Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          vjZPyAEjJzoXU8xTZE8kN3kt6T99zSOQmhId+do79wo=
Subject key identifier:   62:A2:6B:C7:C9:59:47:E4:BF:67:39:48:6B:0C:0A:04:0B:40:EB:47
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       131D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          129F
Signing time:             Wed 18 Jun 2025 17:05:18 +0000
Manifest this update:     Wed 18 Jun 2025 17:05:18 +0000
Manifest next update:     Wed 25 Jun 2025 17:05:18 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: 0y9gdmg1li/5K26zJuGiC9Gusw8QXWSY/23lBfa8FmY=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=)
                          7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
                          11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
                          15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 17:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4893 (0x131d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Jun 18 17:05:18 2025 GMT
            Not After : Jun 25 17:05:18 2025 GMT
        Subject: CN=6852f1ce-2b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:37:58:6f:1a:cd:b7:56:d9:3f:7c:0d:d6:
                    ba:5f:39:20:f5:1f:4b:65:df:51:1f:62:da:3a:5b:
                    60:44:77:03:4d:8c:7c:b0:b4:d0:f2:e3:cd:ce:ee:
                    3c:42:4d:59:f3:fa:86:0d:57:47:e2:6b:84:62:d4:
                    88:53:dd:fa:fb:0e:45:71:fc:02:ce:09:d9:df:a6:
                    28:d5:c5:bc:ec:35:ee:71:d7:83:05:64:05:b6:66:
                    28:ad:39:a1:df:00:75:92:83:c1:fc:9e:4f:b3:fc:
                    07:d4:03:63:a7:c1:eb:75:42:cd:2b:2a:56:7e:34:
                    bb:4a:87:e4:85:a0:a6:94:f4:6a:5b:e3:01:dc:b0:
                    33:b3:94:dd:43:b2:a2:59:e3:75:46:09:66:11:71:
                    74:99:2f:e4:1f:46:43:d9:22:5e:ff:e2:d1:8b:17:
                    f9:fa:7b:7b:db:52:68:49:a4:26:c5:88:2b:e3:76:
                    db:02:77:61:5a:9f:65:74:fa:9a:40:27:29:11:0b:
                    1b:a9:f4:8b:d8:98:12:1f:ee:5c:56:ff:f5:64:ec:
                    3a:49:b6:2e:14:8f:33:df:74:7b:5f:b6:32:64:e0:
                    ac:16:96:40:38:f0:3f:83:d0:58:1a:09:04:88:c5:
                    d5:4a:fd:49:9e:70:ac:ea:7b:6b:41:f2:36:5f:a6:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:6B:C7:C9:59:47:E4:BF:67:39:48:6B:0C:0A:04:0B:40:EB:47
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:e8:5c:53:3b:38:8a:a3:71:59:46:8f:5b:fc:05:2f:21:
         c0:8b:e6:97:c9:0c:96:2d:6a:64:bf:f7:75:54:47:29:2b:be:
         c0:c0:d4:00:9a:ac:1a:0c:68:7e:0c:ee:77:3d:6c:ef:f2:66:
         38:f3:ca:6e:62:d8:d2:e3:f0:3b:ed:82:dc:2b:3c:ad:53:82:
         ad:f7:17:6e:e7:db:79:18:9b:43:e3:87:70:f2:e0:f9:a2:74:
         13:20:84:b5:36:8e:1e:b6:6f:39:59:8d:1d:b4:e9:e1:c6:e8:
         c7:e8:4c:32:fb:0f:a6:b1:f7:e0:05:07:d5:c0:c9:27:92:49:
         41:52:c3:cf:8e:cb:21:7c:67:7a:e6:74:b3:92:14:2f:a4:92:
         94:d0:da:33:d5:e8:12:8a:4d:15:07:8a:e8:7a:b3:16:95:5e:
         30:70:da:35:3d:5e:88:c3:7b:14:b2:59:c9:e3:36:2b:d7:19:
         f7:90:c1:41:38:b8:a0:f6:81:23:6b:7a:dd:f5:21:4a:0a:b4:
         74:a8:1f:6d:26:93:ad:06:88:bf:d5:a4:22:17:bc:21:2c:7f:
         c0:da:ad:af:ff:23:6d:85:8c:d3:6e:00:56:6d:c5:46:11:50:
         38:f9:00:45:2b:82:0f:17:51:2d:36:69:4b:dc:40:1c:cb:c6:
         fa:ba:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:37:02 2025 by rpki-client