Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          4dI95LzUY6VXoR9V1Fz6FJAQMm1dW5LdVLne/0boqDU=
Subject key identifier:   B8:A5:B9:DC:7F:AB:D9:12:62:6C:7E:62:0E:58:D0:11:7C:AF:80:1B
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0AA6
Signing time:             Fri 04 Jul 2025 19:52:16 +0000
Manifest this update:     Fri 04 Jul 2025 19:52:16 +0000
Manifest next update:     Fri 11 Jul 2025 19:52:16 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: IyTYkUyaqnFKCegipsUqJ+0O4bfkDQRedjeLoZUyrfM=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Jul  4 19:52:16 2025 GMT
            Not After : Jul 11 19:52:16 2025 GMT
        Subject: CN=686830f0-62a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:8c:cd:3e:82:53:97:96:8f:c1:54:06:6f:
                    6f:bf:49:9a:40:d1:db:df:2a:62:22:75:81:c2:b5:
                    cf:9d:ec:27:d0:77:c2:0e:bc:38:8f:a3:75:36:b3:
                    3b:08:fc:1e:f4:42:32:6b:28:0c:0d:df:05:b1:1a:
                    41:92:da:10:e8:2b:3a:43:cc:31:c4:df:c5:63:44:
                    d1:69:ec:d2:37:ca:08:7c:b1:c5:cf:1c:a4:8a:ec:
                    94:56:c4:92:3f:a3:58:6c:77:12:46:c9:dc:3b:25:
                    ca:de:f1:dc:9e:ab:bb:11:7c:7d:b7:7d:78:f1:a7:
                    e6:ac:9c:66:55:1b:fd:e5:b4:4e:7b:25:b8:17:c4:
                    29:8c:4d:cb:00:3f:9d:59:4f:31:ad:7e:9e:a7:89:
                    b6:ae:6f:8d:9f:a4:09:8d:98:5e:b3:5e:fd:97:2b:
                    ec:3e:66:6c:06:d1:5b:7f:c6:5d:3a:37:11:9b:ad:
                    78:2b:c9:22:db:c2:07:88:bb:03:21:38:a7:eb:95:
                    af:4e:14:8f:70:be:71:16:6a:64:1d:05:ed:5c:05:
                    14:c5:84:f9:8a:58:7b:9b:4a:a1:b2:57:9b:1f:68:
                    51:f1:45:40:67:01:de:f4:f9:61:96:a1:e1:c9:f3:
                    1d:65:12:35:aa:1d:48:42:86:43:39:30:9c:76:6b:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:B9:DC:7F:AB:D9:12:62:6C:7E:62:0E:58:D0:11:7C:AF:80:1B
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:c7:f8:63:90:4b:37:90:18:04:cd:97:2b:52:ed:cd:7b:
         75:29:63:d2:63:97:4a:80:fc:3d:cf:95:34:f1:17:7d:07:ba:
         c0:fc:0e:39:e3:03:db:31:af:bb:ae:63:8c:59:61:be:d0:ba:
         89:b1:2a:bc:44:1c:d8:bb:71:34:93:33:02:7b:2f:66:94:d6:
         de:25:ad:54:f6:3f:33:17:b5:e9:6c:67:93:11:02:42:b1:80:
         c5:4e:6f:fa:91:09:64:81:6a:e1:73:ef:47:52:66:30:6c:6d:
         91:c4:a4:6a:b0:3a:f0:de:e5:c8:37:07:a5:f3:94:e3:25:e4:
         a7:99:94:46:60:69:5d:e5:be:e0:6d:a2:e6:d6:73:82:62:93:
         87:64:86:63:80:f6:a5:f4:dc:a4:83:f5:fc:9c:97:b1:f7:90:
         7c:cd:de:0b:cd:4b:98:d5:d4:21:c5:fb:a9:f9:51:88:40:42:
         c1:be:35:b3:8b:97:9f:b8:5d:2b:11:fe:dd:ef:f1:ce:92:bc:
         0c:15:0c:d2:04:f3:cb:5b:39:b5:ef:2e:92:45:58:b9:99:c4:
         53:5c:66:76:8a:06:ea:be:b7:94:06:4b:81:8b:68:25:10:54:
         f1:5e:06:6d:1f:4e:77:08:01:8a:36:c8:9c:56:c6:b1:94:9c:
         9c:e7:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:10:06 2025 by rpki-client