Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File:                     8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier:          cWGAGVNQxwAOKV1Hv85ZoefwxufFU3++yjJqF9rKmEQ=
Subject key identifier:   8F:7C:40:C4:3F:0A:78:D8:89:B6:10:4E:FE:1E:91:A9:58:10:06:E1
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer:       /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial:       3488
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number:          3488
Signing time:             Sat 14 Jun 2025 15:10:05 +0000
Manifest this update:     Sat 14 Jun 2025 15:10:05 +0000
Manifest next update:     Sat 21 Jun 2025 15:10:05 +0000
Files and hashes:         1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: FpCbIRp6dd8lfxysDh6ClnlEw8UPq+OXXD74mQRJsxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
                          rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13448 (0x3488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
        Validity
            Not Before: Jun 14 15:10:05 2025 GMT
            Not After : Jun 21 15:10:05 2025 GMT
        Subject: CN=684d90cd-7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:16:24:26:18:45:e5:c6:73:e7:bb:c0:fc:
                    be:c8:c6:78:08:87:73:d5:a2:39:53:20:e9:21:73:
                    3e:bd:ab:ff:7c:ac:21:f1:12:6f:c5:96:1b:d7:d3:
                    68:c7:b6:a8:35:db:48:68:99:45:3a:67:7b:13:4a:
                    55:99:9a:c1:e9:fa:4a:77:b0:2f:10:6b:fa:85:94:
                    eb:a4:ae:ea:8d:eb:ed:1e:68:bf:69:25:d5:3e:01:
                    d5:ca:8c:85:b6:6f:12:33:7c:5e:7d:c4:89:da:43:
                    d0:cd:ee:b7:05:0e:42:ba:fc:1d:fd:e6:1e:e0:77:
                    45:4d:0c:61:2b:1c:32:a6:c8:6c:f8:71:f1:f5:98:
                    05:a7:6b:cd:e5:b6:8e:c7:d9:58:72:81:c9:9e:dc:
                    09:cb:2c:8b:d8:77:2c:cb:fa:86:37:36:0f:ff:51:
                    8c:b0:d4:2c:ef:3e:3b:d3:f6:22:29:ab:89:6c:43:
                    2c:3d:2f:14:51:91:04:af:ff:17:9b:18:a0:00:e2:
                    da:55:80:3f:be:c0:81:e9:ee:00:ae:37:b7:99:36:
                    f1:12:c1:d0:85:00:9c:a7:05:73:19:07:f5:5a:e4:
                    95:ad:6c:b6:d7:d8:2e:ca:9e:3a:66:f8:ae:7b:d4:
                    f2:cb:7a:86:fa:76:71:3b:49:e2:54:cc:38:5c:7e:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:40:C4:3F:0A:78:D8:89:B6:10:4E:FE:1E:91:A9:58:10:06:E1
            X509v3 Authority Key Identifier:
                keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:50:f7:6d:a2:cd:48:1d:13:12:e3:0c:b9:99:37:4f:f9:
         e9:91:e1:08:fb:65:b9:58:a1:bf:0a:0b:73:b3:d4:50:f5:b9:
         fa:31:c5:cc:9b:d1:6d:54:15:e1:82:52:8d:b2:07:15:ec:99:
         4e:05:70:a3:7e:e4:06:2b:88:f9:e0:6d:62:f2:9a:c0:94:59:
         99:a7:e6:20:88:2b:10:27:90:a8:74:01:58:fc:11:4a:6f:46:
         92:04:89:cc:71:ed:87:d5:8e:b9:ec:5f:bd:8b:95:41:38:4c:
         8b:37:a6:cd:f8:13:ef:dd:af:f1:f3:62:aa:0c:0e:e1:de:53:
         64:17:33:a6:dd:c2:fc:5a:b2:a7:3c:df:65:86:f7:05:9c:5f:
         da:c7:41:45:54:9e:d8:14:2b:bb:3d:82:2f:69:30:34:2a:c1:
         fd:66:d9:10:e8:ac:32:1a:fa:60:06:cd:dc:a6:26:e6:97:43:
         9f:03:3f:fd:db:67:66:cf:27:90:34:5f:e8:a2:f4:46:e1:32:
         28:91:03:33:35:74:3f:c7:71:f9:7d:dd:10:1f:05:09:76:ba:
         73:d8:94:e1:ab:2a:a2:39:a5:09:0e:f6:6e:33:e5:f7:ee:d5:
         6a:ba:9e:c0:a1:5b:47:8f:5c:dd:bc:fb:a0:d4:7d:e3:bf:5e:
         5f:0d:9f:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF
NTE5RjNEMDAwHhcNMjUwNjE0MTUxMDA1WhcNMjUwNjIxMTUxMDA1WjAYMRYwFAYD
VQQDEw02ODRkOTBjZC03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw38WJCYYReXGc+e7wPy+yMZ4CIdz1aI5UyDpIXM+vav/fKwh8RJvxZYb19No
x7aoNdtIaJlFOmd7E0pVmZrB6fpKd7AvEGv6hZTrpK7qjevtHmi/aSXVPgHVyoyF
tm8SM3xefcSJ2kPQze63BQ5Cuvwd/eYe4HdFTQxhKxwypshs+HHx9ZgFp2vN5baO
x9lYcoHJntwJyyyL2Hcsy/qGNzYP/1GMsNQs7z470/YiKauJbEMsPS8UUZEEr/8X
mxigAOLaVYA/vsCB6e4Arje3mTbxEsHQhQCcpwVzGQf1WuSVrWy219guyp46Zviu
e9Tyy3qG+nZxO0niVMw4XH4tDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI98QMQ/
CnjYibYQTv4ekalYEAbhMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE
QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v
bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAa8VD3baLNSB0TEuMMuZk3T/npkeEI+2W5WKG/Cgtzs9RQ9bn6McXM
m9FtVBXhglKNsgcV7JlOBXCjfuQGK4j54G1i8prAlFmZp+YgiCsQJ5CodAFY/BFK
b0aSBInMce2H1Y657F+9i5VBOEyLN6bN+BPv3a/x82KqDA7h3lNkFzOm3cL8WrKn
PN9lhvcFnF/ax0FFVJ7YFCu7PYIvaTA0KsH9ZtkQ6KwyGvpgBs3cpibml0OfAz/9
22dmzyeQNF/oovRG4TIokQMzNXQ/x3H5fd0QHwUJdrpz2JThqyqiOaUJDvZuM+X3
7tVqup7AoVtHj1zdvPug1H3jv15fDZ+Q
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:13:27 2025 by rpki-client