Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File:                     anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier:          pzyyC4OeX792LpvwwTJtk61W1/TTYyRDRkfubbn2BkE=
Subject key identifier:   8D:06:EE:8C:E8:DC:4F:B2:C4:F4:59:B3:2C:06:4A:A7:99:65:6A:D3
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number:          01AF
Signing time:             Tue 01 Jul 2025 03:42:02 +0000
Manifest this update:     Tue 01 Jul 2025 03:42:01 +0000
Manifest next update:     Tue 08 Jul 2025 03:42:01 +0000
Files and hashes:         1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: L32HnGixMlqxBhuswQSt86cGESv1dhaKTt6XoSNqB+E=)
                          2: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: p03IaXdoucRW+JeB0a3V5wQ0r6Xuoboe4Qb2cXTY05U=)
                          3: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: DxzDukY3WjBeIpnNW+7kygBvoj2I4tKyrrqWBJti0pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Jul  1 03:42:01 2025 GMT
            Not After : Jul  8 03:42:01 2025 GMT
        Subject: CN=68635909-f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:73:00:15:31:f4:ca:fb:52:35:c8:01:d7:
                    15:bc:b5:e1:c1:40:5c:6d:56:c0:4f:d2:09:bd:f6:
                    66:f5:b3:7d:30:ea:69:b7:b8:d4:d4:5c:f1:ba:ff:
                    d5:b6:f0:70:69:bd:a0:0b:f1:f2:cc:b1:18:7e:a8:
                    17:d4:3b:98:f6:57:3c:36:6a:01:b8:7c:4b:d8:a3:
                    0e:20:04:2d:9b:7f:49:dc:0b:9e:83:04:f7:1e:19:
                    5d:83:70:0f:a2:f7:70:29:82:ed:70:a8:33:4d:71:
                    94:40:0a:46:c5:13:01:be:6f:db:41:4f:c9:e1:27:
                    fc:fa:4d:94:0f:ac:75:6d:13:8c:9c:35:22:57:54:
                    f9:34:45:d4:91:94:4c:24:7b:9f:5e:12:f2:9d:c5:
                    04:b7:32:26:b5:e3:27:c2:e0:14:ba:c6:33:89:29:
                    9f:81:ea:dc:2a:22:7a:84:21:94:c0:6c:19:89:15:
                    22:1a:b1:e0:95:f5:11:22:ac:e3:f0:0e:ff:2e:70:
                    76:2c:26:a2:8f:9e:20:0a:9e:2c:71:88:91:f3:b3:
                    3e:09:7b:08:07:f0:82:a2:4c:88:53:b2:55:0f:6a:
                    f7:b9:c4:0f:bc:5c:43:cb:a8:ad:6c:84:28:41:b5:
                    be:26:e3:11:b3:c0:82:7f:41:70:64:6e:d8:7a:84:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:EE:8C:E8:DC:4F:B2:C4:F4:59:B3:2C:06:4A:A7:99:65:6A:D3
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:ee:e7:d7:4b:8a:a7:ba:db:11:fe:56:f1:62:16:1a:e4:
         9d:8e:45:20:1f:92:16:cf:68:66:70:18:0a:01:07:ea:66:7a:
         8c:d8:c5:6e:0c:68:87:bf:81:2b:f9:3f:09:50:fb:60:87:39:
         9a:0b:c3:38:c6:02:71:a0:fb:43:a5:c4:a4:a5:91:cb:e3:01:
         8f:a8:bd:fe:08:38:7a:66:d2:15:70:13:3e:ab:b0:ae:86:f1:
         9f:6a:bc:88:c7:56:c1:92:14:e0:41:bd:c4:69:58:f4:be:c3:
         5e:76:6d:21:74:9e:d1:92:84:56:47:3a:11:ad:6a:93:8e:29:
         14:ea:20:d4:40:1d:7e:2b:02:f8:d3:aa:fb:a5:eb:84:c9:2e:
         f7:00:a3:d0:cf:dc:43:aa:eb:ee:8c:67:a6:a8:ae:a8:49:b2:
         79:52:46:16:ca:61:a5:29:ae:80:44:75:cd:bf:38:6d:7b:d5:
         f6:49:ef:2d:36:e5:bc:f8:42:6d:b2:8a:a9:18:24:62:1d:df:
         99:63:cb:90:78:b3:46:84:9a:3f:08:ca:9b:08:86:88:92:84:
         73:bf:56:4c:db:b6:3a:47:87:6c:40:c4:ef:19:ef:d2:af:73:
         e7:6c:27:ef:b0:ff:55:c8:ea:05:fa:d2:9d:1c:36:90:16:59:
         dd:55:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:59:03 2025 by rpki-client