Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
File:                     jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json)
Hash identifier:          f4w2GO/tOGCezE+EtEeGXfYtHNQ4XH/72xbMj7B9BLo=
Subject key identifier:   5E:19:9A:1E:B5:AA:16:15:88:2F:5C:EB:E3:07:D0:44:4C:87:A0:3F
Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Certificate issuer:       /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
Manifest number:          0113
Signing time:             Sun 29 Jun 2025 04:00:55 +0000
Manifest this update:     Sun 29 Jun 2025 04:00:55 +0000
Manifest next update:     Sun 06 Jul 2025 04:00:55 +0000
Files and hashes:         1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: l7D7pBeUrr2Cx9DBJjirGzOSvsFaicc1+R2Tjvj2KRg=)
                          2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Dufn2bl2x79yMqHJgaUJAzhvDE7hxEwAGg5UyaJazhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
        Validity
            Not Before: Jun 29 04:00:55 2025 GMT
            Not After : Jul  6 04:00:55 2025 GMT
        Subject: CN=6860ba77-47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:89:72:ea:db:7a:a3:39:d4:d9:ce:08:14:
                    06:83:dd:55:38:67:c6:78:67:cf:4a:52:f8:96:51:
                    65:72:40:79:90:3b:96:41:ca:2c:86:67:8b:0d:01:
                    16:4f:f8:ea:44:ba:b4:fc:91:fd:51:23:96:d1:cc:
                    73:81:6f:b1:db:68:36:95:46:be:62:c4:7c:66:ea:
                    37:af:90:42:2c:68:67:d3:df:72:37:6b:6b:6d:62:
                    2d:fb:f7:a9:fa:1a:59:21:f8:a8:d9:f7:51:f0:34:
                    c0:a0:a1:53:4c:22:0a:70:72:ed:32:1f:de:fc:59:
                    b5:48:12:29:8c:29:3f:2e:1a:b1:84:b8:19:01:f8:
                    f2:5d:10:ad:20:73:1f:19:95:1a:c2:8f:c1:95:57:
                    f6:7b:81:6a:ad:a1:22:a2:24:ba:00:53:f0:cf:05:
                    bf:3e:3a:e1:70:3c:10:42:34:cf:07:71:84:e6:ae:
                    09:a1:7f:d4:39:c0:f5:61:4a:ec:9e:ea:e6:a5:93:
                    90:23:d7:eb:29:9c:f9:41:88:73:e1:7f:3d:a9:b8:
                    03:3d:55:f8:35:90:7b:17:5c:77:bf:11:fd:2c:c7:
                    eb:4b:ad:94:40:f9:af:e8:b0:bc:bb:95:9a:be:0d:
                    4d:f7:d8:e5:b1:81:42:4e:5d:fa:ae:da:e1:46:4e:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:9A:1E:B5:AA:16:15:88:2F:5C:EB:E3:07:D0:44:4C:87:A0:3F
            X509v3 Authority Key Identifier:
                keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bd:a5:da:8d:47:5c:74:51:b6:f4:90:52:fa:94:9a:e8:13:
         ac:2a:b2:c6:8d:c0:b0:91:59:f5:df:8a:97:d5:31:3a:66:ee:
         53:17:8f:6c:83:f4:af:24:73:00:00:47:0c:94:e9:02:98:ff:
         8c:6d:96:e0:f6:61:7a:d3:a6:56:fc:86:32:16:fb:66:07:f0:
         f0:b6:26:91:9d:dd:9c:82:9e:e3:3b:3a:3f:d3:09:4a:85:40:
         25:76:05:37:c9:a0:bf:4c:d0:a3:ee:77:af:0c:46:0f:c1:55:
         63:f0:04:f7:d1:12:3d:86:f3:36:35:80:b9:32:17:7c:a9:47:
         e7:06:3f:22:8f:56:e7:00:49:95:58:f0:8a:a8:79:9b:de:53:
         8e:30:9a:5e:b9:57:07:12:88:ef:00:ba:0a:c2:fa:e7:ad:09:
         60:4c:cb:22:91:20:16:b1:1c:3d:2d:19:23:fe:60:d2:fd:c0:
         73:4b:92:23:fa:84:da:69:36:c1:2e:00:a3:bc:31:6d:4f:01:
         da:1d:ee:36:53:75:32:a0:86:e3:27:7d:67:56:4f:fb:37:bc:
         b8:20:88:32:23:b9:23:fe:20:e2:b8:a0:65:98:3e:5c:bf:da:
         37:a5:fb:0a:99:69:b6:2c:69:da:8c:71:a3:3f:59:36:6e:71:
         8e:03:9c:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy
QTMzQ0IzOTAwHhcNMjUwNjI5MDQwMDU1WhcNMjUwNzA2MDQwMDU1WjAYMRYwFAYD
VQQDEw02ODYwYmE3Ny00N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/yJcurbeqM51NnOCBQGg91VOGfGeGfPSlL4llFlckB5kDuWQcoshmeLDQEW
T/jqRLq0/JH9USOW0cxzgW+x22g2lUa+YsR8Zuo3r5BCLGhn099yN2trbWIt+/ep
+hpZIfio2fdR8DTAoKFTTCIKcHLtMh/e/Fm1SBIpjCk/LhqxhLgZAfjyXRCtIHMf
GZUawo/BlVf2e4FqraEioiS6AFPwzwW/PjrhcDwQQjTPB3GE5q4JoX/UOcD1YUrs
nurmpZOQI9frKZz5QYhz4X89qbgDPVX4NZB7F1x3vxH9LMfrS62UQPmv6LC8u5Wa
vg1N99jlsYFCTl36rtrhRk4kqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4Zmh61
qhYViC9c6+MH0ERMh6A/MB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1
RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB
LWxNLVg4cFFfemNxTThzNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxvaXajUdcdFG29JBS+pSa6BOsKrLGjcCwkVn134qX1TE6Zu5TF49s
g/SvJHMAAEcMlOkCmP+MbZbg9mF606ZW/IYyFvtmB/DwtiaRnd2cgp7jOzo/0wlK
hUAldgU3yaC/TNCj7nevDEYPwVVj8AT30RI9hvM2NYC5Mhd8qUfnBj8ij1bnAEmV
WPCKqHmb3lOOMJpeuVcHEojvALoKwvrnrQlgTMsikSAWsRw9LRkj/mDS/cBzS5Ij
+oTaaTbBLgCjvDFtTwHaHe42U3UyoIbjJ31nVk/7N7y4IIgyI7kj/iDiuKBlmD5c
v9o3pfsKmWm2LGnajHGjP1k2bnGOA5x/
-----END CERTIFICATE-----
Generated at Mon Jun 30 06:14:27 2025 by rpki-client