Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          qCIOf8bUPWf/xvb0Bmvjm09FeTQPEJ0OtULSgSSyUiE=
Subject key identifier:   2C:3B:6C:16:C6:9D:EB:E0:87:6F:38:D9:50:10:48:73:90:AF:4F:72
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          72
Signing time:             Thu 03 Jul 2025 07:06:17 +0000
Manifest this update:     Thu 03 Jul 2025 07:06:17 +0000
Manifest next update:     Thu 10 Jul 2025 07:06:17 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: QoCmUzAV68T4dy9TDf9cEfUwH479ucQNsVAbaxOV2bY=)
                          2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
                          3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Jul  3 07:06:17 2025 GMT
            Not After : Jul 10 07:06:17 2025 GMT
        Subject: CN=68662be9-f16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:44:72:da:2e:9a:be:b8:5b:04:4b:a9:a2:
                    49:92:4d:60:c8:d6:1a:ec:9d:c2:ff:66:f2:2f:c2:
                    45:db:f3:d1:11:52:03:c8:4e:c7:66:1a:ef:3e:26:
                    89:d2:ba:3b:b5:93:ba:cc:7d:0b:6b:28:74:a8:09:
                    6c:d3:19:9e:4a:31:00:82:f0:42:1e:51:c5:0e:68:
                    74:14:dc:41:d9:a3:73:c5:af:4d:d0:0c:14:b0:8a:
                    b3:38:03:49:f1:51:59:6a:e4:0b:62:f8:8a:ac:a1:
                    ed:4a:0c:6d:5e:8b:a4:32:f0:b1:81:7f:43:89:7b:
                    a0:0e:6f:ee:d2:3b:c2:29:ac:a3:45:ac:50:3b:53:
                    6e:5b:0e:8d:ef:ca:98:f0:14:2d:8d:40:2a:2f:6a:
                    cc:a1:79:ef:7a:6b:60:3d:92:31:1b:75:7c:b9:6c:
                    2c:8d:7d:b2:01:bd:92:d6:94:d6:7d:06:1c:0a:0d:
                    4c:3e:3e:78:10:3c:0f:32:64:f3:4b:04:9e:85:ec:
                    50:e8:f5:d9:2e:e7:f2:2c:6a:1f:2e:2e:d2:b3:a1:
                    cc:3f:8a:d8:ff:68:0f:cb:69:eb:c8:da:29:09:6d:
                    0a:64:7f:16:ab:e5:ce:39:47:db:8d:21:18:22:e6:
                    2a:ef:ae:8e:43:57:1f:ef:5f:f9:92:81:07:fa:a8:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:6C:16:C6:9D:EB:E0:87:6F:38:D9:50:10:48:73:90:AF:4F:72
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:ce:22:f9:20:df:9e:c1:27:9f:03:3d:32:64:08:45:14:
         f6:da:06:da:73:d9:1e:94:b3:35:da:22:7e:8d:b5:3e:14:23:
         f2:4f:49:61:be:5c:ee:8b:9e:d7:cc:a6:6f:53:ea:e3:7b:75:
         20:57:9e:86:8e:89:19:48:f0:33:02:6d:01:e1:7c:bc:11:78:
         bc:12:79:a7:99:de:f8:b4:13:c3:8a:23:a3:5f:76:50:53:f2:
         7d:7c:56:4c:9d:9f:13:dc:02:98:9a:9b:0a:fe:23:88:e3:94:
         f8:89:49:4d:f9:20:21:36:80:09:59:68:73:c9:0b:5b:95:b4:
         96:0f:e5:a7:0e:bb:ef:8c:bc:95:5b:23:97:39:09:11:39:d3:
         44:0c:de:5b:fb:b5:a9:0b:24:65:f2:a7:e4:bc:d6:05:5b:e1:
         d3:56:c7:e0:07:da:af:ae:d4:98:86:33:d0:7d:73:75:36:63:
         f0:2a:3f:a0:1d:e1:78:04:67:90:9c:a1:74:f1:bf:66:14:23:
         00:8b:73:d3:e3:49:0a:76:a7:93:cf:75:f7:90:20:29:67:0f:
         01:e1:79:18:98:95:92:53:e8:f9:1e:bf:73:67:54:d8:c5:f3:
         41:d7:04:dc:0f:f0:8c:87:56:a9:22:1e:64:e1:dd:99:ae:8d:
         8d:81:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:29:27 2025 by rpki-client