Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
File:                     9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json)
Hash identifier:          qFG2FZGtq8JlgH7NtuXTeE+6whJIHrMocoKWFcwXUcQ=
Subject key identifier:   F8:BE:A3:44:D3:6B:7B:C3:E3:DA:69:31:29:88:7F:CD:62:24:80:4A
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Certificate issuer:       /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
Manifest number:          E0
Signing time:             Tue 17 Jun 2025 04:28:49 +0000
Manifest this update:     Tue 17 Jun 2025 04:28:48 +0000
Manifest next update:     Tue 24 Jun 2025 04:28:48 +0000
Files and hashes:         1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: w0nZmvzAHhNcdvJfBtsdb4Z3hnRjSzzQCgkL3bGwvOo=)
                          2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: L/NVWM+Df+GwuQqnyYWtlVp/5U+iQmr8G8cxiRiESFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
                          rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 04:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
        Validity
            Not Before: Jun 17 04:28:48 2025 GMT
            Not After : Jun 24 04:28:48 2025 GMT
        Subject: CN=6850ef00-5be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fe:a1:f5:22:3a:62:d8:ee:04:13:bc:28:02:
                    e7:bd:4d:75:6c:06:34:7d:e2:e9:a8:8e:c4:33:d5:
                    b5:5c:d0:67:6f:53:13:99:01:0c:9e:19:f4:33:12:
                    4d:5c:d8:bc:dc:b1:2c:e3:81:1e:4a:85:23:68:e6:
                    1a:8d:1c:f8:45:42:25:f5:cb:ea:95:bf:41:93:64:
                    f2:32:94:b5:d2:69:7c:fb:61:37:99:2e:1f:de:f8:
                    37:18:06:18:35:da:07:a0:e4:6c:24:f6:ad:be:17:
                    71:36:68:2a:49:ea:3b:00:d4:1f:64:0c:ac:06:cb:
                    fb:41:f1:7b:72:53:8e:63:ab:1d:71:38:31:0f:51:
                    32:d0:1c:90:be:74:af:29:7c:dc:a7:d9:1d:f2:4b:
                    ef:82:a5:f0:ba:cb:84:75:18:14:da:1f:05:47:73:
                    bd:f2:41:df:10:ee:5d:36:1c:6f:af:1f:8c:3f:2d:
                    b7:c7:64:60:fe:e2:ef:fc:67:a3:80:7c:08:af:a8:
                    0f:0c:8b:1e:a8:15:2d:3e:8a:40:66:b6:69:cc:7a:
                    9c:f8:ab:de:4d:95:3a:77:9e:83:4a:e3:33:1e:f4:
                    06:da:b0:cb:f4:96:23:8b:55:7a:c0:6e:82:96:13:
                    7a:b7:05:ae:81:75:5a:b8:98:76:22:5e:64:d0:e4:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:A3:44:D3:6B:7B:C3:E3:DA:69:31:29:88:7F:CD:62:24:80:4A
            X509v3 Authority Key Identifier:
                keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:2c:b4:f6:30:5d:1a:7e:c3:90:6e:54:8a:70:be:bc:07:
         90:68:0b:de:33:5e:2b:96:6f:16:3a:04:ac:eb:da:1a:43:0c:
         6e:ad:fb:ee:bc:f4:9f:1b:e7:49:3a:a0:0c:40:6b:3e:67:25:
         19:82:ab:32:5a:d4:0f:a4:49:62:70:bc:bd:3b:e9:18:c5:ff:
         0d:0a:73:f6:12:e7:73:f4:c7:3b:b5:4c:77:37:15:8b:ed:bb:
         a1:10:3b:05:e9:09:49:0a:14:b7:8f:3f:6f:59:41:3e:be:5f:
         b0:25:da:7c:0a:14:c7:8a:be:0c:f2:dc:0c:16:c7:68:d7:5b:
         ee:97:5a:65:13:9a:1c:ab:7f:78:fe:08:a2:eb:80:42:07:1d:
         c6:b4:b8:9f:bb:9f:da:bd:f7:6e:c3:e7:e8:f7:d7:a3:82:6b:
         cd:db:aa:22:8b:4e:eb:4c:7c:4d:7f:17:ee:c3:cb:68:1c:76:
         84:9e:66:d3:0e:d5:e4:6e:53:dc:66:9a:d3:17:8a:65:53:6c:
         c6:1f:1c:c4:d0:45:c9:c3:7d:6d:3e:f3:18:a8:da:db:c6:93:
         2a:b5:f5:5b:2c:75:ec:fd:25:d6:34:bf:1a:8f:b6:28:6b:50:
         1c:39:b7:84:3f:32:a1:52:dc:38:b4:79:df:ac:b5:5c:ac:4f:
         e6:06:ea:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy
QThERjgwM0IwHhcNMjUwNjE3MDQyODQ4WhcNMjUwNjI0MDQyODQ4WjAYMRYwFAYD
VQQDEw02ODUwZWYwMC01YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9f6h9SI6YtjuBBO8KALnvU11bAY0feLpqI7EM9W1XNBnb1MTmQEMnhn0MxJN
XNi83LEs44EeSoUjaOYajRz4RUIl9cvqlb9Bk2TyMpS10ml8+2E3mS4f3vg3GAYY
NdoHoORsJPatvhdxNmgqSeo7ANQfZAysBsv7QfF7clOOY6sdcTgxD1Ey0ByQvnSv
KXzcp9kd8kvvgqXwusuEdRgU2h8FR3O98kHfEO5dNhxvrx+MPy23x2Rg/uLv/Gej
gHwIr6gPDIseqBUtPopAZrZpzHqc+KveTZU6d56DSuMzHvQG2rDL9JYji1V6wG6C
lhN6twWugXVauJh2Il5k0OTc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi+o0TT
a3vD49ppMSmIf81iJIBKMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2
NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx
cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkDSy09jBdGn7DkG5UinC+vAeQaAveM14rlm8WOgSs69oaQwxurfvu
vPSfG+dJOqAMQGs+ZyUZgqsyWtQPpElicLy9O+kYxf8NCnP2Eudz9Mc7tUx3NxWL
7buhEDsF6QlJChS3jz9vWUE+vl+wJdp8ChTHir4M8twMFsdo11vul1plE5ocq394
/gii64BCBx3GtLifu5/avfduw+fo99ejgmvN26oii07rTHxNfxfuw8toHHaEnmbT
DtXkblPcZprTF4plU2zGHxzE0EXJw31tPvMYqNrbxpMqtfVbLHXs/SXWNL8aj7Yo
a1AcObeEPzKhUtw4tHnfrLVcrE/mBupf
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:01:11 2025 by rpki-client