Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          qjY/hJ6rMtWH9NWnUdAR8cv7I1h1Q44zZidpZ5KWtAM=
Subject key identifier:   81:72:C3:3B:E3:4B:D4:81:AC:DB:61:C5:13:EA:11:C1:00:24:5B:8C
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          012A
Signing time:             Thu 03 Jul 2025 04:45:13 +0000
Manifest this update:     Thu 03 Jul 2025 04:45:12 +0000
Manifest next update:     Thu 10 Jul 2025 04:45:12 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: GtoNIdncgtcXW77HM+U+GG7fGPzjfFmoCguwxYn9vEU=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Jul  3 04:45:12 2025 GMT
            Not After : Jul 10 04:45:12 2025 GMT
        Subject: CN=68660ad8-0c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:c4:79:29:68:c4:77:35:ef:6f:78:e3:47:
                    72:9e:7e:fe:2d:e9:54:50:c5:d5:ed:74:a0:d9:4e:
                    33:07:57:d2:d6:12:8e:05:d0:55:33:70:82:95:7d:
                    e0:6c:a2:69:a1:29:64:b4:76:08:6e:0a:6b:3d:3a:
                    9c:0c:21:4c:00:c4:29:23:d0:19:fc:f0:55:42:a4:
                    3e:ea:54:a5:4b:fe:ca:61:e0:82:d1:a0:a3:1e:94:
                    52:c7:88:57:fa:89:46:44:e7:77:b0:bc:e6:31:95:
                    0b:95:98:6b:90:0f:e3:8c:83:56:dd:cc:b1:a0:65:
                    cf:a4:23:00:6f:6b:94:88:15:e7:a8:5d:0d:51:1d:
                    aa:22:57:22:64:6a:97:5d:54:47:95:85:35:3a:a5:
                    ba:5b:fb:73:b0:e3:47:9f:92:ae:2f:73:ca:16:99:
                    5c:00:27:be:74:c8:70:a7:fd:ba:b0:1a:41:fd:49:
                    cb:e9:02:24:ae:4f:86:01:82:3d:a2:67:b2:ec:e3:
                    94:c5:70:a5:a9:81:78:c4:09:7b:69:c8:8f:48:b4:
                    e9:a1:ee:60:02:d4:7e:7f:32:c5:d3:9f:89:33:38:
                    09:71:b6:d3:a0:af:f7:96:0e:02:9e:d1:99:4b:c5:
                    d2:04:e1:f5:a3:f1:03:1a:2d:ac:e6:c3:bf:47:ad:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:C3:3B:E3:4B:D4:81:AC:DB:61:C5:13:EA:11:C1:00:24:5B:8C
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:26:5e:9c:dc:64:02:89:ef:1d:8e:20:30:80:52:22:87:0d:
         d9:f9:03:2f:d3:43:96:76:5a:73:6d:25:6f:70:92:4f:52:90:
         6f:95:fe:10:cf:47:21:69:0a:41:09:a7:fb:b7:82:0e:a1:6f:
         46:aa:f8:41:e6:63:35:19:77:7c:43:26:05:dc:46:10:10:dd:
         54:55:d5:7a:ae:26:2f:e6:3d:f5:77:30:83:e7:b0:66:d0:92:
         d7:53:97:ea:c3:fe:9f:9a:20:cf:59:4b:1e:8b:e1:a9:f1:ec:
         1a:2a:81:49:cf:21:e2:26:72:8b:3f:55:30:b7:c5:4d:84:c7:
         6f:f4:57:e7:24:ee:b7:94:04:17:ce:8b:27:d4:6d:24:42:fb:
         c2:36:0f:40:c6:b8:5d:f2:a9:7e:e6:b9:77:18:11:76:26:e4:
         52:2b:79:b1:71:4a:d8:ac:74:c5:35:36:7e:86:ce:97:52:1d:
         4b:00:ea:17:71:81:66:5d:2e:d0:e0:a7:11:df:3a:c2:38:25:
         1e:6d:1d:e1:d0:f6:38:bc:ee:b7:90:f1:53:6b:29:86:a5:8a:
         ff:b9:8c:42:03:68:cf:ea:9c:53:51:8c:c7:a3:03:6f:69:55:
         e1:e0:fc:b5:2c:31:53:f3:4c:6d:94:12:d2:58:3c:1b:f8:9a:
         5a:42:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:00:18 2025 by rpki-client