Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
File:                     -V6w5_mnqDfmxExu_hvZAZWJfy0.mft (raw, json)
Hash identifier:          /2fj/cfe7vUfUV2z+06SjNa7pb5PV4wb/7nnDjY/PNc=
Subject key identifier:   AA:F0:6E:7D:B9:C4:4C:F0:23:68:41:E7:5C:6B:18:C1:8F:38:46:6A
Authority key identifier: F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D
Certificate issuer:       /CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D
Certificate serial:       0C4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
Manifest number:          0C41
Signing time:             Wed 02 Jul 2025 18:45:41 +0000
Manifest this update:     Wed 02 Jul 2025 18:45:40 +0000
Manifest next update:     Wed 09 Jul 2025 18:45:40 +0000
Files and hashes:         1: -V6w5_mnqDfmxExu_hvZAZWJfy0.crl (hash: bq5ExvJTP1Dzz2aSGI8Atqziqy7/97nipDaGak2VJvA=)
                          2: A9E0680E094611EAADB2B84EC4F9AE02.roa (hash: 8//BDS13Y3iVQVjH+Axq/ZzqcxPoJLSnLMJC37FONIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl
                          rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D547, serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D
        Validity
            Not Before: Jul  2 18:45:40 2025 GMT
            Not After : Jul  9 18:45:40 2025 GMT
        Subject: CN=68657e54-3e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:ae:27:1f:c7:d6:1b:92:66:69:ef:6e:73:
                    d7:59:d6:39:31:c7:99:fe:ee:ec:42:56:42:7e:eb:
                    2a:84:00:15:2f:c9:6b:ef:cf:50:ef:b6:38:ed:f2:
                    e3:1b:b3:d7:c0:58:12:09:5a:53:b7:bd:bb:1e:92:
                    05:12:2e:72:85:02:d4:a3:6c:12:02:91:13:ed:c1:
                    94:8e:d0:47:73:93:c0:4c:b3:d9:bb:2f:a6:76:32:
                    11:ae:43:2a:e8:0a:64:1e:87:52:a8:28:0e:4c:15:
                    f3:f9:ae:e6:5e:ec:24:37:35:51:e3:5c:6e:01:d2:
                    8c:06:20:91:db:aa:df:ad:2e:22:b0:82:a0:57:a0:
                    82:e5:1d:44:0a:4e:80:38:c9:c4:be:a8:32:f6:e4:
                    c1:37:1b:8c:65:fa:85:aa:0b:6b:b8:47:c1:c2:7b:
                    37:cf:76:1d:4f:eb:88:7a:e1:d7:a4:cd:7d:fc:01:
                    50:be:84:6a:6e:40:ef:0e:37:31:14:2a:a6:1b:fa:
                    c6:ef:4d:c8:61:72:36:3e:44:b0:bf:73:84:b9:3a:
                    1c:66:2a:a2:4a:2f:be:59:dc:b4:15:2b:e7:94:1f:
                    25:be:c4:db:d1:fe:a3:44:cd:64:d9:ce:ee:8b:66:
                    80:b2:e8:62:d0:97:8e:68:69:ca:3d:e9:ee:9e:b1:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:6E:7D:B9:C4:4C:F0:23:68:41:E7:5C:6B:18:C1:8F:38:46:6A
            X509v3 Authority Key Identifier:
                keyid:F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:7e:f8:59:5f:b9:b6:b0:97:2b:5d:05:69:4f:f8:66:d0:
         1b:e0:2d:31:90:ac:3a:6f:7f:03:09:dd:12:46:5a:db:94:f4:
         d6:44:65:c0:0b:e3:3c:37:38:72:de:fd:68:19:68:e6:e8:ae:
         6c:83:c7:fa:68:84:a0:96:a2:40:41:22:34:9f:28:96:de:3f:
         73:d8:5f:3f:64:44:5c:f3:14:40:9f:1c:8b:75:a6:59:14:92:
         e2:c9:6b:39:b1:45:aa:41:32:45:f0:40:2b:fa:e6:00:7a:28:
         c1:03:86:41:72:6a:8f:0b:67:4e:56:8b:d5:5d:68:c0:16:e4:
         ba:5d:5d:cd:31:24:2f:54:8d:0b:ba:a4:c8:ca:7a:38:a3:27:
         90:5c:23:39:2e:3a:5a:53:26:34:50:df:e8:3b:ec:23:c7:49:
         22:30:e9:2c:a8:ae:d8:a1:40:01:2d:f2:61:3e:96:ee:a0:81:
         7f:0d:1a:d5:8d:bf:32:4b:ba:10:9b:e1:7c:e9:b7:d3:7a:0a:
         c4:b9:50:71:4c:b8:2d:4e:06:1e:bc:ec:86:b9:b5:01:d1:eb:
         cc:08:2f:4a:6a:ba:6b:3a:64:e8:32:b4:87:67:b3:85:23:c7:
         62:da:b2:0f:3b:22:00:24:86:52:df:dd:6b:02:1a:43:7f:3e:
         44:6f:66:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ1NDcxMTAvBgNVBAUTKEY5NUVCMEU3RjlBN0E4MzdFNkM0NEM2RUZFMUJEOTAx
OTU4OTdGMkQwHhcNMjUwNzAyMTg0NTQwWhcNMjUwNzA5MTg0NTQwWjAYMRYwFAYD
VQQDEw02ODY1N2U1NC0zZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEyuJx/H1huSZmnvbnPXWdY5MceZ/u7sQlZCfusqhAAVL8lr789Q77Y47fLj
G7PXwFgSCVpTt727HpIFEi5yhQLUo2wSApET7cGUjtBHc5PATLPZuy+mdjIRrkMq
6ApkHodSqCgOTBXz+a7mXuwkNzVR41xuAdKMBiCR26rfrS4isIKgV6CC5R1ECk6A
OMnEvqgy9uTBNxuMZfqFqgtruEfBwns3z3YdT+uIeuHXpM19/AFQvoRqbkDvDjcx
FCqmG/rG703IYXI2PkSwv3OEuTocZiqiSi++Wdy0FSvnlB8lvsTb0f6jRM1k2c7u
i2aAsuhi0JeOaGnKPenunrFdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrwbn25
xEzwI2hB51xrGMGPOEZqMB8GA1UdIwQYMBaAFPlesOf5p6g35sRMbv4b2QGViX8t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDU0Ny8xNUIwMTk5RTA5
MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFEZm14RXh1X2h2WkFaV0pm
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1WNnc1X21ucURmbXhFeHVfaHZaQVpXSmZ5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDU0Ny8xNUIwMTk5RTA5MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFE
Zm14RXh1X2h2WkFaV0pmeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClBn74WV+5trCXK10FaU/4ZtAb4C0xkKw6b38DCd0SRlrblPTWRGXA
C+M8Nzhy3v1oGWjm6K5sg8f6aISglqJAQSI0nyiW3j9z2F8/ZERc8xRAnxyLdaZZ
FJLiyWs5sUWqQTJF8EAr+uYAeijBA4ZBcmqPC2dOVovVXWjAFuS6XV3NMSQvVI0L
uqTIyno4oyeQXCM5LjpaUyY0UN/oO+wjx0kiMOksqK7YoUABLfJhPpbuoIF/DRrV
jb8yS7oQm+F86bfTegrEuVBxTLgtTgYevOyGubUB0evMCC9KarprOmToMrSHZ7OF
I8di2rIPOyIAJIZS391rAhpDfz5Eb2bm
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:25:06 2025 by rpki-client