Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
File:                     w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json)
Hash identifier:          t/PQD8dVhgprE9OzqD7QCCeLlQiMRZUjnFAe7wLOWBg=
Subject key identifier:   B9:20:63:21:34:A2:10:84:7A:B7:17:4E:AA:1D:81:42:FC:4C:02:85
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
Manifest number:          0107
Signing time:             Thu 19 Jun 2025 04:26:10 +0000
Manifest this update:     Thu 19 Jun 2025 04:26:09 +0000
Manifest next update:     Thu 26 Jun 2025 04:26:09 +0000
Files and hashes:         1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: AexF7+MWlFBXjUk71ivDEnevzH6lpcA9IwAtFzBVnVU=)
                          2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Jun 19 04:26:09 2025 GMT
            Not After : Jun 26 04:26:09 2025 GMT
        Subject: CN=68539161-88c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:ae:40:19:fd:48:b6:b8:af:f5:81:38:5f:
                    16:1e:e9:28:46:77:c6:7a:f5:39:f8:a9:d3:b4:ea:
                    f0:fc:de:c0:98:57:31:1a:f2:f8:b8:58:19:28:48:
                    a2:1e:03:67:56:5b:56:89:1d:46:9b:02:4c:e1:50:
                    83:64:ba:4d:f2:60:7d:02:9b:fd:63:be:ab:c4:5a:
                    3a:89:fe:a4:d6:41:14:45:67:c2:d9:91:03:af:c5:
                    49:18:33:df:82:91:cf:df:2b:1d:db:1c:2b:09:36:
                    a1:14:44:53:d7:c0:4b:9d:2e:4c:bd:5f:b7:df:71:
                    b8:64:00:2c:5f:25:30:c0:dd:27:5b:05:29:af:8b:
                    7f:d7:b5:10:b1:4a:8a:92:63:17:ed:dc:6b:25:cd:
                    e4:24:3b:df:03:aa:57:16:2a:c8:76:63:64:62:e8:
                    20:78:0b:d0:6f:69:2b:8b:02:f1:08:77:d9:27:0f:
                    b2:46:f5:7d:57:ba:7f:8a:63:46:27:5f:9a:7c:ce:
                    d6:09:da:3a:91:e5:dd:27:31:a9:a6:2c:21:25:c8:
                    68:6e:48:b3:fb:63:06:13:5b:6d:a7:90:c4:f8:1b:
                    2a:81:d5:a6:d7:a5:55:68:48:a8:9e:1d:a5:91:01:
                    89:91:61:13:3f:5c:99:26:53:c1:19:00:01:fc:72:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:63:21:34:A2:10:84:7A:B7:17:4E:AA:1D:81:42:FC:4C:02:85
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:55:df:79:18:9f:95:f4:91:83:9b:db:28:f4:4a:27:fc:07:
         ef:b7:d9:43:77:f6:09:9c:bd:8a:2a:e6:e5:1f:af:34:85:db:
         f2:06:60:a6:d8:f6:50:28:f4:2f:56:7b:49:77:a3:92:62:e2:
         17:2c:a4:f8:ca:2f:42:f4:84:db:a7:e5:25:74:4f:39:1a:ad:
         30:32:0d:18:ea:28:0a:8d:7b:8f:27:ef:01:47:cf:04:a4:82:
         9b:76:90:67:eb:bf:00:12:b9:c7:a5:bb:3a:32:b5:37:36:41:
         ed:cf:0e:90:ce:64:86:6b:40:c1:46:b3:ab:57:44:7e:23:85:
         e8:82:5f:bc:f1:fd:10:94:bf:26:8e:5c:9f:c5:12:51:4f:ea:
         45:d2:e5:86:a2:d9:a5:fa:d6:2a:3a:b6:64:1e:6a:e3:2c:a9:
         05:4f:64:8a:03:c0:28:3d:39:fa:89:56:04:dd:95:cc:5f:00:
         fd:10:92:4c:23:51:99:b1:55:85:5b:aa:a4:59:a4:07:b4:81:
         7e:64:17:20:ed:c0:2a:d8:f4:27:fb:71:f9:0d:33:00:96:36:
         16:b6:f6:1e:44:0b:f5:54:83:5b:cb:0f:82:5c:98:6b:0c:37:
         6b:82:43:07:53:b2:e4:0a:8d:d1:01:34:15:94:19:b7:9d:5c:
         d0:b4:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:21:11 2025 by rpki-client