Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          FtPXJeoaKhH7/8mlI1AGlJ8nesTd7EBUKhqJw67lLwE=
Subject key identifier:   3B:D5:D8:CD:2D:26:F3:DF:BC:1F:04:D6:F7:E6:8D:3D:AA:CB:45:61
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0C2A
Signing time:             Mon 30 Jun 2025 18:52:01 +0000
Manifest this update:     Mon 30 Jun 2025 18:52:00 +0000
Manifest next update:     Mon 07 Jul 2025 18:52:00 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: xtXfGqcTn7MMNlWRjFhhj/XWtBSfAym23PH0ykUdwU4=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: Cjl2Pm+bCZ4QUEFMoQa/76zBHtfWqc+OXt4GAiijv7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Jun 30 18:52:00 2025 GMT
            Not After : Jul  7 18:52:00 2025 GMT
        Subject: CN=6862dcd0-7924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:1b:48:9d:2f:5e:42:b3:c3:b4:a1:00:9c:
                    b8:52:d6:d0:9e:0b:70:3b:6b:64:4e:66:89:9c:5a:
                    de:5f:f4:93:70:35:ae:b3:24:ba:79:b4:b4:99:b8:
                    c8:14:36:7a:7d:88:72:00:32:29:ca:67:dd:6f:e7:
                    ae:1f:7f:7f:9c:d4:12:1c:d8:d7:8c:d6:b6:bd:2d:
                    f2:81:a0:41:28:c9:eb:67:11:62:b2:dc:bc:a7:ec:
                    cd:50:e9:b6:bc:2f:17:45:5b:e9:64:a4:ff:2e:81:
                    a8:dc:64:6f:c0:ad:06:4e:5e:de:56:e7:0d:dd:66:
                    d8:c5:50:75:5b:5a:d0:b8:de:a9:a1:84:a8:3e:d5:
                    38:25:2d:6d:5f:e3:3d:61:1f:e1:46:30:3e:38:f2:
                    eb:f7:b8:5a:5f:f5:1c:c3:25:10:bb:93:34:fd:04:
                    1f:1d:ba:de:08:73:88:62:bf:24:40:b6:a0:b1:a8:
                    d4:e8:9e:1f:1f:9b:7e:76:ea:52:1f:ae:13:f4:68:
                    0b:a6:d5:b6:9a:b0:d4:47:f2:9a:40:58:41:5f:7a:
                    63:29:55:7a:d1:b9:a8:24:c1:0f:55:d0:b9:4a:e2:
                    98:ee:ed:82:b7:49:2a:7d:21:74:aa:83:4f:b9:39:
                    3e:d7:b3:79:9b:0f:d7:65:bf:ea:36:d6:e7:6d:e7:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D5:D8:CD:2D:26:F3:DF:BC:1F:04:D6:F7:E6:8D:3D:AA:CB:45:61
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:80:14:35:e1:d2:54:d3:22:73:8f:db:11:0f:c3:ab:52:f3:
         ca:b8:2f:f5:a5:c0:10:3d:60:5c:57:5e:ff:7b:ce:3c:a1:f1:
         fc:e6:b6:7c:76:17:f5:35:59:a2:09:66:bd:d8:5c:cf:c6:ae:
         8a:ad:28:bd:82:8c:11:a7:36:62:5c:ae:2a:bd:a0:c8:fc:eb:
         c6:64:91:e9:db:3c:e5:a7:ff:27:a4:97:48:1a:8c:8c:e0:3e:
         3a:69:db:32:e9:22:92:6e:b0:52:b2:ae:77:af:08:88:be:85:
         d4:64:80:83:69:3d:58:59:c0:d5:9c:e3:77:eb:ef:bb:79:83:
         57:2b:95:f0:bb:e7:92:af:b2:64:58:98:a2:2d:de:cb:a4:cb:
         b7:d2:e7:57:e1:fa:ab:10:07:21:a1:37:43:ad:6f:58:97:58:
         9d:54:05:c0:34:2e:21:a8:53:65:1d:f9:c3:8b:98:8e:29:28:
         b5:2d:41:42:a0:94:ac:90:3f:f1:ba:e1:7e:86:1e:cf:50:30:
         e5:16:3f:00:73:aa:88:1b:ad:4d:83:e0:22:0a:e2:aa:25:3c:
         4d:47:3c:a6:28:0b:73:d6:22:13:88:2a:51:6e:30:ed:e8:e1:
         39:84:9e:c5:8f:05:ce:ab:a5:80:2b:f0:e0:9f:d3:b4:66:9e:
         05:dc:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:25:33 2025 by rpki-client