Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
File:                     3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json)
Hash identifier:          OOfw5oFy8udKCevaW52NVlXPqzipRyPDUUGH6MGu1iU=
Subject key identifier:   49:CC:EF:D1:CD:A2:7E:F8:8F:CA:08:FC:A2:E9:33:77:7D:0B:70:67
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Certificate issuer:       /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial:       0802
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
Manifest number:          07EF
Signing time:             Sat 14 Jun 2025 20:46:46 +0000
Manifest this update:     Sat 14 Jun 2025 20:46:46 +0000
Manifest next update:     Sat 21 Jun 2025 20:46:46 +0000
Files and hashes:         1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: wYy+BBIhv+azmZS0XUhb6Pik8XQB4UThqykJHH2qB44=)
                          2: 187415DE3E6F11EEA236AD17C4F9AE02.roa (hash: oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=)
                          3: 39DE80CE3E6F11EEA7233D2CC4F9AE02.roa (hash: 47zwqpP9eAhOCqvzUy9fMqxxS+0iNoZWW8K5tbmry+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
                          rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
        Validity
            Not Before: Jun 14 20:46:46 2025 GMT
            Not After : Jun 21 20:46:46 2025 GMT
        Subject: CN=684ddfb6-d22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:cb:14:63:2e:8d:a7:c7:d2:d1:7d:f1:e4:
                    c6:89:e2:58:2d:14:56:63:12:24:3d:5a:1d:a4:1f:
                    24:f9:8c:5e:b1:38:8a:9c:98:02:bd:08:f0:bf:2d:
                    11:75:a5:bd:d3:9e:86:0e:d9:18:f9:fd:dc:b0:b5:
                    32:96:99:f6:e2:9c:42:60:89:fc:c6:e3:69:01:9f:
                    86:b7:83:04:ba:d4:a5:d8:ec:4d:ad:2d:15:31:86:
                    44:58:41:8c:52:75:9f:3f:ab:4b:30:56:1e:00:c5:
                    6a:1c:de:cf:27:bf:11:21:cc:6f:76:ff:36:d6:a0:
                    10:9a:4a:b3:d5:6b:1d:c4:98:6b:cd:17:54:39:ef:
                    0e:6f:4f:dc:f0:4c:5c:6f:f1:d2:c5:8f:e8:5f:0c:
                    15:12:8f:6a:8f:dd:35:5d:5d:10:3f:6e:82:d5:5a:
                    b9:8c:bb:3d:eb:0e:be:dd:d1:81:1d:c0:10:52:f0:
                    57:b1:11:c8:e7:62:1c:a9:e6:6b:00:ba:75:c2:55:
                    a5:dc:bd:b7:34:36:3c:57:eb:39:ee:f5:87:da:57:
                    11:5c:9f:f4:4c:1b:07:04:20:58:b1:8c:b4:e4:71:
                    36:59:1b:10:dd:1a:47:ea:10:54:01:c1:a8:34:cf:
                    27:80:9d:d8:d4:08:b8:36:24:03:66:cc:cd:7c:59:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:EF:D1:CD:A2:7E:F8:8F:CA:08:FC:A2:E9:33:77:7D:0B:70:67
            X509v3 Authority Key Identifier:
                keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:26:dd:ec:71:50:af:9a:fa:da:cb:7b:cd:10:29:df:53:cc:
         ed:89:a7:85:14:22:29:b1:1a:86:70:28:ef:e6:24:7e:3a:14:
         de:2f:9b:a1:b4:0f:e7:d4:06:12:3c:f2:70:9a:f9:f8:28:34:
         75:66:80:17:4d:e9:4e:6a:5b:76:2e:49:53:04:d2:8b:90:55:
         85:be:45:c4:37:dd:45:30:e3:19:94:65:81:4c:09:0d:71:c9:
         1f:42:e1:e9:e1:c7:e6:25:87:c4:81:2f:0b:9b:b9:17:26:12:
         0b:26:13:ea:64:94:92:a1:9f:53:71:f5:0e:33:09:ed:69:53:
         16:80:43:a6:bb:ce:61:72:00:48:ff:92:e4:9f:50:b6:32:fd:
         35:a3:e5:d9:1b:c9:cc:2f:68:ee:a9:68:ad:29:17:79:b0:93:
         53:12:8f:0f:a6:29:15:fb:90:25:07:3c:72:68:9e:1e:b9:eb:
         28:5e:03:c3:a5:c5:75:97:fa:fc:3a:30:8e:68:53:54:f7:4e:
         d0:b8:46:35:4a:08:1b:4c:39:1f:e6:ff:45:a7:ef:50:58:a8:
         94:e1:e2:70:54:0b:02:37:bc:b4:ac:eb:95:83:33:73:7f:88:
         4f:7f:0e:9e:4a:56:9e:b3:f4:27:3f:96:9c:73:b1:58:59:4f:
         81:be:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:10 2025 by rpki-client