Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
File:                     jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json)
Hash identifier:          61yQPAnZ1lQBAEwoxCtRJq6eYG4t7uc3apzeZ8JxVdw=
Subject key identifier:   E2:14:AB:A8:D9:77:88:87:30:78:E1:46:37:86:15:D1:AD:43:BF:92
Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Certificate issuer:       /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Certificate serial:       09A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
Manifest number:          0999
Signing time:             Wed 02 Jul 2025 20:19:22 +0000
Manifest this update:     Wed 02 Jul 2025 20:19:21 +0000
Manifest next update:     Wed 09 Jul 2025 20:19:21 +0000
Files and hashes:         1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: Z3TZcQXJB052C7/sOV7N+WC37QX4qkZCfA8etaLSGe0=)
                          2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
                          rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
        Validity
            Not Before: Jul  2 20:19:21 2025 GMT
            Not After : Jul  9 20:19:21 2025 GMT
        Subject: CN=68659449-d550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:68:5f:07:a8:94:65:f0:09:4d:09:03:8c:
                    3f:4d:60:bd:ea:dc:0f:1f:08:b7:b4:f8:fb:92:b7:
                    2b:79:ad:78:d4:0c:d4:cb:d3:d1:4d:c5:0b:54:b5:
                    95:68:45:73:e6:a5:d4:67:61:61:d5:d4:39:10:9c:
                    44:c9:d0:d1:6c:db:a9:e6:5b:b2:eb:e2:9b:32:7b:
                    36:53:ae:59:b6:1e:d1:29:38:43:01:64:d8:77:3a:
                    b8:a5:b2:b6:61:5f:42:52:2e:87:8c:cb:47:18:41:
                    d9:71:02:5c:f3:8a:78:2e:b5:05:66:44:11:b6:70:
                    28:68:6f:9b:4c:bc:25:29:f2:38:a4:9b:af:96:ca:
                    e2:e4:93:42:50:a8:4f:11:56:5d:ce:25:59:4c:ed:
                    42:06:9b:a6:4b:88:bb:b4:2f:18:17:fe:48:77:94:
                    2f:0b:0c:0c:ab:f9:c7:12:ae:a3:6d:69:18:10:21:
                    12:22:55:c2:7d:c3:8b:6c:b6:05:1a:b5:49:42:a5:
                    91:59:d3:4f:53:83:94:0a:66:c5:07:79:a9:ea:92:
                    f8:06:c6:29:41:8e:6e:99:76:d3:4a:4d:71:61:89:
                    4b:d8:0c:3b:eb:0b:cb:8a:87:28:20:70:d2:47:b6:
                    2c:12:da:e9:85:66:30:c9:b3:a3:e6:2b:8b:8e:d3:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:AB:A8:D9:77:88:87:30:78:E1:46:37:86:15:D1:AD:43:BF:92
            X509v3 Authority Key Identifier:
                keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:86:74:55:44:bd:f4:02:ed:70:e2:b4:be:4c:cc:a9:84:de:
         bc:38:75:b1:3c:c0:68:27:f2:5d:68:2d:82:cc:73:49:44:e0:
         10:1c:59:22:a9:23:32:ea:b1:90:b7:a2:19:cc:d7:cc:86:00:
         a5:8e:d3:60:35:24:6e:3b:e7:1b:87:09:31:f2:04:6f:c5:77:
         37:f5:63:33:10:a4:60:28:64:b5:69:86:37:3d:79:c4:da:3a:
         47:1e:b0:b7:31:cf:8b:b4:bf:8e:6d:e6:4c:8c:41:4a:a0:8d:
         56:80:40:a4:35:f0:e2:21:ab:dc:1d:1f:16:49:8c:00:7b:e7:
         73:42:a8:05:53:f7:88:c4:cf:6b:4a:85:25:b8:9a:8c:62:2b:
         df:2b:43:92:1c:15:57:1b:c1:52:73:9c:b3:7a:d9:29:de:64:
         c7:ea:e7:0a:bb:ee:6a:28:b8:37:4c:ae:79:97:49:dd:46:40:
         55:17:be:ac:bb:9d:55:5e:19:eb:34:57:ef:89:a7:7a:33:3f:
         c1:8d:4b:fc:77:57:0c:de:4e:65:96:ae:be:8f:49:57:5a:b9:
         de:74:b2:2c:89:8e:28:44:94:53:70:ff:2f:ea:71:3d:c7:83:
         58:49:38:67:ad:eb:52:51:bb:1f:00:ed:2e:b8:f1:69:26:87:
         8e:3a:7d:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw
Q0M2RjI5MEIwHhcNMjUwNzAyMjAxOTIxWhcNMjUwNzA5MjAxOTIxWjAYMRYwFAYD
VQQDEw02ODY1OTQ0OS1kNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37ZoXweolGXwCU0JA4w/TWC96twPHwi3tPj7krcrea141AzUy9PRTcULVLWV
aEVz5qXUZ2Fh1dQ5EJxEydDRbNup5luy6+KbMns2U65Zth7RKThDAWTYdzq4pbK2
YV9CUi6HjMtHGEHZcQJc84p4LrUFZkQRtnAoaG+bTLwlKfI4pJuvlsri5JNCUKhP
EVZdziVZTO1CBpumS4i7tC8YF/5Id5QvCwwMq/nHEq6jbWkYECESIlXCfcOLbLYF
GrVJQqWRWdNPU4OUCmbFB3mp6pL4BsYpQY5umXbTSk1xYYlL2Aw76wvLiocoIHDS
R7YsEtrphWYwybOj5iuLjtPuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIUq6jZ
d4iHMHjhRjeGFdGtQ7+SMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF
N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2
NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+hnRVRL30Au1w4rS+TMyphN68OHWxPMBoJ/JdaC2CzHNJROAQHFki
qSMy6rGQt6IZzNfMhgCljtNgNSRuO+cbhwkx8gRvxXc39WMzEKRgKGS1aYY3PXnE
2jpHHrC3Mc+LtL+ObeZMjEFKoI1WgECkNfDiIavcHR8WSYwAe+dzQqgFU/eIxM9r
SoUluJqMYivfK0OSHBVXG8FSc5yzetkp3mTH6ucKu+5qKLg3TK55l0ndRkBVF76s
u51VXhnrNFfviad6Mz/BjUv8d1cM3k5llq6+j0lXWrnedLIsiY4oRJRTcP8v6nE9
x4NYSThnretSUbsfAO0uuPFpJoeOOn00
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:33:26 2025 by rpki-client