Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          T94zWjGj+mnoqmGrONpiMDgKm0hGTawYgftcDO/eax0=
Subject key identifier:   C9:98:CD:4C:17:4F:9D:76:62:B7:19:B5:01:7D:7B:F4:3B:9C:07:57
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       19B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          192B
Signing time:             Sat 14 Jun 2025 16:25:36 +0000
Manifest this update:     Sat 14 Jun 2025 16:25:35 +0000
Manifest next update:     Sat 21 Jun 2025 16:25:35 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: x8REV0HV0ZuSLcZeVTGfTrNLY+HQ623PSYxWfhxWfU0=)
                          2: 897785E099AA11EE9E218060C4F9AE02.roa (hash: Hbvrl5qt3755vAHPJTM1ht4CNvz+/1G82ZsixjxL3vU=)
                          3: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: nBufo1kIX8wiHW05HK56kjkzuY8kLzWX8hul7hd+tSI=)
                          4: DE542790058711F0928FB866C4F9AE02.roa (hash: oZxBVSj1Mv8VRpXOWfSpeRcfrv00LslYo58qNkYud80=)
                          5: 64F859DA812611EDA597255EC4F9AE02.roa (hash: rBeoIA3irlO1Deytx/F8atxZ8cpZ0/tW3IVa0ZmI0Ng=)
                          6: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: k+AAWBwdOcaG1er130l80X1HT3IwfL4MKpto67md1U4=)
                          7: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Ujge7k/lW8pB/Dx6DwlTSva6Rx5jbEwksa1MWF/rwvA=)
                          8: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: 8BZnHd6aGsdJmphgS32PS3wAYQMMb45rh9EbaJkomOw=)
                          9: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: m235rMsu+BzhfmXOYnBQggbCKWWyvZ/zw0hFkBbbwgI=)
                          10: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: AMtq6/+OGfNb8zZYL0wKHdGiK4TvIJSI20dtRQ6bo7c=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: RTrVR5wL9yOQXY6b1OrprvdMWmvSxZvI7qM3sOKAsPc=)
                          12: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: U1zVQ5bqYpLe5FAQ5Vpdv4iV73y5ug6j2NtqdB0U6DA=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: iwLGgkob40yON+N3mwyjlp9Fh6761bLtwjZcibQClEM=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: gkJptkaETgFISWJvcQGnHB0jn74oacHoYRhEpbDvdJY=)
                          16: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: E1uTNeLdjmVHLcuJqLs/moW5iBQyqjH1xn1TM16vxig=)
                          17: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: vD8uFo9ZdrCHkm7kGVREsqduAN/X3LQWjfNNIMx3BBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6584 (0x19b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jun 14 16:25:35 2025 GMT
            Not After : Jun 21 16:25:35 2025 GMT
        Subject: CN=684da280-b3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:e3:a9:ba:a5:89:70:cb:e6:42:3e:f0:50:
                    00:4b:03:56:4a:06:30:3c:b4:3c:65:65:f7:13:cb:
                    a6:54:76:7d:ff:56:19:e4:0f:66:a1:2e:c1:12:f4:
                    fc:9d:38:71:ce:d2:8c:94:90:c2:7c:3b:db:e2:21:
                    d4:88:60:67:e1:60:e2:89:08:de:a9:9d:a2:20:a6:
                    88:44:d6:17:1c:8d:15:46:ac:90:13:fb:ba:6e:67:
                    3b:c3:bf:7c:bb:61:97:a5:25:85:3c:4a:8a:4a:f0:
                    9e:68:47:09:7d:36:03:72:6b:08:5f:4b:37:6b:92:
                    96:4d:38:06:12:17:c9:16:99:d9:6d:fe:2d:74:0a:
                    a1:78:1c:fb:61:86:e5:c7:2b:33:8a:21:1a:1b:87:
                    70:7a:14:64:96:7a:ae:f0:b4:d0:be:e9:99:18:64:
                    6c:28:40:20:a9:27:a1:82:1c:3d:f3:52:4b:41:d2:
                    d4:49:dd:33:e2:b3:88:47:0f:a7:09:45:6a:56:00:
                    a4:0a:83:98:49:61:85:b1:8c:b6:87:86:17:7b:79:
                    97:54:9b:e5:5a:f9:3e:d9:86:ba:b0:fc:d9:0e:56:
                    8b:d9:f1:c6:4c:a3:31:0d:b8:a6:8b:1e:62:ec:3c:
                    9f:eb:bd:7e:63:0d:71:8d:88:e3:e5:1f:36:a8:bd:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:98:CD:4C:17:4F:9D:76:62:B7:19:B5:01:7D:7B:F4:3B:9C:07:57
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:11:76:f9:ed:3c:a7:ac:f5:80:d5:36:3d:1d:22:25:d1:
         66:a5:c4:be:74:99:6f:83:88:24:38:ba:2f:d5:cb:da:5a:67:
         5f:71:be:b7:ca:ba:a9:d1:25:47:08:1d:b8:d7:cf:97:e6:15:
         c7:89:9f:a5:31:06:b7:7c:f6:83:ff:c3:eb:33:9e:05:16:c8:
         f4:4f:b5:15:59:04:0b:89:50:5e:2f:7b:d5:d7:46:9e:dc:88:
         00:06:5b:c4:b8:29:08:0f:6b:44:21:ba:65:c3:a0:b9:54:8b:
         e5:21:60:a0:ef:02:03:10:53:da:6f:ca:41:df:f8:01:c0:ed:
         29:91:70:ce:c7:e4:ea:99:a2:c4:5a:f1:69:1a:6f:d5:f7:98:
         b1:76:75:03:5b:5c:9a:cd:c7:b4:d8:de:cf:54:97:8b:b4:a4:
         bb:43:bb:c8:53:e2:ec:a6:40:92:5d:06:6b:6a:19:05:8a:78:
         9e:14:98:43:c3:74:77:82:ec:a1:8f:49:6e:89:e8:04:c4:01:
         0d:c4:94:ce:1f:02:11:ad:4e:54:0c:39:44:27:7e:73:5c:60:
         75:e7:fa:ef:ef:72:e1:ae:e6:7a:61:51:86:52:f3:6c:06:13:
         70:7c:f9:b8:1b:52:f6:71:da:e7:0f:50:95:28:93:14:a5:2c:
         69:08:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:45 2025 by rpki-client