Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File:                     cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier:          pzp1tuSWZo6UjEwUngQGX1/sbBFZ6A3ak9Pmd4a2uno=
Subject key identifier:   DD:91:B6:AF:33:6A:9C:5A:C8:46:C6:82:91:B8:AE:05:EB:C2:0F:3D
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer:       /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number:          1F56
Signing time:             Sat 14 Jun 2025 16:02:46 +0000
Manifest this update:     Sat 14 Jun 2025 16:02:46 +0000
Manifest next update:     Sat 21 Jun 2025 16:02:46 +0000
Files and hashes:         1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: /w8k3jeccTgDkbsYOIwoXBVQMMQIOnFfTcKywj5kPS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
                          rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
        Validity
            Not Before: Jun 14 16:02:46 2025 GMT
            Not After : Jun 21 16:02:46 2025 GMT
        Subject: CN=684d9d26-8a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:ec:fb:38:b8:3d:e1:ae:45:5c:80:1d:40:
                    b8:02:47:32:62:2f:c3:fd:91:9c:56:e7:f0:9a:a7:
                    8b:e7:d6:19:d6:1c:ea:50:92:c8:bb:cc:ba:b4:b4:
                    04:9d:fd:d0:65:88:c5:c7:68:76:60:3e:d4:a5:d9:
                    32:f0:28:2f:0d:25:6e:1a:e6:35:70:9d:fd:02:b5:
                    e1:77:7e:9d:cc:07:2d:b5:4a:8d:9a:ec:93:5e:9c:
                    66:23:72:74:9a:7c:cf:43:34:c4:7b:fc:b0:4d:29:
                    00:ad:e8:0f:c3:9d:aa:a1:8a:03:6e:8a:c2:23:51:
                    27:08:83:61:31:ff:e1:d0:e3:5b:0c:e4:f0:cc:73:
                    8d:0b:3f:56:f8:69:e6:bd:68:0f:9f:de:58:1e:d7:
                    7c:6c:3b:f7:3c:c5:01:d8:5e:f7:2e:1c:50:43:fe:
                    b8:04:16:4b:1a:5e:61:56:b7:5b:66:34:a9:e6:56:
                    04:17:20:fd:5f:8d:e7:6f:eb:47:61:43:f4:1a:02:
                    6d:5c:5d:f8:2b:7e:09:19:7d:6d:8b:76:c2:e9:51:
                    f3:e1:91:42:e5:90:72:29:b2:27:c4:c1:80:c9:cc:
                    3f:e0:4b:8e:3b:80:49:f6:66:04:e6:d3:bf:e9:4d:
                    4b:d0:34:ca:bf:ea:f8:e2:36:86:0d:12:56:d7:9f:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:B6:AF:33:6A:9C:5A:C8:46:C6:82:91:B8:AE:05:EB:C2:0F:3D
            X509v3 Authority Key Identifier:
                keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:73:e6:a9:91:5a:78:57:2a:5b:40:90:a3:be:2d:c2:c3:
         ca:e8:b5:fd:95:02:6a:3e:8d:cf:2d:78:c2:f2:6a:f2:c6:a7:
         ee:dc:d4:f0:07:f2:e2:c7:ac:e6:11:45:c8:84:ef:09:64:79:
         4e:0d:eb:99:5b:50:e0:3b:4e:ae:3c:0a:5c:b1:8e:f6:b8:68:
         18:96:dc:5d:f8:de:c3:7c:68:ca:e1:a6:e1:91:02:39:74:0f:
         1f:cf:b8:c0:4b:47:81:84:9d:9c:63:3c:eb:dd:15:08:f9:d8:
         cd:06:6f:14:04:1c:0a:05:e3:22:a6:84:97:fe:61:50:bd:99:
         de:26:80:1d:6b:46:95:c9:f1:11:65:42:60:f7:e6:f5:0f:b8:
         d5:db:a6:86:de:84:01:79:a7:b7:21:41:e2:c2:40:81:93:c2:
         67:cd:20:de:5a:18:dc:14:62:15:c0:ec:5c:0b:1c:e8:6e:2d:
         e9:65:b0:44:03:a3:98:8f:1c:ab:94:4f:dd:ac:e4:89:23:25:
         d0:a9:98:48:0b:91:f5:51:96:73:c0:05:b8:51:56:e0:a8:1b:
         c4:d9:64:1b:b5:45:a2:fb:e4:bb:e3:43:3b:6c:fa:0e:de:e2:
         32:c4:47:68:3d:ea:d1:16:d7:f4:b2:61:f1:43:5d:1c:01:78:
         3c:aa:54:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG
OEI5RTAyMEUwHhcNMjUwNjE0MTYwMjQ2WhcNMjUwNjIxMTYwMjQ2WjAYMRYwFAYD
VQQDEw02ODRkOWQyNi04YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx77s+zi4PeGuRVyAHUC4AkcyYi/D/ZGcVufwmqeL59YZ1hzqUJLIu8y6tLQE
nf3QZYjFx2h2YD7Updky8CgvDSVuGuY1cJ39ArXhd36dzActtUqNmuyTXpxmI3J0
mnzPQzTEe/ywTSkAregPw52qoYoDborCI1EnCINhMf/h0ONbDOTwzHONCz9W+Gnm
vWgPn95YHtd8bDv3PMUB2F73LhxQQ/64BBZLGl5hVrdbZjSp5lYEFyD9X43nb+tH
YUP0GgJtXF34K34JGX1ti3bC6VHz4ZFC5ZByKbInxMGAycw/4EuOO4BJ9mYE5tO/
6U1L0DTKv+r44jaGDRJW159RrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2Rtq8z
apxayEbGgpG4rgXrwg89MB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0
QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ
aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAK+3PmqZFaeFcqW0CQo74twsPK6LX9lQJqPo3PLXjC8mryxqfu3NTw
B/Lix6zmEUXIhO8JZHlODeuZW1DgO06uPApcsY72uGgYltxd+N7DfGjK4abhkQI5
dA8fz7jAS0eBhJ2cYzzr3RUI+djNBm8UBBwKBeMipoSX/mFQvZneJoAda0aVyfER
ZUJg9+b1D7jV26aG3oQBeae3IUHiwkCBk8JnzSDeWhjcFGIVwOxcCxzobi3pZbBE
A6OYjxyrlE/drOSJIyXQqZhIC5H1UZZzwAW4UVbgqBvE2WQbtUWi++S740M7bPoO
3uIyxEdoPerRFtf0smHxQ10cAXg8qlSx
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:50:14 2025 by rpki-client