Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File:                     L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier:          RV+1BEMtCizidJATjQGDGtrrjjeh0Tqd9AEVWIkAiQY=
Subject key identifier:   EE:AE:B2:17:26:40:B5:4B:AA:49:77:C7:DC:82:C9:7F:C3:35:74:0A
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer:       /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial:       07A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number:          079D
Signing time:             Fri 16 May 2025 21:36:02 +0000
Manifest this update:     Fri 16 May 2025 21:36:01 +0000
Manifest next update:     Fri 23 May 2025 21:36:01 +0000
Files and hashes:         1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: QUgY979WjnlfBowcvW0GQXRxuhnFURvXNrJtSBw+H9U=)
                          2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: nrFCEo7GcK2eALmFz5c2iHIjlVAiVLpJmfCmZn/cv3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
                          rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
        Validity
            Not Before: May 16 21:36:01 2025 GMT
            Not After : May 23 21:36:01 2025 GMT
        Subject: CN=6827afc1-f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:51:35:36:3b:09:17:87:9d:4d:b2:60:96:
                    7a:57:02:db:4b:19:ce:97:dc:13:32:c0:60:43:fb:
                    bb:fb:4f:66:04:5c:a6:e2:b0:49:11:e4:6c:45:b2:
                    e2:e6:8f:6f:d3:70:2f:33:79:29:f0:8e:7f:54:dd:
                    39:7f:a0:e0:61:63:95:dc:c3:c7:5a:54:e3:b6:b3:
                    c9:66:3e:72:2f:aa:22:13:dd:32:0f:28:17:38:3c:
                    79:6c:5b:a9:f8:35:93:90:53:bc:7f:20:ad:a5:1a:
                    1a:b8:43:f6:4d:46:2d:86:7b:f8:96:6b:c2:7c:50:
                    56:3b:cd:fb:13:bc:5f:b6:f3:e4:d8:70:70:20:bb:
                    63:4d:55:37:63:46:13:28:d4:46:c3:6f:77:0c:ab:
                    d2:b2:01:07:29:c0:c0:d8:c7:0b:76:2b:4f:06:98:
                    bd:93:d9:6c:2c:d4:fb:ba:57:00:3c:5b:e3:0d:6b:
                    b8:59:36:76:01:cd:50:f9:47:cc:4b:70:ac:63:5c:
                    87:eb:ae:f8:8c:eb:ce:db:0d:d0:8e:ae:40:94:33:
                    fd:25:03:ad:ce:49:d2:23:7e:a7:44:cc:8e:a5:75:
                    d7:fa:85:29:99:84:13:c0:25:4d:99:84:e2:a7:a5:
                    01:a0:68:d1:cf:27:ba:e6:01:76:87:bf:4d:9c:b0:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:B2:17:26:40:B5:4B:AA:49:77:C7:DC:82:C9:7F:C3:35:74:0A
            X509v3 Authority Key Identifier:
                keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:7d:c4:f2:01:51:24:f3:97:8b:ef:09:e7:83:11:d3:91:
         06:95:47:43:3d:a1:ba:a7:16:c3:23:1a:93:a8:e3:10:a7:da:
         e6:05:48:ba:de:2e:6d:56:a8:01:cc:69:e9:ff:82:53:57:f1:
         73:08:91:a6:17:90:86:5a:ab:cf:19:00:ee:de:d5:5f:d1:a4:
         a0:41:c0:ce:f1:f3:36:87:62:d4:1a:b4:54:45:8c:21:13:bf:
         f2:6b:7b:6f:0a:3b:4b:fd:b1:b2:ca:16:4d:9d:81:00:c4:50:
         68:21:e0:3b:af:46:c2:42:ad:bd:6a:70:71:0c:03:7e:2d:56:
         e8:91:65:b0:11:7f:d6:58:d8:da:cd:4e:6f:16:64:28:bd:40:
         d3:24:cf:b3:19:40:e4:93:a8:17:24:70:d5:85:47:b8:51:a4:
         e9:f4:92:84:5f:3c:0b:6b:3e:2a:a7:16:40:87:4a:54:b2:74:
         49:0b:92:ab:d3:5e:d6:c7:bf:d8:da:8f:ca:3a:8e:39:00:61:
         99:9c:10:fa:72:3d:d2:ee:0d:c3:9d:fe:60:6d:40:21:de:30:
         7c:34:42:97:15:e8:a7:be:ce:dd:e9:d9:e6:3d:1c:7d:f6:2f:
         a0:1d:53:05:2b:be:46:13:ae:e3:0a:49:f2:66:1c:f1:7f:15:
         1e:01:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:07:33 2025 by rpki-client