Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          JLPB+rdkDF1hFFATywmm5pFkhZ4//LMEeTH+IinmAO0=
Subject key identifier:   11:45:19:47:C7:96:AB:D0:87:F4:41:21:23:66:74:00:35:34:23:C5
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          024A
Signing time:             Tue 01 Jul 2025 02:33:22 +0000
Manifest this update:     Tue 01 Jul 2025 02:33:22 +0000
Manifest next update:     Tue 08 Jul 2025 02:33:22 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: Zb30GrrMoAMD6PL88AK0iw4317IyVC973bngP/pIHAs=)
                          2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=)
                          3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=)
                          4: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 02:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Jul  1 02:33:22 2025 GMT
            Not After : Jul  8 02:33:22 2025 GMT
        Subject: CN=686348f2-f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:6f:8a:a6:31:1b:de:23:70:5c:4f:e0:31:
                    76:4f:15:f6:57:7d:4a:10:ac:cf:aa:f9:12:03:76:
                    24:bf:ef:d1:fc:4a:8a:22:e0:98:a8:2c:81:86:90:
                    c9:1f:8f:d1:43:50:62:04:c3:27:2e:53:88:0a:8a:
                    86:5b:df:27:50:28:99:6a:38:20:08:91:62:be:65:
                    94:92:39:7a:a1:cd:f7:aa:2a:bf:a0:42:04:ad:72:
                    51:9e:8a:44:e3:a9:4f:8f:4a:32:d0:20:f0:fb:cf:
                    90:c3:a4:82:9b:66:44:5b:a7:6b:4b:73:0c:80:b9:
                    23:20:1b:f6:a7:fa:e6:b6:2e:91:43:c1:65:89:d9:
                    70:0b:5a:cb:86:d4:0e:89:db:b7:dd:67:0e:e4:20:
                    d2:88:01:a0:10:db:bb:f0:77:49:65:da:78:73:b0:
                    bd:bd:84:6e:9b:8a:10:32:c2:96:c3:44:ee:be:29:
                    64:97:0e:4f:0e:02:93:f3:a0:4b:02:60:46:ee:1d:
                    b1:8a:4d:94:12:7f:24:71:7c:48:df:97:ce:7b:69:
                    73:4f:e8:bd:dd:e0:19:29:c4:b0:38:8d:ec:78:14:
                    4f:8d:9a:ca:a6:44:d9:91:66:b2:0a:1a:fa:2e:d1:
                    fa:77:c3:1d:55:8e:f7:84:7d:0c:b2:e9:5d:68:a7:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:19:47:C7:96:AB:D0:87:F4:41:21:23:66:74:00:35:34:23:C5
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:07:50:20:80:7f:ca:f2:2d:ca:ff:da:37:f8:3e:3c:a5:dd:
         0f:c3:d3:67:e4:09:73:dd:62:52:cc:51:5e:15:89:d4:c5:5f:
         87:bb:ac:c9:32:a1:e2:cd:d4:7b:4b:21:dd:65:44:0d:54:47:
         6c:a1:87:5d:61:22:32:b6:e0:61:5c:69:10:99:07:dc:e0:39:
         d3:b1:99:ee:ad:f4:92:55:74:94:0f:86:98:c0:d4:2f:65:20:
         c3:9d:a0:03:01:90:65:8d:6e:99:5c:57:af:cd:b6:2e:91:31:
         af:57:bc:2c:f8:3c:53:69:c7:84:41:f9:e3:48:44:b8:a1:ad:
         b8:a1:91:4a:b8:fc:f0:7f:0c:fa:8a:05:88:8d:0e:fb:03:a3:
         32:ed:fc:0e:d4:87:b2:58:4f:d6:bb:d9:3e:bf:57:3f:00:34:
         bc:58:31:0e:c8:a1:e8:10:7f:df:5f:d0:59:4f:03:2b:6c:d0:
         20:95:d9:25:b7:d2:24:15:93:b5:fb:e7:66:d8:60:32:84:12:
         28:8c:e5:46:ec:14:0b:d2:53:76:57:f5:f5:a3:23:dc:95:75:
         24:d9:fb:b9:9c:33:f9:86:ed:3b:e1:2d:9c:49:ad:29:54:84:
         82:ef:20:7f:eb:9b:ce:5f:b0:1d:58:c9:9a:23:e6:d2:c5:7a:
         95:6c:1b:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjUwNzAxMDIzMzIyWhcNMjUwNzA4MDIzMzIyWjAYMRYwFAYD
VQQDEw02ODYzNDhmMi1mOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxw9viqYxG94jcFxP4DF2TxX2V31KEKzPqvkSA3Ykv+/R/EqKIuCYqCyBhpDJ
H4/RQ1BiBMMnLlOICoqGW98nUCiZajggCJFivmWUkjl6oc33qiq/oEIErXJRnopE
46lPj0oy0CDw+8+Qw6SCm2ZEW6drS3MMgLkjIBv2p/rmti6RQ8FlidlwC1rLhtQO
idu33WcO5CDSiAGgENu78HdJZdp4c7C9vYRum4oQMsKWw0Tuvilklw5PDgKT86BL
AmBG7h2xik2UEn8kcXxI35fOe2lzT+i93eAZKcSwOI3seBRPjZrKpkTZkWayChr6
LtH6d8MdVY73hH0MsuldaKe7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFFGUfH
lqvQh/RBISNmdAA1NCPFMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P
eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIB1AggH/K8i3K/9o3+D48pd0Pw9Nn5Alz3WJSzFFeFYnUxV+Hu6zJ
MqHizdR7SyHdZUQNVEdsoYddYSIytuBhXGkQmQfc4DnTsZnurfSSVXSUD4aYwNQv
ZSDDnaADAZBljW6ZXFevzbYukTGvV7ws+DxTaceEQfnjSES4oa24oZFKuPzwfwz6
igWIjQ77A6My7fwO1IeyWE/Wu9k+v1c/ADS8WDEOyKHoEH/fX9BZTwMrbNAgldkl
t9IkFZO1++dm2GAyhBIojOVG7BQL0lN2V/X1oyPclXUk2fu5nDP5hu074S2cSa0p
VISC7yB/65vOX7AdWMmaI+bSxXqVbBs9
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:35:35 2025 by rpki-client