Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File:                     VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier:          hNRouKIPfrLfey3j1ZpvRNshItMWG4KJiwt8hJeJZmQ=
Subject key identifier:   3F:93:CF:35:B5:B2:F0:78:45:F9:1B:32:EF:12:79:43:D0:B7:DE:15
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer:       /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial:       0D4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number:          0CEE
Signing time:             Wed 02 Jul 2025 18:27:46 +0000
Manifest this update:     Wed 02 Jul 2025 18:27:46 +0000
Manifest next update:     Wed 09 Jul 2025 18:27:46 +0000
Files and hashes:         1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: Va31QbHGNfdFn086F3cvzyrn98coRgapmig6DnIO/kA=)
                          2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
                          rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3403 (0xd4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
        Validity
            Not Before: Jul  2 18:27:46 2025 GMT
            Not After : Jul  9 18:27:46 2025 GMT
        Subject: CN=68657a22-8645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:20:86:ea:6f:74:f8:1b:91:e3:a7:13:ef:
                    18:de:0e:d9:1b:b0:75:f1:9f:c8:4d:4c:56:f1:9e:
                    b0:1a:e1:f7:17:55:e7:22:88:0b:61:ac:87:78:18:
                    25:0a:36:34:50:42:9b:3f:29:96:91:62:69:fb:44:
                    44:dc:fb:78:2f:d4:91:ea:08:fa:4b:78:a3:bb:bc:
                    fa:4e:5b:86:26:5c:4c:29:34:89:51:c2:30:63:1a:
                    25:4c:48:77:62:5b:dd:88:f9:4a:7b:db:43:41:c9:
                    98:a4:13:93:66:81:52:9e:f0:a4:11:27:bf:8a:4f:
                    90:88:a3:e6:9c:b4:ca:3c:23:b2:de:19:0d:b9:c7:
                    d0:35:1c:a8:ec:0f:73:f4:bf:8f:1b:7c:5c:f3:50:
                    f8:20:24:c6:f7:16:92:c4:07:c4:bc:2d:c0:7c:36:
                    f3:39:33:6e:87:66:71:e3:48:8d:dd:1a:68:90:4d:
                    6e:20:66:c4:26:52:67:9f:37:59:74:03:37:d6:e4:
                    13:21:7c:86:7f:38:ad:dc:10:95:35:e4:98:44:2c:
                    20:b1:84:65:c9:5b:ac:f4:ea:73:f5:ff:ed:cf:e5:
                    cf:e1:f5:41:ad:d6:ea:e2:32:05:3b:bb:60:27:2e:
                    a9:dc:63:5c:5a:fb:4b:0c:07:2f:e9:af:81:ef:08:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:93:CF:35:B5:B2:F0:78:45:F9:1B:32:EF:12:79:43:D0:B7:DE:15
            X509v3 Authority Key Identifier:
                keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:15:57:2b:36:e5:19:93:99:4e:e0:3d:60:59:4c:7f:1f:34:
         ac:d9:15:ea:e4:e2:cf:12:e4:97:7d:fc:6a:1d:f3:22:57:64:
         64:02:6f:aa:bd:73:44:9e:f9:66:0d:7d:07:18:67:28:f7:26:
         2d:5d:38:f1:79:15:1d:79:06:7f:b6:6e:73:76:e8:57:03:3d:
         32:3d:b6:ab:4b:76:91:49:43:73:e1:60:14:e5:f9:47:16:a1:
         7c:2d:32:8e:3f:ba:66:d7:b4:f9:1e:2a:59:ba:c8:d8:3a:6e:
         b2:e4:0c:0f:62:c3:9e:4c:e8:3d:73:b5:85:4b:76:95:71:17:
         84:be:1b:36:4c:18:3d:03:15:82:10:ac:ce:d5:52:c7:5e:80:
         95:b0:d9:e7:cb:8d:e5:6d:44:2b:6b:e5:17:d0:e7:3d:0a:69:
         c5:f4:63:b4:c5:d8:d5:3c:20:9b:56:a2:30:94:a9:a7:0d:e5:
         9c:10:05:79:ee:fd:1c:ff:87:2b:fa:a8:bd:24:d2:00:17:96:
         81:1d:42:20:fa:a8:b3:86:90:18:af:a6:d8:f9:ec:64:7f:72:
         7c:75:fc:58:6c:3a:f0:48:8d:6e:0d:06:b9:60:48:5d:09:aa:
         5e:8e:3a:35:e8:ae:b1:4c:ed:1d:c6:03:f8:97:1e:d9:3e:0b:
         e1:01:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:40:21 2025 by rpki-client