Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File:                     kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier:          Ct31+RRlIS7Zcwwy8tqZGBev+dMx65SrbNHOEpyoG7E=
Subject key identifier:   CE:4A:47:97:AF:9D:D1:E3:30:64:F4:A8:5A:FE:E8:77:C7:46:51:0C
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       16B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number:          169F
Signing time:             Thu 12 Jun 2025 16:38:07 +0000
Manifest this update:     Thu 12 Jun 2025 16:38:06 +0000
Manifest next update:     Thu 19 Jun 2025 16:38:06 +0000
Files and hashes:         1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: lz5X27gz/ZogKcfFetUgQ5RoYllXpGvxEp8Wx3MOW0Q=)
                          2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5813 (0x16b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: Jun 12 16:38:06 2025 GMT
            Not After : Jun 19 16:38:06 2025 GMT
        Subject: CN=684b026e-76e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:ff:ab:74:99:ec:d1:cc:25:dd:52:0a:a1:
                    0c:1b:82:32:53:3f:6e:04:f9:07:6c:ef:61:d0:13:
                    d3:62:12:59:1c:4d:5b:b9:58:96:5b:db:cc:cb:93:
                    4d:de:ca:39:0f:ea:98:83:36:30:79:9e:30:df:e0:
                    49:01:87:6e:1d:30:a8:c4:fe:0e:55:61:ec:0e:9a:
                    dd:9c:e6:9b:7a:34:c4:a3:a7:94:4b:4c:19:08:64:
                    74:bb:7e:00:1e:52:05:e5:18:a3:db:7b:9f:49:44:
                    48:d4:2b:f6:1e:92:18:08:cf:fa:0b:5f:f6:f2:04:
                    5e:07:f3:62:cb:49:f3:41:9a:58:62:b3:ac:44:3c:
                    a4:df:6a:9b:12:5f:d5:47:9e:5e:65:d2:80:38:f7:
                    39:2c:e8:85:f4:67:ac:02:22:31:9d:85:e7:66:3a:
                    fe:e9:ad:bf:46:4b:c8:da:2f:fc:bf:af:e9:e2:91:
                    02:6d:c4:e3:f4:f7:61:f2:57:74:de:80:a6:99:7b:
                    c8:06:b5:47:bc:ba:cc:a5:c0:06:fb:62:6d:b3:96:
                    8c:a6:1f:38:5d:cd:e5:a2:68:96:7e:8d:8f:96:4d:
                    ad:dd:2f:bf:a6:76:6d:22:2c:a3:4f:14:65:c1:01:
                    37:64:1c:1b:1c:a6:3a:7e:3a:57:e1:09:af:30:a2:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:47:97:AF:9D:D1:E3:30:64:F4:A8:5A:FE:E8:77:C7:46:51:0C
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:a6:1a:23:45:33:f5:a4:54:a2:0b:4d:f8:57:41:2e:ad:
         5d:f6:34:32:fa:17:3a:97:4f:36:5b:9a:86:37:9c:c5:b1:c9:
         33:d7:41:f2:73:8d:5f:bb:4a:07:d1:65:d6:88:7a:59:40:af:
         38:fb:53:74:dc:51:0d:53:87:2c:9c:84:a0:7b:b1:eb:02:57:
         23:e0:ed:af:a1:d5:52:bd:ac:3f:12:1f:a9:6d:86:28:62:bb:
         27:6c:20:0e:3d:a4:47:41:df:3c:b4:5d:81:f2:bf:38:43:66:
         22:86:09:e2:1a:63:d9:3f:dd:6e:7e:94:6f:63:87:d0:c1:51:
         aa:c1:69:b5:88:a0:88:5e:95:57:ec:2e:bf:8d:89:fc:54:9e:
         aa:e0:6b:7d:fd:47:9e:de:11:81:21:8f:d9:c4:75:08:df:ba:
         16:11:c2:fc:bf:3d:db:1b:6c:8f:de:0e:d6:6e:05:72:be:a3:
         39:b7:5f:a7:ea:14:0f:81:1e:75:2c:24:82:ea:b3:e3:78:1f:
         af:7f:80:74:0e:95:35:91:36:9a:42:fd:a5:19:e2:88:37:66:
         d9:f2:91:cd:c3:99:2c:04:16:b4:28:e6:69:f5:be:52:d5:e7:
         87:c3:ab:7a:37:48:d9:fd:59:b8:bb:bc:7a:7c:8b:7d:a3:24:
         10:b5:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:55:36 2025 by rpki-client