Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          z1gxuo9fXgnHOUQ4nlVny6g+XG+u/nB+QzYAUm9CyeQ=
Subject key identifier:   57:FF:9E:CF:26:38:95:75:4E:A3:3D:E5:AB:D6:7A:79:A5:E8:C6:17
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       320B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          3108
Signing time:             Fri 20 Jun 2025 15:29:14 +0000
Manifest this update:     Fri 20 Jun 2025 15:29:14 +0000
Manifest next update:     Fri 27 Jun 2025 15:29:14 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: Qey0GbETdM7S72v4wqLNbrCket2qQYCADxOs8wqKf2g=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: TwulzM+3RZ/GzYcJwxi7NbM8YnwM4bU7qCAcss+w2z0=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 15:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12811 (0x320b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Jun 20 15:29:14 2025 GMT
            Not After : Jun 27 15:29:14 2025 GMT
        Subject: CN=68557e4a-691d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:33:11:a8:f6:35:7f:68:cf:63:7e:94:24:
                    ea:91:eb:c6:b2:07:13:60:6b:3e:a7:0f:d6:80:cd:
                    a4:93:46:b8:1c:fc:79:10:dc:79:c2:26:aa:5e:92:
                    fb:fd:9d:53:18:00:98:c2:6e:6b:f7:4d:13:0c:75:
                    ba:0b:61:1c:8e:30:c6:b9:99:5c:82:82:6e:0a:e9:
                    82:76:d7:31:4e:82:14:a9:85:e7:6f:cb:4f:06:e2:
                    d7:12:ab:96:fa:5b:3c:41:35:f1:3a:a9:38:19:64:
                    d1:75:e7:fc:2c:47:24:10:32:e1:44:99:01:62:f7:
                    0e:77:68:ed:b0:04:d7:dd:1a:8e:1e:5f:b8:09:53:
                    7d:98:83:6f:7f:b1:69:2d:7b:73:53:7b:e9:97:6f:
                    ae:98:d8:68:86:d5:00:ea:9b:3b:d9:12:a3:b7:73:
                    2a:0b:22:f2:34:44:fb:b7:9b:94:95:2c:2c:aa:f2:
                    83:84:09:ba:ce:35:47:86:dc:ca:ef:7e:91:b1:7d:
                    e0:76:25:71:24:07:79:0d:f7:a9:93:6e:d3:5c:f3:
                    c1:3c:2d:04:3b:d7:bc:ef:42:59:09:2b:2f:b6:72:
                    1a:76:3b:17:7f:2c:24:86:37:2a:3c:0f:a1:b1:dc:
                    59:7e:70:e9:50:a4:e5:19:f6:31:b6:0e:93:e1:6a:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:9E:CF:26:38:95:75:4E:A3:3D:E5:AB:D6:7A:79:A5:E8:C6:17
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:5d:3f:ab:47:b0:27:9d:8f:9d:1c:6c:87:f2:28:4d:f5:
         28:a5:47:fe:f1:43:e2:0e:a5:c6:3f:0b:b9:37:b2:51:91:b1:
         38:de:c6:31:25:e9:fa:aa:b5:60:5e:a2:5b:08:13:a9:b8:b3:
         88:b7:7d:83:49:c3:f3:92:9e:10:38:70:88:a3:5b:bd:1f:fa:
         9c:86:f3:7f:1d:7a:f1:8d:82:57:cd:df:df:95:a0:b0:42:d2:
         55:a7:44:6c:ec:e6:54:c6:b4:0e:51:f6:bc:10:53:a2:8f:fb:
         ca:61:82:fe:e4:08:f0:35:1b:64:90:06:93:ac:61:1e:26:28:
         8b:35:f5:fd:be:c4:a2:69:34:88:57:8e:21:8e:5d:f7:70:30:
         e8:28:63:3f:b9:f0:b6:98:38:9a:a4:64:92:e4:0d:e3:21:27:
         79:ec:a0:d9:30:19:fa:7a:1c:dd:ba:9e:2d:03:54:4d:4e:35:
         e7:95:63:21:aa:5d:3b:c8:0e:b0:80:39:0c:20:ac:2a:77:40:
         e3:44:4b:f8:7b:b3:74:3c:17:d1:e1:7d:48:0d:4b:44:a1:8b:
         e4:90:9d:63:57:47:cc:c8:e6:9e:52:ef:9f:db:06:76:ed:d1:
         02:af:03:f3:ca:69:60:f2:f4:49:58:f6:39:4c:82:97:3c:c8:
         99:3c:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:29:01 2025 by rpki-client