Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
File:                     S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json)
Hash identifier:          GHQQqXLsXuMJxeMaqQyVnypLVEWY8g8+ZgRd6XBX11c=
Subject key identifier:   80:CA:84:EE:73:57:A0:96:04:09:C7:12:04:38:0D:FD:C0:6C:25:FE
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Certificate issuer:       /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
Manifest number:          1E
Signing time:             Sun 29 Jun 2025 06:55:16 +0000
Manifest this update:     Sun 29 Jun 2025 06:55:15 +0000
Manifest next update:     Sun 06 Jul 2025 06:55:15 +0000
Files and hashes:         1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: isWysgrnYA1ilPCbptC++9AvkvsTy5AM94AoVaOkUGA=)
                          2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: 5PpNOEZEUrmc1vn5FvjeokwBWv9BOPfyJY3ybR1sQKs=)
                          3: F56C1CCC2B6F11F0B921B80EC4F9AE02.roa (hash: xE6bIhdn++6m4++H8g25LIhLe1MxCe3PRzQyPVY78VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 06:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
        Validity
            Not Before: Jun 29 06:55:15 2025 GMT
            Not After : Jul  6 06:55:15 2025 GMT
        Subject: CN=6860e354-ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:64:13:c6:02:1c:ac:fc:6f:03:c3:dd:23:
                    89:32:b4:52:e1:7b:4b:d7:8f:47:03:5c:23:29:aa:
                    59:3b:5c:a9:af:b8:84:7f:5c:b6:e8:72:68:74:ea:
                    5f:40:86:01:07:45:c3:eb:ad:ea:01:60:bf:37:b6:
                    3c:58:64:ab:95:56:eb:f5:a2:19:01:4a:0c:96:6c:
                    6f:c2:a5:77:80:be:4c:da:d5:2c:a2:14:46:8c:b3:
                    6e:86:30:21:96:fd:cb:50:67:d4:62:73:23:67:e2:
                    dc:71:a2:61:a0:02:f1:ff:58:32:e5:7b:e7:1b:b4:
                    78:a4:98:e7:5c:8b:bb:6a:fe:b5:0f:a3:b7:7b:9e:
                    80:59:3d:2f:e2:6a:a4:f1:b3:89:e2:86:e5:20:a3:
                    6f:e5:57:1a:70:d0:51:25:ce:6b:b3:53:b4:3a:c7:
                    4b:1f:b6:ee:84:9b:41:e2:04:2e:40:6c:6f:1a:96:
                    0d:5f:3b:40:60:96:75:cf:5e:54:b4:73:64:17:70:
                    ef:d2:a6:c3:10:11:33:ce:c2:d8:f2:5d:7e:43:80:
                    24:62:ae:97:62:10:ad:50:10:b9:19:03:23:ef:cc:
                    88:fe:c9:99:2e:1d:86:1f:04:ef:fd:fd:9e:c1:9d:
                    a0:62:f9:30:39:d2:43:08:5c:22:2b:3e:cd:a3:52:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:84:EE:73:57:A0:96:04:09:C7:12:04:38:0D:FD:C0:6C:25:FE
            X509v3 Authority Key Identifier:
                keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:5d:b4:57:77:ba:26:05:9a:06:40:b0:15:df:e2:77:fb:
         19:e6:64:40:6c:81:4f:d5:65:75:ca:f8:c4:c1:53:66:a4:db:
         11:12:11:90:64:d4:fb:74:a5:78:e5:df:fe:09:98:43:54:1c:
         f2:64:89:c9:76:8b:96:56:b8:9d:a1:40:cd:84:18:20:fc:16:
         97:ed:74:0c:1e:63:e9:0f:43:01:83:3d:8c:fe:e7:56:5f:d8:
         84:bf:59:01:0d:2a:bf:c2:0e:87:0c:18:ee:38:4f:1d:ff:6f:
         ab:d9:05:45:d3:e7:32:81:af:97:01:f0:0c:15:e5:d1:83:32:
         f6:79:70:06:92:b0:d3:92:f9:b1:5d:ad:20:3b:c2:a5:67:fa:
         96:37:72:db:6c:27:f0:cb:e6:e7:24:de:28:49:d5:b8:56:4a:
         e0:2f:94:b2:aa:0a:7d:d3:11:22:f3:dc:98:72:ff:2e:bd:30:
         26:71:e9:39:46:16:96:cb:b0:8c:e1:d8:1a:65:a9:8d:77:29:
         97:03:3c:5c:d7:81:6f:c3:de:d1:f7:c3:f2:81:12:54:1f:85:
         26:69:bb:39:f6:95:ff:11:f0:fb:8d:db:42:a4:4f:60:68:25:
         9d:0e:f5:ce:a4:ca:89:75:67:bf:b3:7c:b8:73:fc:66:70:17:
         1d:56:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:45:07 2025 by rpki-client