65:a0:20:0a:f6:f8:79:b2:5d:
         05:a7:e7:f9:d3:51:55:d1:79:0f:05:d2:fa:99:0f:35:ab:eb:
         25:7e:d0:20:d6:dd:3e:20:28:e4:ba:1a:89:c5:83:12:d6:f7:
         3c:0a:db:6f:40:6a:07:0b:5f:14:b6:6d:c1:a7:59:57:c3:7b:
         50:52:e1:21:a4:e2:29:f3:5c:dd:e4:5f:ba:2e:84:cc:a0:70:
         12:45:e2:9b:23:d8:2b:33:d7:f6:55:2e:11:d5:3d:eb:58:50:
         1c:b0:76:86:b2:16:94:57:d2:03:c0:a1:e4:ac:8e:29:64:57:
         73:b8:00:cb:d3:1e:85:dc:db:54:d9:1b:b8:3c:e1:b4:5c:10:
         d4:f1:c6:53:11:41:db:8c:71:31:7b:f1:74:79:7a:24:5c:25:
         bd:91:7c:45:3f:28:00:81:7d:e1:bb:fd:b5:7a:b6:e2:70:c5:
         67:8e:0e:36:7c:86:1d:b6:1c:8e:aa:db:3f:06:a8:73:01:a3:
         f2:b7:ff:50:d7:86:96:50:cc:5d:fe:61:28:da:3e:fc:f1:31:
         d8:aa:f3:04:c6:57:3f:66:3d:c5:66:77:ed:ee:e5:2d:a5:0c:
         4f:af:8a:07:f9:35:23:01:c6:30:15:cc:18:88:ef:4d:5e:03:
         c0:b1:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:41:03 2025 by rpki-client