Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
File:                     RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json)
Hash identifier:          dZ7DoJ8joTqPpYNOUhtTtHme8CBsIZ5oTGLplhi06MM=
Subject key identifier:   49:6A:D6:5F:41:B0:2B:FD:66:E3:D1:04:90:BC:70:96:31:BA:27:17
Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Certificate issuer:       /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
Manifest number:          05C2
Signing time:             Wed 02 Jul 2025 23:25:44 +0000
Manifest this update:     Wed 02 Jul 2025 23:25:43 +0000
Manifest next update:     Wed 09 Jul 2025 23:25:43 +0000
Files and hashes:         1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: IRjimbftYmaVwl3xSaIKLQKc7AdJ4IS8evOoTYMJ+D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
        Validity
            Not Before: Jul  2 23:25:43 2025 GMT
            Not After : Jul  9 23:25:43 2025 GMT
        Subject: CN=6865bff8-bc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:fb:1f:6b:a9:d3:86:28:8e:2d:40:36:b0:
                    30:45:8e:f5:52:36:aa:e6:c6:46:e8:dc:20:c3:67:
                    9a:e3:b2:7f:77:23:e0:e2:77:ce:b1:ab:06:bd:08:
                    b5:78:c2:e2:ce:d2:33:4c:68:f3:3e:fe:08:f9:52:
                    55:56:6b:63:3b:57:51:e5:fb:40:97:05:af:d0:7a:
                    92:03:c9:6c:2a:c1:fe:e4:e4:fb:bc:b2:9e:68:39:
                    6a:42:17:be:56:9c:33:c1:c4:b1:34:99:d4:21:8c:
                    b8:a1:41:7f:a4:1f:ba:99:45:18:ca:6b:86:ce:0b:
                    88:f7:d4:08:f8:57:86:7b:c4:82:d7:88:53:18:61:
                    f3:65:bc:78:f7:37:a7:78:87:a3:07:4d:4e:e8:bb:
                    77:a2:90:41:3b:e1:61:29:fa:d3:ab:c5:fc:d9:ef:
                    86:cf:4f:c8:54:68:f1:58:7c:28:46:d5:98:d1:f9:
                    50:9c:d6:b9:0b:b8:07:f0:7a:05:39:26:17:6d:31:
                    b2:d7:fe:99:22:f9:83:5e:3c:bf:05:f2:0b:2d:6b:
                    a2:18:17:a5:d1:1c:40:1e:24:d0:b3:b2:8b:15:63:
                    71:59:49:53:e9:6c:30:6a:34:99:17:95:d8:55:4f:
                    5c:94:e9:fd:2d:15:fb:07:62:76:50:53:5b:95:e4:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:D6:5F:41:B0:2B:FD:66:E3:D1:04:90:BC:70:96:31:BA:27:17
            X509v3 Authority Key Identifier:
                keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:ef:54:1c:cd:a0:bc:bc:50:8b:1f:00:da:46:ed:71:e0:
         86:32:90:f3:8f:80:6c:9a:82:b2:50:d6:e7:d0:6f:46:c2:3d:
         df:55:0a:79:d8:66:56:6d:9d:52:2c:38:ef:39:91:12:41:ba:
         0c:e4:24:ac:57:41:c4:82:34:72:e8:74:e6:fa:77:33:46:01:
         33:eb:98:4a:1f:ec:39:90:e4:09:c4:ce:77:e9:8e:2b:70:ef:
         4f:25:95:ac:be:3b:3c:4a:0b:37:c5:14:29:98:eb:2c:16:32:
         6f:8f:46:3d:bd:ca:c0:d8:94:6b:b2:39:d9:e6:a8:9d:8c:54:
         d8:77:d2:9c:7d:ae:84:c6:0b:50:05:c4:44:16:70:e3:f8:91:
         f8:3d:8a:5d:e8:93:50:e3:5b:a3:0f:bf:9e:b9:8a:65:40:3e:
         ff:88:9e:ed:ba:1f:09:b2:7a:c1:14:ac:ce:e4:33:0d:ef:52:
         19:17:6e:fa:39:48:56:e8:51:55:5e:76:7c:ec:4b:ba:84:b9:
         af:51:b1:c8:94:43:75:31:fb:62:dc:e4:94:a5:70:e6:f4:01:
         63:9f:b3:9b:9a:36:76:58:f7:73:22:81:2e:4b:50:8a:88:57:
         72:ef:c5:c1:4a:cf:0d:a6:ee:f7:0e:63:bf:e8:00:c3:fc:1f:
         06:a3:3c:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy
RDM0RUI3MDcwHhcNMjUwNzAyMjMyNTQzWhcNMjUwNzA5MjMyNTQzWjAYMRYwFAYD
VQQDEw02ODY1YmZmOC1iYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmL7H2up04Yoji1ANrAwRY71Ujaq5sZG6Nwgw2ea47J/dyPg4nfOsasGvQi1
eMLiztIzTGjzPv4I+VJVVmtjO1dR5ftAlwWv0HqSA8lsKsH+5OT7vLKeaDlqQhe+
VpwzwcSxNJnUIYy4oUF/pB+6mUUYymuGzguI99QI+FeGe8SC14hTGGHzZbx49zen
eIejB01O6Lt3opBBO+FhKfrTq8X82e+Gz0/IVGjxWHwoRtWY0flQnNa5C7gH8HoF
OSYXbTGy1/6ZIvmDXjy/BfILLWuiGBel0RxAHiTQs7KLFWNxWUlT6WwwajSZF5XY
VU9clOn9LRX7B2J2UFNbleQyRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElq1l9B
sCv9ZuPRBJC8cJYxuicXMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC
MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC
YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBG8u9UHM2gvLxQix8A2kbtceCGMpDzj4BsmoKyUNbn0G9Gwj3fVQp5
2GZWbZ1SLDjvOZESQboM5CSsV0HEgjRy6HTm+nczRgEz65hKH+w5kOQJxM536Y4r
cO9PJZWsvjs8Sgs3xRQpmOssFjJvj0Y9vcrA2JRrsjnZ5qidjFTYd9Kcfa6ExgtQ
BcREFnDj+JH4PYpd6JNQ41ujD7+euYplQD7/iJ7tuh8JsnrBFKzO5DMN71IZF276
OUhW6FFVXnZ87Eu6hLmvUbHIlEN1Mfti3OSUpXDm9AFjn7ObmjZ2WPdzIoEuS1CK
iFdy78XBSs8Npu73DmO/6ADD/B8Gozy+
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:01:12 2025 by rpki-client