Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier:          M8yRzAcgPMUG0vCJDN5h21iME6riL4uqTCinD+ZiBV0=
Subject key identifier:   76:1D:EA:77:6A:11:A2:82:BF:11:A7:6B:7A:00:3D:74:5D:71:30:36
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number:          F0
Signing time:             Fri 25 Apr 2025 04:24:30 +0000
Manifest this update:     Fri 25 Apr 2025 04:24:30 +0000
Manifest next update:     Fri 02 May 2025 04:24:30 +0000
Files and hashes:         1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: xJtaC0jWc0vbPBBmBLBHbwBqdEshBbXkcojldRatfys=)
                          2: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: SDRPwzoZ0Rhe4jtkG3pcG+5QwBQoYK+SqShzeOhWbsI=)
                          3: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: T9OAvqcKR2Vcyhqmt37QjmwF8bQbuv/XSOzyEwce7MA=)
                          4: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: yOwmDYo/6Tqm/tPpcXeo8/c68zUTxd3wLfwfrL3ucVQ=)
                          5: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TcxR5GasmaKH6rGfRvY0IoCldVHXhPAOZAWVkfzaYfo=)
                          6: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: 6NgK+nGcOvONOsxU4FAtDZCrjoU00hf/yGyPQJumcEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Apr 25 04:24:30 2025 GMT
            Not After : May  2 04:24:30 2025 GMT
        Subject: CN=680b0e7e-18e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:25:1f:9c:59:7b:bc:47:04:3b:5b:78:65:
                    c3:8e:f9:88:42:ae:58:ba:58:6b:6e:76:50:c1:cb:
                    88:59:d9:49:02:ae:75:90:94:53:3c:1e:3f:a7:62:
                    ab:b4:46:00:40:ea:dc:c8:df:10:a9:e4:74:5e:eb:
                    73:26:8a:95:d8:55:94:57:c1:7e:c5:73:b9:9b:ae:
                    94:6b:31:19:f7:5f:9f:47:c0:7b:c1:ae:a5:e8:77:
                    62:5e:b1:de:6f:73:48:44:0c:2b:c6:5a:d3:ce:63:
                    ce:a6:66:40:28:7f:9a:bb:6f:5e:6c:4e:83:af:84:
                    a0:96:e6:70:e7:7b:29:6b:73:b6:aa:27:68:d7:f9:
                    fa:58:a8:ac:b7:04:9b:b7:5e:91:0a:a1:b9:44:98:
                    9b:5a:c7:98:40:2e:5b:70:03:3f:b0:ba:1b:f6:1c:
                    ec:38:aa:f5:96:16:66:38:4b:ba:d3:9a:32:0e:6a:
                    17:7c:c1:9b:43:a0:29:d3:1c:dd:07:15:15:94:98:
                    09:8a:c1:b8:6d:3a:5e:c9:e3:ad:a0:16:5a:4a:6f:
                    7a:e0:8a:a2:5b:8f:07:8b:d8:4d:c6:f1:6f:69:35:
                    90:0a:31:27:e3:12:09:fd:9e:e4:13:01:7f:77:a0:
                    79:d3:71:5f:a6:e5:7c:cd:4e:9a:ea:b6:6f:a1:44:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:EA:77:6A:11:A2:82:BF:11:A7:6B:7A:00:3D:74:5D:71:30:36
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:cc:1d:8e:bb:a8:14:23:15:12:22:5e:bb:26:7f:71:8e:
         64:dd:0d:42:aa:4b:85:07:05:71:6b:18:8b:2b:ed:4e:82:26:
         2b:92:af:a1:eb:2c:4a:30:1b:9a:8f:7b:71:a7:97:a5:5d:4b:
         4f:b1:a7:9d:99:29:72:09:17:34:36:18:ab:de:fa:19:e1:79:
         f2:bf:82:c1:19:56:b2:95:89:4f:34:a7:1f:f4:68:5a:01:cb:
         7f:7a:35:58:3b:1e:e4:1b:9d:14:0c:73:7f:15:b8:a5:95:7b:
         c8:d3:6c:e9:bf:5f:9e:d2:86:bf:21:b0:7b:e0:f1:ab:f8:e4:
         d5:4c:6f:35:6b:b5:3b:11:7f:50:69:a7:96:30:ef:62:ba:85:
         ec:bd:a1:0a:34:1d:8c:bd:30:95:d4:c7:55:1d:37:52:58:93:
         e9:2c:5b:8c:97:ff:d4:33:c1:3b:10:2a:b9:64:75:11:f0:5d:
         e9:67:a4:68:c9:be:c3:db:23:c5:c4:8c:a9:74:71:e0:e1:ec:
         23:7c:01:12:35:84:9f:10:1b:e9:9f:f0:b2:43:3f:47:02:1d:
         29:c2:b5:fa:36:00:4e:1b:68:9e:cc:ba:3e:12:e8:55:ce:e1:
         09:db:1e:c4:ff:66:4f:2d:3c:9c:90:ab:9a:92:2e:7b:ea:16:
         93:9d:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:36:49 2025 by rpki-client