Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          OQkQ7ACaZ7Zn+gsrcbfwRWIe1LoDV0xDw1LJmDUrHQA=
Subject key identifier:   03:A9:9C:63:C5:C7:2D:ED:8A:A2:5A:49:98:C7:2B:BB:A9:3D:84:B9
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          03C3
Signing time:             Thu 03 Jul 2025 01:01:52 +0000
Manifest this update:     Thu 03 Jul 2025 01:01:52 +0000
Manifest next update:     Thu 10 Jul 2025 01:01:52 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: RBBLsVw0vv5ABnfYqTtIGlB5PZ8LpE6NmSF5BNps7Tc=)
                          2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=)
                          3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Jul  3 01:01:52 2025 GMT
            Not After : Jul 10 01:01:52 2025 GMT
        Subject: CN=6865d680-a2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:10:17:9f:ad:85:1d:a7:90:36:11:90:84:
                    5a:c6:09:89:1f:19:94:dc:cf:9c:55:1c:12:c8:3f:
                    87:59:42:ce:40:dd:a6:5f:eb:4f:c6:1b:98:25:46:
                    22:f3:0c:eb:f4:0b:0a:a4:17:bd:8a:db:23:b7:2f:
                    73:82:32:21:9e:a7:02:8a:03:e6:56:3d:09:71:69:
                    93:13:18:ac:6d:80:f3:f3:53:46:a1:c5:12:3c:95:
                    a1:09:55:2d:de:99:d3:63:26:38:a7:e8:90:a0:3b:
                    70:a4:2d:35:5a:e5:39:66:e8:eb:db:05:56:93:a3:
                    a1:60:73:7d:51:cc:94:3b:de:a5:f9:e4:07:ce:95:
                    6f:de:61:b2:ec:b2:fe:7f:41:9b:1b:cc:63:77:64:
                    b1:55:a3:55:7e:e5:d7:63:ed:f0:57:ec:5d:cf:cc:
                    4e:21:91:14:03:ce:9e:ce:6a:34:59:19:91:c7:0f:
                    50:96:59:dc:e6:67:47:12:e3:d6:f9:ea:3b:aa:a8:
                    02:82:65:76:2c:ec:d8:98:99:fd:5b:12:cf:77:81:
                    9f:23:ab:d0:8d:d5:63:65:f3:77:cd:9f:21:91:7c:
                    b8:2d:e0:19:31:a8:4a:c3:94:fd:96:a3:00:d9:33:
                    ac:0d:b4:2e:37:51:f9:15:31:18:a0:13:16:dd:07:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:9C:63:C5:C7:2D:ED:8A:A2:5A:49:98:C7:2B:BB:A9:3D:84:B9
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:e6:72:11:6d:79:2a:b0:ac:b1:da:46:40:6e:89:d9:96:
         a8:5d:ee:27:97:b9:f7:55:2d:c6:72:2b:af:aa:fb:64:f0:02:
         de:81:b0:b5:1c:2e:f5:20:77:75:75:a4:ab:8d:14:4b:75:ab:
         9d:2d:bc:ac:c9:1a:02:68:4b:63:68:e3:80:09:dd:1c:11:81:
         80:32:db:f7:4a:38:0c:c7:0a:d1:d8:da:78:3e:4d:be:52:d9:
         f6:ee:ce:7b:a4:42:7b:10:a0:44:1d:d8:eb:8a:01:b5:d7:4a:
         e7:5f:f5:5c:c9:75:76:6c:ee:3f:47:55:d9:dc:84:82:1e:51:
         94:ea:21:c6:4d:01:d8:9b:36:32:58:dd:f8:58:b4:56:cf:a7:
         49:f9:ca:ae:fb:e4:0e:c8:5e:fd:10:95:23:77:88:e0:17:be:
         03:54:f1:e3:b4:d8:c9:7d:ac:72:a1:3e:f4:e7:75:ee:a2:e9:
         89:15:fb:5c:e0:6f:57:bf:53:ac:e2:1b:1e:8b:30:0b:af:9c:
         77:7c:58:d4:d6:0e:97:08:75:40:da:de:e6:cf:63:d5:9d:55:
         6c:90:bb:b7:89:80:69:e9:6e:2a:45:6f:19:5d:9f:88:80:34:
         50:bb:72:3b:52:5b:c7:2c:f0:c2:ae:f6:fe:8c:16:c8:62:e2:
         90:3a:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:59:33 2025 by rpki-client