Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          ZNjBPRzTjZhs0UCvZuL4ImYF6E3Q3pzJj8NdTvC2ZpA=
Subject key identifier:   13:6E:02:48:02:F1:7E:99:F0:C1:3D:83:7C:22:A1:9A:92:A6:81:95
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          77
Signing time:             Thu 19 Jun 2025 04:03:11 +0000
Manifest this update:     Thu 19 Jun 2025 04:03:10 +0000
Manifest next update:     Thu 26 Jun 2025 04:03:10 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: eHXnj2NuVd21t/DKZL94FQF9njJ8DItNWpCSdnahDD8=)
                          2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=)
                          3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Jun 19 04:03:10 2025 GMT
            Not After : Jun 26 04:03:10 2025 GMT
        Subject: CN=68538bff-0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:c0:f1:b2:b1:43:1e:e3:61:3b:37:ac:fa:
                    c7:e7:20:c2:7e:76:ed:5d:d7:d1:75:09:4d:0f:b0:
                    ef:40:6c:28:1e:af:ec:1e:98:ab:d4:4c:5b:e6:ee:
                    46:bd:1c:20:1f:a8:d9:c1:d6:de:0e:a8:3e:3e:d1:
                    d5:64:09:ea:62:21:75:30:27:24:fd:61:86:da:b0:
                    95:65:9f:6a:63:23:6d:16:3b:3a:87:72:18:8a:8e:
                    98:87:98:7a:d2:9d:40:70:bb:05:37:c7:1b:21:db:
                    47:ea:fa:bf:18:3f:ce:f7:99:08:14:8c:ac:b5:de:
                    11:ca:15:4e:26:39:c0:98:4f:d2:d9:e9:e1:b6:4a:
                    e0:2a:26:c0:a5:12:24:e3:cf:ac:8e:49:4c:44:52:
                    44:63:60:89:b9:20:f2:3d:af:8a:fe:e1:a0:99:ba:
                    8b:2d:4f:b1:e0:89:c2:32:c0:32:3e:76:59:7f:b5:
                    57:a3:dc:51:29:5c:f1:8b:4b:1c:38:e2:0b:a6:9d:
                    09:b8:94:0c:30:f3:ed:e0:58:7b:a1:1a:17:71:21:
                    36:9a:5d:4b:53:79:a0:4a:ac:ce:c2:41:9d:cf:26:
                    42:05:86:2c:e6:78:7a:d2:4e:58:17:8a:56:44:10:
                    9a:dd:93:43:0f:d7:6c:37:f3:b8:69:3f:c7:f5:98:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:02:48:02:F1:7E:99:F0:C1:3D:83:7C:22:A1:9A:92:A6:81:95
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c1:7d:29:44:9b:75:33:97:c0:91:b8:67:a8:c6:9b:41:ac:
         d4:c4:64:b1:5d:64:76:df:f2:59:56:42:35:12:ec:e3:1f:b8:
         8a:fe:e2:18:ff:87:ce:e0:3c:ed:a7:d1:c4:ed:8b:2c:27:ba:
         b5:6b:48:c8:63:25:31:10:8c:e8:1a:49:37:af:d1:d7:a8:17:
         51:b1:72:50:62:8b:cb:34:c4:6e:57:92:e2:aa:90:70:2d:f1:
         ce:ba:46:81:dc:ad:32:69:7c:42:3f:d1:37:63:c5:4c:27:31:
         62:48:4a:fc:12:0e:fa:bf:3f:01:b4:f8:08:3c:98:53:37:56:
         27:b6:25:61:7c:67:ef:25:26:72:ab:17:f1:3e:50:59:bb:51:
         25:c8:f1:03:35:40:e3:7f:b8:6e:0d:7b:d0:90:ae:34:e0:51:
         5f:a2:77:1e:67:43:b8:3d:6e:0e:de:18:c6:27:9f:a3:59:ef:
         7e:45:d6:5f:31:d1:05:0b:b3:1d:fe:4a:9d:de:fb:b5:32:8d:
         c8:00:50:be:84:e3:98:56:8c:d2:c2:ec:ab:0e:82:d5:30:64:
         c6:77:be:e0:3f:49:da:ef:46:03:21:d4:af:16:17:4b:9c:e2:
         2e:d7:4e:6b:d2:ce:7a:ba:bb:d3:dd:1f:87:2f:e5:65:01:f5:
         84:f8:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:01:48 2025 by rpki-client