Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File:                     mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier:          JJoVLKRNz1YBEVMT7pTz13+U74sJLHQCRZNiSM4aZZA=
Subject key identifier:   9E:D4:6C:57:44:FF:86:62:EC:B4:99:1C:A5:17:AD:69:AD:39:B7:73
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer:       /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number:          4B
Signing time:             Fri 13 Jun 2025 06:14:51 +0000
Manifest this update:     Fri 13 Jun 2025 06:14:50 +0000
Manifest next update:     Fri 20 Jun 2025 06:14:50 +0000
Files and hashes:         1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: aVWj9xzjhhUB1J6wx0+UcnWLD4mWyIGrlH/0s5x//kc=)
                          2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
        Validity
            Not Before: Jun 13 06:14:50 2025 GMT
            Not After : Jun 20 06:14:50 2025 GMT
        Subject: CN=684bc1da-8e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:e9:93:15:fb:b0:47:1a:42:bb:2f:7e:62:
                    0d:5d:ab:25:58:a6:f2:be:84:62:b0:52:ad:29:58:
                    ff:00:63:7c:0e:88:3f:e7:2d:e3:2c:13:f8:f6:c7:
                    e9:4d:17:54:e6:fd:42:d8:ba:ba:b5:b6:ba:77:8f:
                    cc:6a:54:bb:3e:b8:e2:31:62:45:5d:02:be:14:d0:
                    b3:54:68:c9:b3:95:83:ae:85:de:8c:20:15:63:bf:
                    a5:6b:ab:d9:db:33:b4:99:20:5a:99:32:2d:91:6b:
                    90:f3:18:3a:e8:68:20:e9:9e:61:45:d0:f6:b2:1a:
                    77:ae:5b:16:e2:cf:78:5a:d3:65:4a:d4:e0:2f:d0:
                    c7:3f:03:c4:e3:67:88:b2:21:53:ea:eb:85:52:c8:
                    5c:81:de:df:80:d2:74:5e:0a:83:05:1a:68:5c:03:
                    05:a9:1a:08:5f:04:39:a4:e5:1b:c3:65:8d:03:ba:
                    1c:c6:0c:28:00:e0:7d:a9:fc:89:f5:ae:49:b9:cf:
                    e3:97:24:38:4b:c9:60:37:20:3d:c9:bc:f2:61:b2:
                    b5:29:19:cf:92:3e:6a:a0:2a:55:02:21:cb:90:50:
                    e3:c9:85:45:d4:e0:b9:6e:e0:2a:39:59:31:74:dc:
                    b9:9e:1a:2e:a0:23:d7:fb:ae:5a:0a:86:b6:c9:b9:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:6C:57:44:FF:86:62:EC:B4:99:1C:A5:17:AD:69:AD:39:B7:73
            X509v3 Authority Key Identifier:
                keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:42:86:2e:05:d7:da:23:b3:b9:c5:2b:08:07:4f:9d:bd:
         a1:4d:a0:0d:86:1c:7b:41:2c:bd:b4:3e:d7:02:80:31:ff:b1:
         63:47:f6:1f:87:bf:a7:bb:bc:5a:61:4c:4b:70:30:bf:2e:3e:
         0c:1b:3e:b9:af:ab:79:42:e0:c7:68:76:8a:ac:43:fc:d5:a0:
         40:92:a4:d0:57:8c:42:30:db:0b:b2:23:78:7f:f0:76:51:15:
         4c:9c:96:46:b5:34:28:26:bd:37:f4:57:7d:25:05:27:0a:ce:
         b1:3b:57:22:73:f8:bc:00:eb:89:39:75:40:f0:21:b0:4d:8f:
         ac:e6:34:80:02:88:43:45:c2:37:10:24:b6:83:7a:56:ed:0a:
         8d:0b:ad:d6:1d:a4:d4:77:3d:29:92:dc:5d:25:4a:1b:22:06:
         fe:09:a5:7b:dc:5f:c1:e1:67:8b:a4:bd:90:ad:18:33:6f:f3:
         2e:af:92:22:b7:90:2d:c3:70:ee:17:f9:dc:1c:b7:25:0e:21:
         aa:6d:36:a0:31:81:78:07:b0:30:ab:0e:93:92:fa:b5:e6:19:
         a7:f2:e2:13:c7:57:42:a8:96:a5:bd:08:59:2c:92:8c:67:f9:
         17:33:c6:c3:91:ec:71:23:ac:0f:61:cd:ad:84:7d:1e:e8:c5:
         5b:e3:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:21:15 2025 by rpki-client