Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File:                     dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier:          2RB/w+icicsrhA0emwoZmVvmQu+mR5lm+upHcYci4gM=
Subject key identifier:   3E:56:22:8C:9D:E3:94:F0:5A:63:B9:D3:C2:91:40:1E:C1:1D:13:15
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer:       /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial:       348F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number:          3487
Signing time:             Mon 12 May 2025 14:17:11 +0000
Manifest this update:     Mon 12 May 2025 14:17:11 +0000
Manifest next update:     Mon 19 May 2025 14:17:11 +0000
Files and hashes:         1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: oCOwf2n8ynIG8JDw8UWQ+8VFSclEoH36omk/Sg4mSoY=)
                          2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
                          rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 14:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13455 (0x348f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
        Validity
            Not Before: May 12 14:17:11 2025 GMT
            Not After : May 19 14:17:11 2025 GMT
        Subject: CN=682202e7-3cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:21:46:2e:a7:72:6a:3e:7f:60:24:81:06:
                    41:bf:16:62:41:f0:66:32:50:59:c0:0d:cc:88:42:
                    5d:b4:2b:91:09:14:36:ac:e3:9e:44:1d:cd:81:ab:
                    35:29:b1:7f:96:f1:77:81:fa:78:df:1d:6a:03:a2:
                    8b:e6:6d:d4:e2:9b:b4:c9:60:2c:9c:99:86:84:30:
                    9d:13:48:d9:a2:dc:fa:df:3a:28:f6:e2:97:c3:4d:
                    e5:0c:6d:92:18:f0:95:54:ea:f0:ea:17:eb:0d:59:
                    3f:91:3d:a8:ad:c6:4d:1f:7d:a0:9b:50:f0:22:de:
                    0a:ad:93:33:bc:67:0d:fb:bb:32:c5:87:c5:a1:b7:
                    9c:a4:c0:ce:8e:0c:68:cb:fc:81:6c:42:03:9b:3d:
                    c0:b6:37:f4:32:6c:ae:fc:93:fe:bf:b2:c4:b3:13:
                    db:78:4c:12:df:97:62:4d:d9:09:17:cf:d8:34:b4:
                    ee:81:39:c3:4d:05:ce:b1:57:81:3c:69:32:21:50:
                    42:be:e2:32:55:22:cf:02:03:c9:1c:06:c2:59:c4:
                    a1:96:6a:94:a7:57:9e:00:61:48:cb:3a:e1:d7:7c:
                    25:b7:4c:aa:4d:dd:3d:a4:2b:19:4b:27:76:3c:a3:
                    a7:08:c7:23:98:6c:bb:4a:4a:00:f3:61:64:02:58:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:56:22:8C:9D:E3:94:F0:5A:63:B9:D3:C2:91:40:1E:C1:1D:13:15
            X509v3 Authority Key Identifier:
                keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:17:69:a0:cc:52:fb:d7:e3:d8:56:ff:4f:da:9c:f6:1f:
         1a:d2:30:1e:74:f1:5a:d3:f9:e5:49:f6:ef:69:96:fd:72:b8:
         a3:13:ed:7e:9d:5c:4a:e0:d5:40:a9:2e:12:1b:d0:f7:65:0a:
         67:aa:12:84:66:df:4e:57:2e:63:e9:b8:7c:d6:52:09:9c:57:
         33:ca:67:a9:cd:52:6c:f4:10:05:a2:23:ca:98:c2:6a:16:b3:
         c8:e7:87:81:78:99:58:8a:35:84:e5:62:9f:ca:26:3c:f4:c7:
         1d:46:04:f9:1d:52:cb:0e:4e:ed:7f:38:94:d7:21:d4:89:96:
         91:b4:83:22:3a:04:15:7f:6e:c8:e1:65:10:4b:32:77:85:90:
         3b:45:61:ee:dd:27:75:fc:db:f1:68:d5:1b:59:79:ba:e7:2c:
         0e:52:23:87:fd:17:0f:1b:09:ab:43:15:dd:fa:e1:45:91:33:
         04:29:82:dc:80:d6:36:13:6f:ac:eb:69:b9:a9:23:75:40:10:
         cd:ed:92:59:4d:48:c5:68:eb:a9:f3:04:f7:e9:73:86:1d:8a:
         4b:c5:b8:29:5a:5a:c4:fd:63:ab:45:9e:1a:a0:9e:9c:e7:62:
         10:ad:20:50:7d:00:4e:a7:be:67:7e:44:48:6f:3b:48:6d:9f:
         4e:c8:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:14:26 2025 by rpki-client