Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          XEHxdWUufoMRNXYed9iZN0bcVXROlPgVY/qQTFEPr6I=
Subject key identifier:   46:63:1D:B1:69:C3:C0:FE:31:79:EE:87:34:20:61:59:3E:2F:1D:E6
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       3493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          3493
Signing time:             Mon 30 Jun 2025 14:35:07 +0000
Manifest this update:     Mon 30 Jun 2025 14:35:07 +0000
Manifest next update:     Mon 07 Jul 2025 14:35:07 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: UDtzuH2tQMTOnvTcNY27r2eX2ZsrVPrB5O1a0dV4muQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 14:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13459 (0x3493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Jun 30 14:35:07 2025 GMT
            Not After : Jul  7 14:35:07 2025 GMT
        Subject: CN=6862a09b-5974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:70:c4:6e:0b:2b:bd:3b:28:08:a8:6a:6f:
                    ed:00:4e:1d:91:a0:ba:ff:fd:42:8e:7a:84:85:af:
                    c5:12:2d:a3:cc:a5:41:b2:d3:99:2b:08:57:8f:0f:
                    d0:a1:94:e3:21:cb:c6:a6:29:0a:cf:8e:e4:5e:42:
                    44:4a:bf:f2:11:b3:0b:bf:70:26:4d:c3:4a:c6:9f:
                    f2:5a:70:34:37:73:20:87:62:e3:34:ea:c1:9b:72:
                    b9:f6:c6:05:53:4e:42:44:99:b0:48:eb:61:e3:68:
                    bc:db:6f:81:ba:c5:4f:ac:cb:51:96:f2:af:92:77:
                    16:8d:db:1c:c3:24:f3:10:b4:27:65:a3:b2:1b:43:
                    64:4a:ad:d1:c8:bb:01:7d:b3:7a:9a:5d:ab:87:65:
                    d7:7e:41:13:d8:03:eb:d0:5d:b8:00:68:cc:5e:0b:
                    c7:dc:b6:ce:e0:45:81:2c:38:e3:a7:0d:cd:c7:22:
                    93:fb:35:2e:9a:a1:3a:12:7c:d6:89:05:40:b9:54:
                    2a:1e:f7:23:95:ec:a3:ab:63:75:af:fc:4d:49:4a:
                    1a:4a:34:f2:2e:0c:df:47:2c:61:1d:4b:6b:5d:16:
                    15:3e:1e:31:26:51:2d:aa:ba:ab:f9:4a:91:29:a8:
                    7e:33:b5:d8:43:c4:76:fa:ed:36:a2:eb:35:28:85:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:1D:B1:69:C3:C0:FE:31:79:EE:87:34:20:61:59:3E:2F:1D:E6
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d3:03:40:1d:5a:ba:72:9d:25:c2:70:ec:69:cf:9f:8e:9f:
         f0:36:2b:7e:d4:51:87:2e:ce:41:29:1a:54:75:29:0e:3a:ea:
         f4:be:3d:ec:69:95:78:11:51:5f:f5:b1:6a:9c:6e:65:8f:fa:
         3f:3b:5f:37:e1:4b:b5:07:5d:da:aa:f9:fc:bf:2a:5d:8a:43:
         73:4c:25:7d:df:8e:25:a3:07:8f:6f:ae:2b:5f:15:38:64:b3:
         47:80:0f:97:85:02:84:8d:08:c7:55:81:9e:6c:50:86:cf:0d:
         54:43:79:c3:a4:12:8e:e8:84:85:4e:58:a8:a2:9d:98:e5:7e:
         b3:bc:cf:6b:b7:32:1a:b1:5b:c3:78:da:29:41:76:3b:29:c2:
         5c:ec:fa:81:0b:74:75:23:6f:09:f8:df:86:6f:e7:c8:3f:fd:
         af:dc:86:75:e4:8f:05:b1:42:9f:22:60:0e:42:75:b9:d5:2a:
         ff:f4:8e:42:f7:9b:96:e0:38:2c:7c:a5:36:49:25:d9:ff:b3:
         25:0c:ff:23:39:b4:56:22:f8:32:64:a3:ae:94:53:08:cf:30:
         5d:af:1f:98:e9:85:72:f8:69:8d:c5:2a:b7:02:56:39:e5:05:
         ca:a4:73:19:16:dc:7d:57:69:3a:47:29:36:b3:b8:2d:8c:48:
         67:69:e4:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy
QjYxMjhGQUYwHhcNMjUwNjMwMTQzNTA3WhcNMjUwNzA3MTQzNTA3WjAYMRYwFAYD
VQQDEw02ODYyYTA5Yi01OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzJwxG4LK707KAioam/tAE4dkaC6//1CjnqEha/FEi2jzKVBstOZKwhXjw/Q
oZTjIcvGpikKz47kXkJESr/yEbMLv3AmTcNKxp/yWnA0N3Mgh2LjNOrBm3K59sYF
U05CRJmwSOth42i822+BusVPrMtRlvKvkncWjdscwyTzELQnZaOyG0NkSq3RyLsB
fbN6ml2rh2XXfkET2APr0F24AGjMXgvH3LbO4EWBLDjjpw3NxyKT+zUumqE6EnzW
iQVAuVQqHvcjleyjq2N1r/xNSUoaSjTyLgzfRyxhHUtrXRYVPh4xJlEtqrqr+UqR
Kah+M7XYQ8R2+u02ous1KIXDUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZjHbFp
w8D+MXnuhzQgYVk+Lx3mMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE
ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz
YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCT0wNAHVq6cp0lwnDsac+fjp/wNit+1FGHLs5BKRpUdSkOOur0vj3s
aZV4EVFf9bFqnG5lj/o/O1834Uu1B13aqvn8vypdikNzTCV9344lowePb64rXxU4
ZLNHgA+XhQKEjQjHVYGebFCGzw1UQ3nDpBKO6ISFTlioop2Y5X6zvM9rtzIasVvD
eNopQXY7KcJc7PqBC3R1I28J+N+Gb+fIP/2v3IZ15I8FsUKfImAOQnW51Sr/9I5C
95uW4DgsfKU2SSXZ/7MlDP8jObRWIvgyZKOulFMIzzBdrx+Y6YVy+GmNxSq3AlY5
5QXKpHMZFtx9V2k6Ryk2s7gtjEhnaeQC
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:24:17 2025 by rpki-client