Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File:                     usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier:          W1BJlbiBiyUrQ13gHJxCJxEykwgTEudFIeNjjmvFCrw=
Subject key identifier:   57:D5:ED:0A:BE:49:13:3A:A5:12:CA:D6:97:05:2B:0F:68:3E:A4:8F
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer:       /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number:          0F
Signing time:             Thu 03 Jul 2025 08:22:58 +0000
Manifest this update:     Thu 03 Jul 2025 08:22:58 +0000
Manifest next update:     Thu 10 Jul 2025 08:22:58 +0000
Files and hashes:         1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: d4TIbB3nPUauUqvkzEBRE5F0/BNS25uLSii82EorzSs=)
                          2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: PHW92SRejl/mbnatTD1r3a2U+gvK6WAe5C24ZUPT5mA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
        Validity
            Not Before: Jul  3 08:22:58 2025 GMT
            Not After : Jul 10 08:22:58 2025 GMT
        Subject: CN=68663de2-6238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:da:5e:e6:c7:f6:08:aa:49:ad:a0:67:c8:
                    ea:24:c6:5c:3a:b7:05:7b:06:5e:ff:6c:af:4f:0b:
                    b3:93:23:7a:2b:f5:50:31:7b:9a:97:38:ea:00:8c:
                    cb:e5:2f:5f:94:b7:64:25:97:71:22:ff:2e:90:d1:
                    c5:a3:99:ac:91:29:4f:ca:07:b4:e5:69:47:fb:06:
                    e4:2f:70:ae:8d:13:2c:84:8a:43:61:f4:ae:6e:a9:
                    ee:0b:e6:f7:ea:ec:6d:ac:a0:a7:32:59:76:57:6c:
                    ef:da:70:c6:d8:b0:b3:7e:de:2f:0e:b7:86:2c:b3:
                    b5:e7:a9:6e:cd:17:70:1f:78:68:fd:f4:64:01:00:
                    51:4d:1c:38:e3:ed:33:a4:7e:e7:8c:0a:93:4c:ca:
                    e8:a1:ad:78:24:2d:79:79:54:b5:b0:d0:38:ff:21:
                    f9:3c:36:0c:2c:4c:05:4e:d9:d7:e6:f7:ae:99:28:
                    e7:e8:42:90:0b:c5:17:5f:c9:2a:96:d0:ed:14:b5:
                    b5:b3:76:c1:c0:46:2f:22:71:9f:ee:29:c9:76:39:
                    9a:3c:53:26:f0:e0:b0:da:05:1e:fb:f4:e3:21:9c:
                    42:e4:90:ac:08:54:42:9f:50:e8:13:6f:7f:32:e5:
                    03:34:87:31:53:f8:ac:12:bf:e2:21:c9:1d:69:6a:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:ED:0A:BE:49:13:3A:A5:12:CA:D6:97:05:2B:0F:68:3E:A4:8F
            X509v3 Authority Key Identifier:
                keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:e8:02:d8:63:50:6d:07:0d:15:66:02:1c:0c:17:f7:bf:
         06:c5:17:02:3c:1e:38:9f:16:17:bf:b8:89:03:3f:7d:a3:7e:
         f9:2d:8c:f6:e1:cc:67:1a:04:e6:e2:74:f9:48:87:82:65:93:
         b4:e2:59:de:80:62:5f:e8:45:3d:1c:4c:80:c8:f1:45:9c:ab:
         75:b4:c2:6d:b9:5f:81:1b:18:c0:2f:b1:f1:cb:9f:ce:29:a1:
         ec:53:7f:0e:b8:1b:f6:5d:5a:46:90:d8:dd:e7:2c:69:b9:c5:
         d7:72:79:53:b7:e7:a3:da:ee:0c:0d:0e:5f:f8:cb:7a:8d:62:
         55:c2:0b:f9:28:24:74:e2:22:03:05:3d:27:8a:1b:a1:dd:55:
         95:d3:d0:45:f3:b0:85:29:41:8c:1f:56:af:f0:e3:82:a9:1c:
         25:fd:21:f8:08:ef:d3:81:73:3f:c6:94:92:5a:b1:cf:5b:0a:
         48:2a:42:ce:a8:8f:48:10:1a:0f:f0:9c:23:f2:61:f7:b9:1f:
         33:ce:dd:8b:0f:80:e0:a8:30:3c:83:67:b0:df:c6:3e:75:3a:
         99:85:6f:9b:d9:21:cd:23:cf:3b:ad:71:39:35:d3:ca:86:7b:
         00:24:bd:f1:1e:48:99:80:46:4a:8c:16:78:1a:fa:c6:f5:6b:
         70:3e:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:31 2025 by rpki-client