Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          S2OkPBvKSRgfwumagY32LrlknzdFjhtAHtUgZJOn3/I=
Subject key identifier:   74:58:4D:90:FE:1F:30:98:BE:78:07:1E:EC:6D:4A:3A:D1:23:A3:93
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       351F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          34E9
Signing time:             Wed 02 Jul 2025 14:56:43 +0000
Manifest this update:     Wed 02 Jul 2025 14:56:43 +0000
Manifest next update:     Wed 09 Jul 2025 14:56:43 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: 7/2wN5/DhXWdbjHtUeZ13nNjHeoK20NmomXaM9ekFRc=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: Xb2hPwWdc7QTcQDz+qvvab15wycaCcgbmopek0oJdTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13599 (0x351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Jul  2 14:56:43 2025 GMT
            Not After : Jul  9 14:56:43 2025 GMT
        Subject: CN=686548ab-7fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:8f:a1:20:01:8d:42:93:e8:71:a6:f6:96:
                    98:57:7c:1a:90:05:0b:24:a6:15:af:60:0d:9f:9e:
                    21:96:d6:66:30:72:93:ec:21:61:a3:d0:07:d8:b0:
                    18:52:90:6e:a7:f9:85:4d:75:f9:0a:a1:46:a4:1f:
                    91:41:ac:ff:0c:7f:99:88:5f:d5:65:0e:ac:89:72:
                    b8:db:31:3f:f3:ce:e0:c5:9d:73:d7:2d:cd:d6:04:
                    f9:a6:ca:d2:b7:76:ec:52:db:39:a1:82:b6:9f:44:
                    0d:fd:48:57:70:6e:32:b9:04:96:d7:4c:9f:84:af:
                    15:ec:6f:94:69:ac:50:63:b8:bc:3c:57:3f:f1:e3:
                    2c:41:f4:52:7c:28:7b:65:0b:90:da:d1:dc:62:8a:
                    7b:00:e3:78:16:60:11:14:fd:2a:86:4e:19:ab:e5:
                    10:fe:8d:bf:3c:9b:98:81:97:ce:12:d9:20:cd:60:
                    81:17:11:96:af:e7:2f:10:d5:d8:c0:19:da:bc:d6:
                    0a:c1:47:a5:12:73:b5:aa:8d:8c:54:bc:f7:77:34:
                    fe:db:0d:56:c9:b0:12:30:6b:a9:19:92:dd:b8:24:
                    73:a9:f0:bd:03:76:c4:d7:83:70:91:01:a7:34:1b:
                    8d:ef:6a:30:0c:7b:24:e2:a4:dc:44:90:b3:83:9d:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:4D:90:FE:1F:30:98:BE:78:07:1E:EC:6D:4A:3A:D1:23:A3:93
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:2e:e1:7f:55:63:8e:c7:ed:32:fa:e9:e8:60:e3:0c:81:
         9b:dc:1d:d6:73:af:e1:8a:b6:aa:26:e7:c6:d3:36:0d:50:02:
         f8:af:5f:e0:6d:16:74:db:45:77:e2:75:b1:89:1b:be:3f:d7:
         3a:a7:e2:a2:90:95:2a:01:cb:41:50:7f:9a:4f:6c:3b:88:b4:
         01:07:fb:91:7b:cd:94:60:c5:b9:e2:46:bc:01:64:be:62:44:
         ba:82:20:7c:33:36:04:4f:5e:b1:a2:a6:b0:08:c1:3a:5a:28:
         ac:3b:3f:36:88:04:18:20:ea:8f:99:aa:6a:f0:a4:65:14:53:
         d0:be:42:8c:09:f8:af:7d:43:dc:e4:55:ba:b7:7a:c0:99:8d:
         e8:c1:9e:29:e5:be:7f:23:51:55:e1:cb:c1:01:83:4b:9a:34:
         4b:b1:7e:25:9c:3a:2e:2f:64:54:6a:48:14:d7:b7:ff:b5:a5:
         8e:25:e5:8d:88:0b:bb:7b:75:cd:63:1e:a8:74:99:7c:19:75:
         5f:b1:d1:75:d0:7a:15:d8:43:e8:02:1e:29:27:d0:73:25:11:
         a0:ee:b7:4b:00:6a:14:82:40:ab:7b:7c:74:51:41:c2:68:a0:
         01:9d:0b:77:29:c8:c3:80:8e:f8:0f:78:07:b1:29:c1:99:51:
         3f:1c:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:38:37 2025 by rpki-client