Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File:                     g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier:          UdAQN0hFANmRl0tM1qT+mFrWSX2uztaHaiKc2kQIdf4=
Subject key identifier:   EC:DC:37:A4:86:61:42:0A:14:44:80:BB:E3:3F:7B:66:AF:81:91:13
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer:       /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number:          D6
Signing time:             Sat 19 Jul 2025 05:46:38 +0000
Manifest this update:     Sat 19 Jul 2025 05:46:37 +0000
Manifest next update:     Sat 26 Jul 2025 05:46:37 +0000
Files and hashes:         1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: Z9Wrhma9vY8qOEnYN0qzwcP9uQmTSuPYH65BcQ1gGyo=)
                          2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: YulPvT0hM25YZIDv5KjG+XciSXVC4OQirSgi0X2f6Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
        Validity
            Not Before: Jul 19 05:46:37 2025 GMT
            Not After : Jul 26 05:46:37 2025 GMT
        Subject: CN=687b313d-095e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:f3:b3:5e:f3:2c:f8:1a:75:1f:84:bb:ca:
                    ce:bd:a1:88:08:3e:c4:ba:06:a7:17:b7:5d:3b:ae:
                    f9:c6:2c:41:3d:65:e2:7e:a6:b2:9d:8a:3c:90:bc:
                    fe:19:e8:6c:b0:ae:e1:ce:42:61:0c:6c:94:23:82:
                    8c:fe:49:d3:d5:a9:cd:89:73:f3:2f:0e:5e:cd:ac:
                    44:eb:e2:c0:1b:6a:59:1e:f0:52:20:c5:9e:c5:0e:
                    67:93:4b:e2:24:d9:9f:19:f2:13:37:01:96:97:eb:
                    6e:98:16:fd:a6:4e:f2:9d:15:87:dd:d3:ed:17:4a:
                    97:44:3a:81:88:f8:22:be:43:c1:43:6d:6e:0e:4c:
                    6d:9a:71:5c:db:88:3b:cc:bd:a8:87:a1:9a:1f:f4:
                    0f:1a:d8:7b:51:8e:55:21:68:3d:ec:ab:e3:9c:b9:
                    95:b2:c6:cb:5d:94:60:fe:32:09:39:b2:a9:de:44:
                    3f:61:ac:b9:47:1a:ea:c7:92:12:12:47:ca:09:76:
                    43:c6:58:55:fa:ec:70:de:d8:ee:82:c4:f7:fd:ed:
                    f9:f7:2b:30:9e:57:d1:ed:3a:a2:45:f1:87:7b:76:
                    09:96:5c:19:a0:a8:78:3b:69:5a:fc:e1:ea:4b:2f:
                    d3:0c:70:80:15:f2:a8:39:9e:d1:86:ea:a8:62:39:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DC:37:A4:86:61:42:0A:14:44:80:BB:E3:3F:7B:66:AF:81:91:13
            X509v3 Authority Key Identifier:
                keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:2c:4f:b7:c1:41:aa:2c:69:47:7b:ab:d7:10:f2:4c:b1:33:
         c4:a1:2b:5f:1c:aa:62:d4:5c:81:29:f5:4e:27:9e:5f:7d:85:
         e5:da:2e:e5:bd:6b:c1:1c:49:ff:00:87:7c:a5:53:52:e7:5b:
         fe:9f:cb:ec:df:d1:65:5d:34:5c:08:be:85:49:fc:37:7a:34:
         fc:fa:0f:ba:4e:c9:a8:ab:b2:91:c2:25:de:87:bb:ea:1a:73:
         88:ce:67:83:2a:27:92:55:48:de:b4:d2:71:7c:93:25:33:78:
         f3:fa:26:ca:4f:bf:68:7e:0e:39:f7:98:88:96:e8:1a:2f:58:
         6e:3c:77:a6:23:b6:93:63:9e:dc:d2:cf:3b:0a:b0:c6:a6:14:
         2d:08:d2:21:64:d4:22:8b:15:5b:d0:9c:e7:9b:0d:86:e7:fa:
         f4:54:b1:b4:aa:76:f1:ff:be:16:4f:f6:03:7e:15:78:a5:4a:
         a5:04:b7:1b:e1:83:87:5a:c8:3c:1c:a9:fe:d5:51:bb:f5:25:
         d4:9d:16:d6:2d:89:8a:ac:59:7a:98:1e:80:17:ef:0c:32:dd:
         8d:cd:ab:59:71:89:00:37:6c:44:88:76:56:48:ec:5f:07:99:
         22:46:7c:5b:a9:7f:00:f5:01:be:68:5b:c9:bc:50:15:0d:3b:
         9d:d0:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:40:11 2025 by rpki-client