Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File:                     ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier:          moZlxHn2eqNwwq1Fxx6PPxG2F/qV9N0Y4Ps7UJxWq5k=
Subject key identifier:   97:D3:15:96:31:9D:F7:55:C1:B7:61:28:FC:4A:A6:73:4F:6A:BB:3D
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       03F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number:          03E6
Signing time:             Tue 13 May 2025 00:22:35 +0000
Manifest this update:     Tue 13 May 2025 00:22:35 +0000
Manifest next update:     Tue 20 May 2025 00:22:35 +0000
Files and hashes:         1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 2zsc/RL5/xwRAlG65m+2h3y4m4vILgA/VyY31luHW2Y=)
                          2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: May 13 00:22:35 2025 GMT
            Not After : May 20 00:22:35 2025 GMT
        Subject: CN=682290cb-0782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:1e:e4:59:e3:90:f1:59:c0:0e:a9:72:15:
                    02:83:d1:31:5b:3a:b3:42:46:ed:40:29:40:50:66:
                    4a:55:37:91:13:68:f0:18:12:56:b0:db:17:e3:b3:
                    03:5f:3b:0f:d9:9c:1f:db:10:c6:c5:08:bc:ab:83:
                    4b:3b:5b:91:34:09:fe:56:e9:10:30:4d:0a:ad:5d:
                    eb:10:9d:8f:e8:a2:0f:9c:7e:3f:92:dd:b4:fb:be:
                    b9:85:e5:9d:60:d3:76:ab:db:60:33:23:41:a2:78:
                    83:51:22:cb:a4:f5:bd:9b:36:22:c5:d3:8a:e3:be:
                    b8:02:d7:d3:78:49:0d:4d:f2:6e:9d:0e:f3:06:46:
                    c2:65:2b:eb:f8:cc:53:28:44:58:c6:ac:c9:36:e0:
                    73:64:d9:f0:9a:81:00:57:58:47:8d:e3:c9:f8:5a:
                    d5:cc:d6:6e:91:6c:49:a4:d6:b6:d8:b6:65:cf:d4:
                    9d:e9:ae:04:c6:8b:c3:50:2c:fc:e1:88:3b:c8:ea:
                    79:cc:7f:44:5e:e5:ac:ad:51:a0:d3:b1:e2:1c:38:
                    1e:be:cc:9e:13:4b:4c:30:8c:1e:6a:86:d4:79:61:
                    79:18:20:3a:cd:27:d8:04:b6:b4:f8:79:c5:33:bc:
                    76:b0:e0:88:8b:79:3e:15:94:2a:02:7c:d5:bc:de:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D3:15:96:31:9D:F7:55:C1:B7:61:28:FC:4A:A6:73:4F:6A:BB:3D
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:11:73:05:56:22:3e:c5:f5:12:1b:6f:5c:2b:23:b3:ba:ea:
         9e:f2:32:a1:8b:e6:fe:22:ee:5f:60:eb:e1:c1:99:a7:45:3d:
         0b:92:9e:77:26:c5:ec:ae:e0:00:22:c0:6d:16:7e:d6:3c:58:
         79:fe:fe:14:e7:34:ef:a9:57:78:66:ff:fb:48:23:ea:ea:9f:
         59:7c:b5:ac:ce:2d:d8:e1:84:43:9e:af:f7:7f:59:de:34:c8:
         57:e7:12:4e:ba:b0:d3:45:19:ae:4e:64:ae:fa:4a:d6:be:f9:
         56:4d:75:e7:08:0b:fa:ce:eb:64:42:99:f0:ec:fa:4b:a2:20:
         ff:86:60:4e:1b:35:bc:9b:11:c7:0c:17:85:75:6d:f8:ab:da:
         8e:be:86:04:cb:6d:d6:8b:79:35:fb:7d:cf:6a:75:8a:8f:b7:
         5f:61:50:63:20:32:f2:ed:a9:d0:9d:41:75:7e:84:74:a2:d9:
         dc:0c:99:1b:1e:e7:6c:70:5f:dd:00:9a:b2:dc:17:eb:6a:ea:
         9f:ab:6d:3e:dc:ea:9f:52:51:d5:91:92:d1:1a:0f:3e:a2:51:
         f5:33:fa:db:6d:a3:68:e9:94:64:ec:40:1b:cb:9d:e5:5c:b6:
         70:88:bf:51:2e:79:39:34:94:e5:10:85:98:d4:32:bc:af:17:
         c0:7f:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:58:08 2025 by rpki-client