Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
File:                     6EferVwP7UnjOjtiJO_z5OzaQZY.mft (raw, json)
Hash identifier:          InoANmzsAc0XHCu4ds12l5P1ltdGmkVDuIS9vd6tJKU=
Subject key identifier:   7B:F3:5A:2F:FA:66:E2:F3:8A:0D:A2:45:11:B9:07:E2:D0:86:7D:69
Authority key identifier: E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96
Certificate issuer:       /CN=A91F2573/serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
Manifest number:          0779
Signing time:             Wed 14 May 2025 21:32:34 +0000
Manifest this update:     Wed 14 May 2025 21:32:34 +0000
Manifest next update:     Wed 21 May 2025 21:32:34 +0000
Files and hashes:         1: 6EferVwP7UnjOjtiJO_z5OzaQZY.crl (hash: rW6kS1GVrvFQzM5JpGSY/352z8fQz8dfx0Ojn3Kdbak=)
                          2: D35D0A48129B11EB97265731C4F9AE02.roa (hash: YPo4JrjUY8rokDYSsOS/zRUheikbdfmmqRlCH28JQPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2573, serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
        Validity
            Not Before: May 14 21:32:34 2025 GMT
            Not After : May 21 21:32:34 2025 GMT
        Subject: CN=68250bf2-1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:07:03:a7:f8:fe:ee:57:6e:a9:63:fa:5a:
                    20:16:cb:ed:a2:45:7d:6b:d7:dd:a3:ae:6c:8e:86:
                    55:36:fb:97:82:98:b1:9d:c4:49:c0:fa:3a:3e:93:
                    ed:1e:24:68:af:5e:2f:41:79:eb:0d:31:a9:8e:be:
                    3c:fc:27:47:2a:03:4a:f1:02:e1:0d:b5:c9:3d:4c:
                    2b:6c:f5:2d:df:ad:9e:b0:fc:c7:a8:3b:14:06:f8:
                    6e:ff:81:5f:d7:d2:fb:72:c4:5d:2b:59:df:77:2f:
                    b4:49:96:bf:f9:13:ab:1e:da:eb:7f:da:cf:aa:a7:
                    21:32:d5:da:e4:1f:81:6f:50:15:9e:71:be:54:92:
                    a4:b9:dc:a8:ed:4f:4d:24:2a:89:81:ee:c8:79:3c:
                    1a:10:60:72:f5:7e:ba:d5:a6:e0:b6:81:12:31:16:
                    57:a2:f8:33:5f:f8:63:c4:36:2d:e5:e4:5c:90:b8:
                    9d:98:7a:83:c9:00:02:7d:ea:e7:8d:db:81:97:eb:
                    26:4c:f0:6d:5d:44:5d:0d:41:89:aa:2e:1e:bc:c0:
                    88:be:96:a1:16:2e:b8:63:38:a2:05:8e:8a:91:3d:
                    68:26:47:93:1f:18:38:20:22:19:25:3d:c9:e4:cb:
                    99:b9:34:8e:a5:90:4f:a2:c3:5c:da:59:ce:ea:4b:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:5A:2F:FA:66:E2:F3:8A:0D:A2:45:11:B9:07:E2:D0:86:7D:69
            X509v3 Authority Key Identifier:
                keyid:E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:5f:2e:74:3c:a8:62:53:e6:c9:b0:15:d4:fd:e1:f0:63:
         ce:a5:9d:06:df:99:bc:48:7c:01:e9:3c:f1:0c:1d:ad:48:3d:
         dd:bc:6d:4b:c3:60:2e:54:2a:63:3e:58:3c:0e:dd:61:52:89:
         4c:a8:c0:82:8e:23:22:5c:c9:5d:84:1d:ff:79:79:4e:e1:87:
         2a:01:8d:c1:f9:13:15:d6:24:dd:1a:c6:c4:74:93:a1:8b:e1:
         60:3a:ed:5b:8a:a5:a1:aa:5a:fd:5c:77:2a:7b:70:a5:29:ff:
         a3:67:bb:f6:23:63:88:1a:99:93:9a:46:02:12:0c:ef:98:2a:
         90:63:1e:bf:12:66:d5:07:f6:9e:f5:51:54:7c:98:be:1f:53:
         3e:c3:5c:dd:09:5b:ec:e0:80:fa:52:9d:e5:97:15:37:2f:34:
         28:13:67:12:99:75:3e:a2:fc:08:cf:f7:db:ea:92:cf:9b:06:
         61:c4:78:24:8e:06:5b:d2:39:40:21:24:91:b6:3c:d8:7d:66:
         4f:d6:33:83:ff:e8:1e:a3:38:67:71:da:0d:a4:d1:f8:3c:af:
         12:45:72:0a:d1:16:04:d6:71:7e:32:2c:ed:17:e3:9f:50:2c:
         dc:3e:0d:56:60:89:b2:73:b4:af:3a:cf:55:90:21:4e:5a:16:
         53:01:9e:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI1NzMxMTAvBgNVBAUTKEU4NDdERUFENUMwRkVENDlFMzNBM0I2MjI0RUZGM0U0
RUNEQTQxOTYwHhcNMjUwNTE0MjEzMjM0WhcNMjUwNTIxMjEzMjM0WjAYMRYwFAYD
VQQDEw02ODI1MGJmMi0xYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTgHA6f4/u5Xbqlj+logFsvtokV9a9fdo65sjoZVNvuXgpixncRJwPo6PpPt
HiRor14vQXnrDTGpjr48/CdHKgNK8QLhDbXJPUwrbPUt362esPzHqDsUBvhu/4Ff
19L7csRdK1nfdy+0SZa/+ROrHtrrf9rPqqchMtXa5B+Bb1AVnnG+VJKkudyo7U9N
JCqJge7IeTwaEGBy9X661abgtoESMRZXovgzX/hjxDYt5eRckLidmHqDyQACfern
jduBl+smTPBtXURdDUGJqi4evMCIvpahFi64YziiBY6KkT1oJkeTHxg4ICIZJT3J
5MuZuTSOpZBPosNc2lnO6kvq0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvzWi/6
ZuLzig2iRRG5B+LQhn1pMB8GA1UdIwQYMBaAFOhH3q1cD+1J4zo7YiTv8+Ts2kGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjU3My9BOTBFRDMyNjEy
OUExMUVCOTU5MzlGMzBDNEY5QUUwMi82RWZlclZ3UDdVbmpPanRpSk9fejVPemFR
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZFZmVyVndQN1Vuak9qdGlKT196NU96YVFaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjU3My9BOTBFRDMyNjEyOUExMUVCOTU5MzlGMzBDNEY5QUUwMi82RWZlclZ3UDdV
bmpPanRpSk9fejVPemFRWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO118udDyoYlPmybAV1P3h8GPOpZ0G35m8SHwB6TzxDB2tSD3dvG1L
w2AuVCpjPlg8Dt1hUolMqMCCjiMiXMldhB3/eXlO4YcqAY3B+RMV1iTdGsbEdJOh
i+FgOu1biqWhqlr9XHcqe3ClKf+jZ7v2I2OIGpmTmkYCEgzvmCqQYx6/EmbVB/ae
9VFUfJi+H1M+w1zdCVvs4ID6Up3llxU3LzQoE2cSmXU+ovwIz/fb6pLPmwZhxHgk
jgZb0jlAISSRtjzYfWZP1jOD/+geozhncdoNpNH4PK8SRXIK0RYE1nF+MiztF+Of
UCzcPg1WYImyc7SvOs9VkCFOWhZTAZ6K
-----END CERTIFICATE-----
Generated at Fri May 16 13:54:39 2025 by rpki-client