Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          IYrSXnapDagt7r6bM53DzdZkJWLi/zGUlhlIrn/a6no=
Subject key identifier:   49:1C:42:9B:22:E1:35:59:81:5B:73:38:52:9D:CA:E9:A9:5C:B6:4C
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0DAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0D97
Signing time:             Sat 14 Jun 2025 17:50:08 +0000
Manifest this update:     Sat 14 Jun 2025 17:50:08 +0000
Manifest next update:     Sat 21 Jun 2025 17:50:08 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: lg4ngqr0FuF2tNT1uOeTfTM9yfYVTyNe1SP/cYQnVUg=)
                          2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: ei37UEPvAyJIPiR8lkdojLtbKQiKoaBSIPUwB8sha18=)
                          3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: dbAsxfzu6f+yImX351fMIh4a0dyPHR7GYgrAqsT4PFg=)
                          4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: KL8aICS0aayuRpdlvbYehEzSsatkO3Hs+QAJl8XQUok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Jun 14 17:50:08 2025 GMT
            Not After : Jun 21 17:50:08 2025 GMT
        Subject: CN=684db650-af2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:6d:31:6d:f3:bc:2f:f9:22:83:e4:fc:93:
                    5f:3d:76:77:60:d9:65:66:4d:1b:55:cf:84:0d:b9:
                    4f:60:a2:a6:74:93:a5:cb:bd:b1:9a:72:bb:ad:7b:
                    3f:51:7b:02:e7:83:a8:31:43:59:21:67:3c:91:4f:
                    c0:d5:d5:4c:73:25:54:3f:96:b9:68:14:b9:a9:b9:
                    4e:8c:2c:56:e4:99:02:75:eb:b1:a6:41:7e:27:54:
                    4a:16:3f:1d:c4:fc:b9:fe:9c:1d:60:75:d4:eb:b1:
                    8e:8a:37:60:a0:ce:fd:6c:8d:62:2d:74:4a:35:ed:
                    b0:2d:e3:79:ef:e1:9c:63:44:2c:cc:aa:18:59:30:
                    12:72:b8:f0:5c:b4:61:6c:51:35:31:26:41:74:7b:
                    96:2c:b4:78:6e:40:9c:e7:ed:ee:db:cf:19:5f:09:
                    48:d2:bb:26:3f:4d:b7:70:a4:bd:92:b7:21:b4:90:
                    4d:a8:7e:9d:93:e8:77:19:95:c9:74:12:df:83:0c:
                    ee:06:0b:fe:d9:e1:ac:4a:b0:79:14:c9:06:db:44:
                    6c:db:fa:84:9b:25:39:ef:3d:da:2a:65:61:0b:ff:
                    05:78:1f:f8:d3:22:6e:63:88:8d:33:1d:f9:e9:2c:
                    01:e4:3c:da:d8:c9:d0:ae:dd:13:d8:3c:6f:20:8c:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1C:42:9B:22:E1:35:59:81:5B:73:38:52:9D:CA:E9:A9:5C:B6:4C
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:09:40:bd:89:28:99:25:76:bf:ff:4c:48:67:3f:e8:59:dc:
         90:38:4e:72:af:c9:e1:23:72:e8:b0:86:8e:0e:2d:8b:62:51:
         3f:6a:c6:71:08:ab:07:2b:4a:45:94:89:fd:cf:d1:eb:4e:61:
         6b:77:bb:87:e7:af:af:a6:4a:c0:19:a6:26:52:bf:81:12:de:
         a0:ad:62:b0:fe:57:4e:07:79:d5:cb:46:3b:60:e2:63:fa:b8:
         0f:95:76:d5:12:91:ef:72:6e:b7:e1:43:b4:2c:5f:d4:f3:84:
         44:60:ae:65:21:92:8e:71:40:57:7a:67:04:7c:9e:db:b6:8b:
         cd:92:31:fa:e7:a8:ec:33:e6:2e:dd:10:a5:55:f8:c8:ed:f6:
         20:e6:69:79:c3:b0:7d:28:ac:04:f4:b5:b0:f0:0d:9b:ab:74:
         cf:46:03:dd:23:b6:dc:f6:89:a6:b6:ba:a0:42:44:d5:3b:90:
         1b:01:68:dd:85:e8:a3:43:e2:ce:82:5a:0a:8f:40:6b:a4:ff:
         23:19:f6:c8:37:2e:b2:b6:8f:bc:6e:be:c3:47:a5:67:65:14:
         1a:e8:35:5f:83:11:01:7a:cb:48:06:1b:e5:3f:f4:da:b6:2a:
         6a:e4:04:c9:04:cb:43:93:73:c6:b9:fb:43:b8:8a:94:d3:76:
         41:5e:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:01 2025 by rpki-client