Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File:                     8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier:          UZfMCnAGj43FPovOqew9ACf6QRcKdevICIdU3cL+0co=
Subject key identifier:   C1:1B:A7:DE:89:69:8E:EB:87:C5:EC:9F:8B:32:97:68:86:A2:23:C9
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       0447
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number:          0438
Signing time:             Thu 12 Jun 2025 23:53:42 +0000
Manifest this update:     Thu 12 Jun 2025 23:53:41 +0000
Manifest next update:     Thu 19 Jun 2025 23:53:41 +0000
Files and hashes:         1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: b3tW+QLROvRpoGf5ZAQtlNjNBSan1c+d4QFB8qvkzDU=)
                          2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=)
                          3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=)
                          4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=)
                          5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Jun 12 23:53:41 2025 GMT
            Not After : Jun 19 23:53:41 2025 GMT
        Subject: CN=684b6885-940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:79:18:03:02:39:a3:2b:26:e2:f1:ea:f6:
                    35:09:2c:7b:72:2d:17:95:37:2e:7a:1c:33:b2:83:
                    99:38:72:1d:44:82:ee:79:c2:d4:82:ba:e5:9b:97:
                    78:2d:dc:94:80:34:1c:3d:3e:76:bd:f5:33:39:31:
                    bf:ba:75:e7:ad:80:8f:88:4e:49:5a:b4:bc:7f:c0:
                    10:92:8f:b0:69:6a:f0:04:6f:b5:69:75:20:9a:21:
                    f9:f3:02:6d:13:2c:76:b7:e6:0d:1c:11:29:59:ac:
                    8c:df:b3:23:63:19:31:bb:4d:49:b2:23:33:8e:18:
                    b4:f4:69:71:7a:77:b9:de:5d:d8:fe:ec:f9:d9:1b:
                    82:a6:d1:81:e1:33:b6:f8:63:ad:f2:e4:64:da:f1:
                    f1:b6:76:2c:71:a7:0d:00:85:3e:71:88:ba:be:32:
                    c1:42:21:4d:49:0e:8d:dd:f9:b0:86:fc:35:5c:fe:
                    e0:68:6a:f1:a5:40:f3:41:ad:83:42:7a:36:13:1a:
                    d3:53:b9:30:17:0d:ae:49:23:ae:8c:41:ae:cd:3d:
                    50:9b:42:10:ba:00:a7:6d:58:a3:08:fd:af:a3:cd:
                    c6:b9:26:e2:a9:47:cd:9e:88:95:59:47:4f:54:2f:
                    e5:7b:f3:23:9f:2e:b1:0d:37:bb:88:a8:38:cc:14:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:A7:DE:89:69:8E:EB:87:C5:EC:9F:8B:32:97:68:86:A2:23:C9
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:7e:99:9d:94:b8:92:ff:bd:cf:c6:0b:0c:d4:d6:60:aa:
         5f:f0:9e:ac:0a:11:25:ae:f7:57:14:04:ff:7c:3f:09:6a:4d:
         1f:97:d2:e8:b8:92:78:07:9c:f7:47:93:ea:c4:aa:d4:da:60:
         4f:62:8c:f7:4d:fc:f3:a9:06:aa:d2:d8:3b:e6:37:fa:c9:a3:
         08:9e:a9:f7:a6:a7:01:01:90:96:bd:17:c2:e0:29:8f:68:27:
         fd:7e:63:f5:35:ee:89:2f:2f:f5:90:f2:66:46:c6:ef:36:da:
         e3:47:7a:38:a7:3a:27:69:a7:b0:0b:4d:b8:50:91:4c:bd:f8:
         22:4a:10:81:9f:b9:2e:37:60:d2:a8:2d:fc:7e:e6:48:bb:e2:
         43:b3:83:00:0e:8e:f4:d3:bc:a0:55:57:e5:c0:f1:cb:98:48:
         41:b5:2b:13:3e:b3:2b:f8:59:31:8c:88:c4:8e:2b:77:6f:47:
         6d:6e:ee:b3:da:7d:7e:66:10:4b:4e:03:b7:1e:b0:24:e7:3a:
         61:6a:0c:22:f1:a3:d6:47:0e:19:ee:ea:04:ae:bb:d1:ea:4a:
         a5:f8:c0:50:01:ac:f5:63:7b:01:3b:cc:ce:3e:63:9d:0b:9f:
         b0:39:5c:6a:d2:95:72:90:76:87:6c:d1:09:20:62:ac:cf:ce:
         85:54:91:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD
QUZDMEI4QjEwHhcNMjUwNjEyMjM1MzQxWhcNMjUwNjE5MjM1MzQxWjAYMRYwFAYD
VQQDEw02ODRiNjg4NS05NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwed5GAMCOaMrJuLx6vY1CSx7ci0XlTcuehwzsoOZOHIdRILuecLUgrrlm5d4
LdyUgDQcPT52vfUzOTG/unXnrYCPiE5JWrS8f8AQko+waWrwBG+1aXUgmiH58wJt
Eyx2t+YNHBEpWayM37MjYxkxu01JsiMzjhi09Glxene53l3Y/uz52RuCptGB4TO2
+GOt8uRk2vHxtnYscacNAIU+cYi6vjLBQiFNSQ6N3fmwhvw1XP7gaGrxpUDzQa2D
Qno2ExrTU7kwFw2uSSOujEGuzT1Qm0IQugCnbVijCP2vo83GuSbiqUfNnoiVWUdP
VC/le/Mjny6xDTe7iKg4zBSF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEbp96J
aY7rh8Xsn4syl2iGoiPJMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx
MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ
RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeM36ZnZS4kv+9z8YLDNTWYKpf8J6sChElrvdXFAT/fD8Jak0fl9Lo
uJJ4B5z3R5PqxKrU2mBPYoz3TfzzqQaq0tg75jf6yaMInqn3pqcBAZCWvRfC4CmP
aCf9fmP1Ne6JLy/1kPJmRsbvNtrjR3o4pzonaaewC024UJFMvfgiShCBn7kuN2DS
qC38fuZIu+JDs4MADo7007ygVVflwPHLmEhBtSsTPrMr+FkxjIjEjit3b0dtbu6z
2n1+ZhBLTgO3HrAk5zphagwi8aPWRw4Z7uoErrvR6kql+MBQAaz1Y3sBO8zOPmOd
C5+wOVxq0pVykHaHbNEJIGKsz86FVJFm
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:24:30 2025 by rpki-client