Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File:                     AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier:          Fn1sDrqADJY5FtQbh8X9iJXWroC0HV6/QR0SIW95aTY=
Subject key identifier:   27:4D:48:7D:6D:59:9D:56:88:8F:B0:F4:3A:65:76:EC:B7:5A:57:65
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       064A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number:          0609
Signing time:             Sat 28 Jun 2025 22:42:02 +0000
Manifest this update:     Sat 28 Jun 2025 22:42:01 +0000
Manifest next update:     Sat 05 Jul 2025 22:42:01 +0000
Files and hashes:         1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: nUVEcY5y0GfjbwGZPdekcBsMWvpZ+Qidc2RozGrNV2s=)
                          2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=)
                          3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=)
                          4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=)
                          5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 22:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Jun 28 22:42:01 2025 GMT
            Not After : Jul  5 22:42:01 2025 GMT
        Subject: CN=68606fb9-d140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:6c:4a:52:88:76:e8:01:4e:dd:53:d8:19:
                    a6:d2:25:f3:3c:aa:b7:69:35:4d:1b:63:54:da:b2:
                    c9:6a:ec:8d:8a:12:73:75:02:e9:2d:77:97:b4:cc:
                    6f:15:b2:16:3c:e9:e2:6d:93:29:98:71:77:63:5d:
                    69:33:86:e5:31:f4:37:03:40:86:45:ad:d6:93:7b:
                    3f:83:77:a6:c3:9b:63:11:df:b6:4c:cc:df:29:ed:
                    52:50:ec:b8:0c:ed:6c:38:67:ee:bb:b8:65:f9:5c:
                    2b:f2:ef:e0:c8:bd:2e:61:72:ef:7a:37:6d:c4:9e:
                    9b:de:b2:38:ab:c1:0d:c4:a8:3a:f0:00:69:c4:03:
                    27:e6:89:44:29:a0:de:64:58:23:25:24:40:e8:75:
                    0a:0f:87:b7:fd:5b:24:77:24:7f:20:57:31:c1:eb:
                    65:3a:61:62:88:9c:6c:09:0a:b7:15:a2:8e:41:37:
                    a2:cd:fa:4a:52:0e:cb:9f:80:40:2a:24:2f:e0:2f:
                    14:e6:9a:ef:df:97:8a:db:24:b0:1e:fc:fb:91:73:
                    e2:3b:46:0a:80:bb:9b:0f:64:cd:00:8b:54:8a:ec:
                    60:9b:bb:a3:1a:57:3d:04:79:b5:cb:50:5f:18:c2:
                    51:5d:f5:9b:bc:01:c8:6b:20:bc:0b:02:ff:ee:27:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:48:7D:6D:59:9D:56:88:8F:B0:F4:3A:65:76:EC:B7:5A:57:65
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:26:cf:be:86:72:9b:99:a3:0f:81:66:9d:b1:f0:d2:9d:
         0e:36:b6:f6:c2:73:2c:bc:23:a1:1f:be:84:74:04:4e:d9:cc:
         42:0f:96:5f:47:21:f2:6b:7d:ac:c2:73:bb:6c:10:0a:d0:e8:
         93:85:99:8d:c1:20:df:57:3b:f7:e3:c7:ff:f7:53:05:20:71:
         5a:94:cd:2a:34:cc:fb:ad:60:a8:9f:3d:a3:c7:4d:16:d6:1f:
         9d:1c:55:a8:1e:80:b1:93:32:44:89:16:96:1e:5f:6b:eb:25:
         f0:3c:57:da:36:1f:a2:d3:6d:a7:cd:a6:3a:64:47:89:d8:64:
         7b:75:72:1f:ae:57:4c:96:d8:09:aa:02:04:88:b3:6b:24:2f:
         d4:f0:eb:86:41:f4:34:81:a7:99:55:05:bc:65:f7:ad:0d:70:
         11:ea:3e:98:2d:41:1f:cb:21:02:21:75:ee:99:17:9c:0d:1d:
         6a:77:20:01:40:0c:8f:91:99:32:12:6c:db:7b:d5:c5:e3:5f:
         aa:77:19:e2:7c:1d:6a:ff:f7:9b:1f:ac:87:25:05:fe:71:fe:
         53:f2:9f:34:04:3d:86:eb:73:9e:fa:09:e1:48:ca:6f:f4:de:
         ff:ad:16:f3:f7:e6:45:10:eb:24:0e:5e:1e:f0:ff:37:6d:0d:
         8f:7a:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:14:44 2025 by rpki-client