Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File:                     CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier:          gTA9y90h7ZolCnHhKke2E0Ct1uHYaThcnfGHwOF5Ess=
Subject key identifier:   5F:87:8B:6B:37:C5:0A:5C:02:3B:B8:16:DC:8B:E1:F2:0A:18:58:89
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer:       /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number:          0104
Signing time:             Thu 03 Jul 2025 03:29:06 +0000
Manifest this update:     Thu 03 Jul 2025 03:29:06 +0000
Manifest next update:     Thu 10 Jul 2025 03:29:06 +0000
Files and hashes:         1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: RcpkikOf/qAQFaiuxHcvF0taUciBMOCpRfC2mvtWWQ0=)
                          2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
        Validity
            Not Before: Jul  3 03:29:06 2025 GMT
            Not After : Jul 10 03:29:06 2025 GMT
        Subject: CN=6865f902-fbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:13:fa:7f:e0:46:ab:2e:70:89:7f:ff:37:
                    a7:c0:ea:63:2f:37:6b:83:d5:68:ef:0e:b6:b0:12:
                    70:ed:c9:e6:1b:fd:54:ed:f5:18:29:a0:2f:06:63:
                    be:c7:17:b2:06:a0:13:14:a1:ea:bf:3f:bb:a5:a5:
                    1c:b1:a7:0b:d2:33:af:f5:bb:57:1a:26:b6:d6:09:
                    b3:cc:b8:f0:96:60:3b:4e:af:fa:4f:15:22:f1:e9:
                    c5:5c:ab:2d:4d:f0:b1:51:cf:58:f9:c3:18:ac:6d:
                    dd:a8:0f:6e:39:da:62:41:18:2b:24:f5:8a:a1:77:
                    0b:c9:d1:00:df:de:f3:70:f6:05:48:43:dd:22:11:
                    f0:a5:cc:7b:f7:15:c3:c5:57:0f:02:71:0e:ed:0d:
                    25:9f:58:5a:8f:ff:28:18:68:bc:a0:9e:5d:7d:0c:
                    d3:74:5a:f7:99:f2:90:b7:d5:e4:c6:9e:e0:0e:bf:
                    32:8e:df:05:6d:b4:00:48:c3:e0:ae:ad:f9:41:2e:
                    f5:ad:96:97:b0:f8:7d:95:63:25:97:6f:a3:c1:de:
                    b9:3f:f7:9f:1c:b9:91:a9:be:df:43:a9:85:40:e2:
                    bd:13:50:71:03:c2:88:1b:72:db:c6:d5:61:d3:ab:
                    af:db:f2:ad:f0:61:32:63:38:89:33:24:fb:f1:47:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:8B:6B:37:C5:0A:5C:02:3B:B8:16:DC:8B:E1:F2:0A:18:58:89
            X509v3 Authority Key Identifier:
                keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:06:78:75:a6:ed:7e:67:ef:dc:38:a3:b5:99:78:fb:1b:
         3c:69:87:1c:97:eb:72:61:a2:98:28:17:fb:67:28:5a:b2:c7:
         fc:39:98:dc:d2:0d:71:9e:a4:da:fa:1c:22:0a:22:8a:5b:b4:
         fe:3f:c9:ee:ca:82:47:2e:8a:be:4c:6d:2f:9d:bf:e9:17:2d:
         a3:14:9f:13:73:47:e6:9a:79:72:4d:46:ba:1b:7a:ca:e0:b3:
         12:3f:c7:2c:58:84:4b:43:aa:78:1b:e6:a8:a9:6a:79:a8:0d:
         4b:75:5a:21:2f:c5:77:5a:90:6c:4d:4b:5c:8e:eb:9e:ae:ae:
         f2:c2:3e:ca:05:3f:2d:4d:57:c1:60:c3:39:20:23:db:71:6f:
         8d:0e:ca:8c:97:99:90:f5:1a:7e:04:b7:46:d0:3d:7a:1f:6f:
         46:23:a2:09:a0:f5:db:10:22:01:40:41:46:ee:58:ed:84:a4:
         a0:17:b1:34:08:07:9c:0d:a7:dc:0b:bd:99:25:4f:bf:68:76:
         c0:24:82:d9:26:5a:38:b6:a5:c1:86:5d:43:96:e2:99:8d:c4:
         ef:3e:3f:2c:42:d7:6b:1b:61:06:f7:4c:ea:92:db:d8:e9:0f:
         dc:08:2a:d5:ad:da:af:ce:c1:76:4d:94:97:37:dc:17:10:cc:
         13:c9:6b:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE
MjRCQ0JBMTQwHhcNMjUwNzAzMDMyOTA2WhcNMjUwNzEwMDMyOTA2WjAYMRYwFAYD
VQQDEw02ODY1ZjkwMi1mYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3cT+n/gRqsucIl//zenwOpjLzdrg9Vo7w62sBJw7cnmG/1U7fUYKaAvBmO+
xxeyBqATFKHqvz+7paUcsacL0jOv9btXGia21gmzzLjwlmA7Tq/6TxUi8enFXKst
TfCxUc9Y+cMYrG3dqA9uOdpiQRgrJPWKoXcLydEA397zcPYFSEPdIhHwpcx79xXD
xVcPAnEO7Q0ln1haj/8oGGi8oJ5dfQzTdFr3mfKQt9Xkxp7gDr8yjt8FbbQASMPg
rq35QS71rZaXsPh9lWMll2+jwd65P/efHLmRqb7fQ6mFQOK9E1BxA8KIG3LbxtVh
06uv2/Kt8GEyYziJMyT78UcbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Hi2s3
xQpcAju4FtyL4fIKGFiJMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1
RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N
NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaZwZ4dabtfmfv3DijtZl4+xs8aYccl+tyYaKYKBf7Zyhassf8OZjc
0g1xnqTa+hwiCiKKW7T+P8nuyoJHLoq+TG0vnb/pFy2jFJ8Tc0fmmnlyTUa6G3rK
4LMSP8csWIRLQ6p4G+aoqWp5qA1LdVohL8V3WpBsTUtcjuuerq7ywj7KBT8tTVfB
YMM5ICPbcW+NDsqMl5mQ9Rp+BLdG0D16H29GI6IJoPXbECIBQEFG7ljthKSgF7E0
CAecDafcC72ZJU+/aHbAJILZJlo4tqXBhl1DluKZjcTvPj8sQtdrG2EG90zqktvY
6Q/cCCrVrdqvzsF2TZSXN9wXEMwTyWud
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:52 2025 by rpki-client