Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
File:                     rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json)
Hash identifier:          uumA23Uj0OeojR0dkGiUb3gc5gDYcrlA+MVeE1XVM7Q=
Subject key identifier:   CC:2A:9A:8A:2B:82:68:EF:60:5B:27:AC:0F:FD:75:EF:81:8C:87:1D
Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
Certificate issuer:       /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
Certificate serial:       1342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
Manifest number:          1332
Signing time:             Sat 28 Jun 2025 16:52:45 +0000
Manifest this update:     Sat 28 Jun 2025 16:52:44 +0000
Manifest next update:     Sat 05 Jul 2025 16:52:44 +0000
Files and hashes:         1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: PgLdFF9VrTOQ6ADBY3zUQqCGxUOutMkOhIGTr0tSNcg=)
                          2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: fDAbckuG9wFQsseJEFS548SLfcyPSORhEr8NleSSt0k=)
                          3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: /pUGpbO60Fe1yZM/qF6+zCst+2cZhcsURR33/zD2CVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 16:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4930 (0x1342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
        Validity
            Not Before: Jun 28 16:52:44 2025 GMT
            Not After : Jul  5 16:52:44 2025 GMT
        Subject: CN=68601ddd-d5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:9b:91:fe:a6:32:2a:6e:b1:ee:14:3f:df:
                    8f:f5:50:fb:7f:b9:f4:3a:cd:61:aa:22:84:29:7b:
                    ba:3c:da:06:e3:1d:32:1f:94:fd:5f:f3:f9:1a:57:
                    41:cd:a7:92:71:06:6d:ac:4c:6e:19:f3:de:bf:1c:
                    5d:7b:47:92:9f:80:38:78:26:7b:73:85:42:bc:11:
                    01:2a:90:78:7d:0d:38:70:8a:e4:ef:54:f8:66:e2:
                    69:2c:1b:9d:38:ab:6a:8d:84:7e:c7:a6:6b:9b:9b:
                    80:11:ef:45:ae:16:bb:7b:02:83:6e:4f:f7:93:22:
                    19:27:03:60:18:5b:b8:f4:ef:87:62:12:7d:c5:be:
                    30:76:aa:82:ca:a1:5a:b4:33:e5:8b:51:a7:54:6c:
                    61:1c:2d:1c:56:5e:f3:91:68:cc:ad:c9:75:4f:82:
                    43:48:81:d0:ab:ee:bd:17:a7:1e:65:a7:e5:b3:44:
                    2a:3b:76:64:99:40:8e:b0:43:ac:de:90:3d:e3:e4:
                    bc:c5:19:b4:78:73:cd:94:1e:de:7b:57:21:7c:6a:
                    0c:b8:f2:56:da:58:18:2f:99:d8:67:df:c3:f5:05:
                    70:87:a3:6c:76:60:63:0d:19:1b:16:7e:2b:ba:ca:
                    f4:dd:43:7a:de:2b:de:e7:43:26:2a:e6:c5:44:ff:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2A:9A:8A:2B:82:68:EF:60:5B:27:AC:0F:FD:75:EF:81:8C:87:1D
            X509v3 Authority Key Identifier:
                keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:09:2b:6f:97:06:3c:61:43:54:f1:a6:60:bc:7a:bd:86:2f:
         fa:54:95:06:23:c2:9c:6d:7e:24:be:a0:d8:d9:54:f0:8f:30:
         25:bc:3f:c0:41:3c:35:38:01:e1:43:06:17:8d:28:3b:4c:a1:
         e8:d4:d7:c6:d4:3b:5e:ee:2a:62:a5:e4:ce:98:15:14:5c:3f:
         f4:16:05:15:9c:69:ca:a2:1d:6a:57:fa:2f:f3:d2:cd:0a:5e:
         70:36:f3:8f:73:4a:23:1b:c0:8c:40:8b:cf:e2:e0:8e:8d:62:
         0c:74:1e:da:f8:24:d0:45:2c:f3:16:42:75:de:a9:89:64:4b:
         14:09:69:b8:ee:1a:04:42:21:fc:83:65:d5:81:82:63:9e:ec:
         fd:de:0e:46:db:f9:40:80:cf:fa:2f:7b:a8:cc:27:62:5c:df:
         3d:bc:f6:eb:3a:ae:7a:c0:1d:ca:d8:d4:7b:02:ce:a5:04:2e:
         93:07:b8:fc:ca:b7:14:6c:ce:33:8d:7d:35:e3:9c:dc:ad:eb:
         d9:df:69:ce:08:da:c3:dd:78:d6:02:d0:e3:ed:a2:94:a2:5c:
         79:15:dd:22:16:f6:f8:8a:64:9a:39:8a:70:b9:6d:ff:a8:f6:
         11:2a:43:6e:96:44:05:8e:70:d9:98:5a:0e:eb:90:35:67:e1:
         3d:5a:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:01:56 2025 by rpki-client