Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          ra2w6zSrk4JoZbnWNoeWI0PjeDWkz/aoAnqnccaPU8k=
Subject key identifier:   EC:14:BE:F8:C9:C5:3B:D9:F6:5B:20:68:A5:F1:FA:0B:B2:6E:2F:82
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       34F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          34BF
Signing time:             Mon 16 Jun 2025 15:21:50 +0000
Manifest this update:     Mon 16 Jun 2025 15:21:50 +0000
Manifest next update:     Mon 23 Jun 2025 15:21:50 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 7MtFT6fr5Gc0iuF7ACKuyVEKVy6c/0Uy6LCEgaopCSc=)
                          2: E3832A223D3B11F08D620770C4F9AE02.roa (hash: JH0RK382Rq1931q3FZOB876I+WmJlKxX2lIeupDIS2c=)
                          3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          5: C230A90634A511F0A6FC4F68C4F9AE02.roa (hash: BL9gI5tb4s6Q0u5LFENT8bwJPMSEC2CuXOXMt4SUrro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 15:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13557 (0x34f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Jun 16 15:21:50 2025 GMT
            Not After : Jun 23 15:21:50 2025 GMT
        Subject: CN=6850368e-3f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4c:58:cc:f2:d0:a0:49:d3:e9:00:1f:b3:e7:
                    c5:1a:e8:ae:b1:a6:56:46:5e:f7:5d:b0:cd:cb:72:
                    17:a4:5e:bd:8d:83:6a:b4:56:77:c3:10:61:bc:6e:
                    40:26:f5:58:c3:b6:c5:b9:ac:cd:4f:70:0f:37:f9:
                    44:0e:a6:67:a2:06:dc:12:2a:5b:4b:88:d7:59:6b:
                    33:4c:fd:26:2c:ef:9a:4d:26:99:cd:68:d7:6b:b7:
                    98:f7:24:43:06:7f:13:09:46:c6:5f:34:a2:b9:90:
                    74:e5:4f:d2:f0:0d:a4:63:5c:ec:d4:5e:7c:94:b2:
                    5d:03:86:10:c8:7a:75:fe:dc:26:7f:40:50:6f:c4:
                    04:db:64:cb:52:3a:d1:18:54:78:2d:66:98:01:34:
                    cf:11:e3:8f:28:cc:2a:02:40:b3:6b:4e:5a:7b:b0:
                    8e:ce:28:e7:78:1e:33:80:54:1e:c3:cd:d7:bd:39:
                    06:01:f4:d9:d2:86:61:5c:4f:bb:2e:b5:58:d1:08:
                    f7:d6:07:5a:61:7c:1e:a7:d3:96:8f:fb:8f:24:f9:
                    07:51:6c:c4:af:d6:c3:dd:93:db:64:9e:08:10:ef:
                    b3:a3:ee:14:b8:05:8a:92:3d:c2:a6:99:ff:64:27:
                    2f:06:49:11:d5:90:04:ce:d8:77:7c:40:fe:f0:8a:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:BE:F8:C9:C5:3B:D9:F6:5B:20:68:A5:F1:FA:0B:B2:6E:2F:82
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:b1:d9:71:24:74:68:ea:42:22:9d:39:0c:8c:b8:85:13:
         95:87:2e:c7:06:35:ea:9f:3e:ae:90:4a:eb:f2:8b:91:c4:8e:
         7d:26:e3:c0:f3:40:2c:10:07:9e:bb:76:68:3c:66:17:dc:bf:
         48:aa:fb:84:94:ee:9a:2c:83:84:42:1d:9a:d1:11:d9:c4:a0:
         a0:e2:1d:bf:24:c7:7a:2b:b0:71:1b:a5:76:27:0f:a0:cf:2f:
         9c:30:f4:87:31:7c:c3:30:1b:06:66:46:6c:38:af:65:c9:5b:
         4f:51:83:d4:4f:4a:f2:94:f1:8f:6b:da:6c:cf:29:34:f9:e3:
         74:9c:0e:dc:b3:0d:f2:21:5b:0b:1d:46:b7:c4:e8:71:da:49:
         5f:c6:db:b9:13:e2:3e:c2:0f:e6:08:b4:87:35:a4:18:34:40:
         97:95:8c:c7:5c:eb:68:2f:cf:fd:69:9c:6f:53:20:c5:dc:b2:
         61:52:5e:1a:5d:c3:61:d4:2c:8f:af:fc:38:53:a7:e3:37:6c:
         89:c5:f5:71:48:4d:c2:30:5a:24:eb:79:c4:83:51:46:6e:89:
         bd:b3:0d:68:de:2f:96:d9:2e:df:9d:90:a6:bf:e5:31:15:22:
         66:e1:ac:26:36:a4:05:d2:d0:fa:93:0a:2a:a4:ce:9b:fc:43:
         17:a5:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:05:34 2025 by rpki-client