Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          rJJ6jp4YO4NCzTXJ37GNQZ1sPG7GxRiHZ1Z2s4fGZ2M=
Subject key identifier:   54:2E:C7:49:93:31:5B:95:2D:B6:0E:80:27:85:B9:8B:A5:CA:AA:26
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          0835
Signing time:             Wed 02 Jul 2025 21:12:22 +0000
Manifest this update:     Wed 02 Jul 2025 21:12:21 +0000
Manifest next update:     Wed 09 Jul 2025 21:12:21 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: 5dGbPhYlasKTjSIu4j20OS6bs+L+ciVhVvQNn6D22yw=)
                          2: E033560A3FAF11F0B47BD563C4F9AE02.roa (hash: BgVF3hos/cvrYkz28jUIYI7Xb8wsouZzUNXAPAQJeqA=)
                          3: 03476D523FB011F097B5F864C4F9AE02.roa (hash: V/GUkEYycrfVr0CeXDFIAE3DCEVs8ccFAFXl7jAkBfQ=)
                          4: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: 67c129aFdKchOeJBLSQTErVCgqpsP+UzfUSQtqZi7PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Jul  2 21:12:21 2025 GMT
            Not After : Jul  9 21:12:21 2025 GMT
        Subject: CN=6865a0b5-ed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:78:ff:61:45:98:a8:95:35:f0:fb:fd:4a:
                    98:ba:4e:ea:c4:96:94:67:51:ba:5d:70:88:da:44:
                    b9:23:53:1c:d6:1d:1c:fa:f0:80:a9:55:d6:05:2e:
                    79:b6:f6:35:19:d8:3c:5b:35:ea:57:93:4a:6c:6c:
                    37:41:c8:5b:1f:c2:1a:7b:05:fe:6c:06:e1:2e:a7:
                    aa:d4:23:b1:35:6d:29:45:92:c4:bb:ee:ea:cf:04:
                    7a:c0:f7:ec:1f:5f:36:cf:b3:4d:4a:0f:b0:37:67:
                    d0:cd:a1:bc:5d:da:f1:13:13:f4:82:35:14:f7:4e:
                    6f:68:33:c6:f4:12:7b:f6:46:d8:56:fd:69:a6:1e:
                    fb:af:41:cf:48:67:ea:69:4a:d4:40:7f:54:76:28:
                    f1:5b:f0:7c:af:c0:a5:68:4b:dd:a1:98:9b:7a:16:
                    00:50:f4:47:01:87:c2:99:3d:d4:d2:ac:a8:9b:bd:
                    ac:d3:8e:55:6f:d8:29:90:fd:cd:17:5c:fb:db:03:
                    fc:74:eb:b6:70:1c:15:97:b3:b2:d7:05:24:f8:5b:
                    29:77:a7:49:e7:b5:1a:48:8c:16:95:34:19:1e:79:
                    20:01:ed:59:8e:83:07:7c:c2:f8:0e:0e:a3:91:4a:
                    d8:13:d6:23:95:36:d0:eb:f9:c7:30:81:45:78:63:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:C7:49:93:31:5B:95:2D:B6:0E:80:27:85:B9:8B:A5:CA:AA:26
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:7e:1f:cc:00:4a:09:e2:2c:db:cf:74:58:a1:40:2d:f7:
         3d:07:f4:a3:56:58:6c:fa:c4:e8:cc:99:03:9d:a0:45:37:d3:
         b2:dd:9e:51:9e:0e:d3:cd:7e:78:07:f7:59:6d:cd:ba:cc:c1:
         44:50:15:88:6f:4d:d7:b3:3a:7a:de:95:6b:82:2c:da:87:78:
         f3:67:c4:d9:c2:26:96:e0:12:68:5f:d8:2c:ee:f0:0c:01:16:
         d2:95:66:bc:38:a2:50:6e:1a:d3:62:2f:b7:21:0c:57:64:9e:
         f5:3e:83:11:b4:88:96:a9:60:58:65:e3:c9:d4:da:06:97:bb:
         65:36:f3:eb:2c:54:38:dd:c5:21:d2:66:a3:b7:da:04:82:bf:
         39:e6:6a:74:4c:c1:bd:ce:5e:d1:d8:9b:6b:06:24:bc:6a:38:
         f6:7d:7b:af:29:f8:c7:b3:2c:c8:cf:79:ff:21:a1:0e:63:bb:
         9a:d7:cd:2e:56:1a:eb:9d:1b:3f:a9:ba:97:57:ce:07:de:b1:
         01:56:bb:cc:ee:df:a7:98:35:d2:01:d7:f3:f8:63:2d:67:92:
         04:9b:d2:b8:58:53:64:03:ff:1c:3d:b2:0a:51:22:6c:6d:5d:
         35:73:f2:94:36:e3:19:f2:7f:7d:d1:91:8a:69:a1:18:89:80:
         97:b5:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:45:57 2025 by rpki-client