Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
File:                     sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json)
Hash identifier:          yZ1J+R8FfVboASt3e7LoMPgBB7BE8mNJCCmFihDp0aI=
Subject key identifier:   44:3B:BA:BD:12:2A:56:FD:5C:C6:7A:0C:9D:D3:03:CA:4E:52:27:13
Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Certificate issuer:       /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
Manifest number:          0106
Signing time:             Thu 03 Jul 2025 05:13:01 +0000
Manifest this update:     Thu 03 Jul 2025 05:13:01 +0000
Manifest next update:     Thu 10 Jul 2025 05:13:01 +0000
Files and hashes:         1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: +o5GqJ5ht42Ur+nQtxFrKUW8oolwsVmc/c6n2Xr1UfE=)
                          2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
        Validity
            Not Before: Jul  3 05:13:01 2025 GMT
            Not After : Jul 10 05:13:01 2025 GMT
        Subject: CN=6866115d-596a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:d1:5e:d3:ae:7c:c2:68:fd:36:49:70:23:
                    42:51:f7:58:26:c5:07:10:be:37:e5:29:78:41:3e:
                    46:19:d8:8b:21:34:cd:07:91:88:ba:7f:7b:48:b3:
                    b7:e0:06:8f:41:e9:59:43:eb:db:d8:dc:0f:06:6c:
                    6d:d4:ef:1e:8e:80:26:ef:71:f3:40:d3:ca:20:3c:
                    45:7a:4a:13:21:c2:56:3d:99:b0:30:2d:b3:95:b7:
                    52:88:58:9b:66:af:8f:7c:6b:a4:9a:5e:ca:87:0e:
                    19:dc:56:21:8c:a1:23:d5:1b:3e:b5:5c:f9:a9:3f:
                    2e:74:9a:3b:c0:02:08:ba:89:77:b3:68:59:f8:04:
                    dd:f2:76:58:c7:e2:aa:33:61:df:a6:43:68:16:6d:
                    58:55:0f:65:02:f5:65:8e:95:a7:77:9f:54:cc:a1:
                    6d:fb:84:17:bd:1a:4f:2f:6d:3c:10:04:7f:13:76:
                    0f:9e:99:95:fa:e2:7a:a4:c5:37:9c:bd:b2:b3:d5:
                    62:3d:39:93:fe:05:13:9e:1a:b8:f6:70:9c:3f:9e:
                    66:71:95:bb:31:9f:86:37:08:b7:09:56:6a:15:15:
                    9c:06:7c:c6:3b:4e:e3:58:0d:8b:9b:ab:9a:6c:19:
                    2a:c8:9a:72:dc:0a:33:c5:51:73:4d:15:d6:87:a4:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:BA:BD:12:2A:56:FD:5C:C6:7A:0C:9D:D3:03:CA:4E:52:27:13
            X509v3 Authority Key Identifier:
                keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:60:4c:c2:80:0d:a2:d9:80:64:20:59:34:c4:8f:2f:83:de:
         cd:5c:a8:b1:2b:88:01:a1:91:bf:86:e4:9c:76:cf:45:b6:8c:
         ab:30:d6:9b:48:54:2b:08:bb:de:e6:ed:2b:8b:43:4c:98:fc:
         b7:42:70:3e:b0:6f:38:6f:8b:07:1f:57:36:3f:22:13:c8:85:
         11:4c:77:bc:2c:80:c6:9d:2c:40:93:da:35:11:3d:ac:ac:9a:
         cb:ab:d9:04:ad:c4:9e:2b:e2:bb:db:d9:73:39:4e:8b:d2:d0:
         6a:00:c9:5a:3f:1b:87:01:e2:7b:2e:98:f8:67:b6:c2:99:1a:
         09:56:ab:5c:62:21:86:a8:31:53:99:43:d9:0a:df:a2:3c:e0:
         c5:f7:6a:78:4b:71:e3:4c:08:e1:47:f3:96:d5:da:3e:90:ed:
         8c:48:d4:15:1d:13:4c:5a:b1:86:7c:86:67:09:3f:46:49:f0:
         c6:d3:b4:27:a4:e7:51:fd:2e:47:af:a4:e3:12:bc:7d:1a:8e:
         1f:cb:e3:25:5a:e4:ab:6f:34:d2:a4:16:2b:67:eb:06:c6:2e:
         7b:8b:bf:d6:9f:10:75:ea:bf:2f:67:f3:fa:b1:31:4d:9d:f6:
         2b:c6:00:48:a7:01:cf:f8:ed:68:1e:a2:51:55:04:3a:61:03:
         8f:1c:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:14:09 2025 by rpki-client