Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          vGbQJ5C2V0zqmhGdpwB8qL0CO6abAsk3jkpKKhbsV7o=
Subject key identifier:   40:CF:32:A4:03:EC:E8:75:5A:54:26:B1:2A:F9:99:5D:8E:E6:91:3D
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       34E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          34B4
Signing time:             Sat 14 Jun 2025 14:24:47 +0000
Manifest this update:     Sat 14 Jun 2025 14:24:46 +0000
Manifest next update:     Sat 21 Jun 2025 14:24:46 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: DrqmfRqXiXnMhmPpWisMfX0lWUHHHuhzjtjbKTSqt2Y=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: 3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: +z4up47sitnxc0BGzrLhea39B00Ir9hVkkzOMtz9tBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13541 (0x34e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Jun 14 14:24:46 2025 GMT
            Not After : Jun 21 14:24:46 2025 GMT
        Subject: CN=684d862f-5624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:66:9e:31:b7:e3:bb:34:73:6d:09:0f:a7:
                    bf:f7:c4:b2:5e:d5:23:2f:d5:1f:f9:6e:dc:98:2e:
                    a1:a8:51:04:02:04:c0:80:fa:24:8f:be:ab:91:0c:
                    82:cc:6f:29:db:7a:07:7e:02:75:31:67:b0:18:b0:
                    55:80:e5:65:72:6d:2e:12:5c:b8:7b:0e:b2:8f:d7:
                    e8:4b:12:03:5c:5d:aa:69:9d:a0:d2:fd:86:1a:e9:
                    30:a1:cf:43:e8:ff:b9:39:de:7f:34:2e:ae:5e:7f:
                    44:4c:eb:b0:fe:45:40:80:de:d3:94:f0:1b:c4:7d:
                    e8:79:9f:74:c6:97:03:c4:48:cd:bb:eb:e6:b5:5f:
                    cf:58:3c:2c:1d:77:ed:af:74:6b:6c:44:8f:28:ee:
                    7b:91:e4:d6:81:84:a2:8d:32:1e:53:27:b1:e9:7c:
                    b2:9c:36:e3:20:dc:6a:89:b6:0a:9c:02:62:47:69:
                    3d:3e:19:6a:37:db:c6:3a:71:b4:94:6d:de:57:ab:
                    c2:3d:5e:99:31:f3:58:c6:0d:72:ef:80:8e:49:af:
                    98:5c:31:d4:9a:ae:3b:77:51:f6:6a:2e:ba:d3:26:
                    5b:2a:26:a9:e8:32:51:6b:21:59:cc:86:73:05:7f:
                    f8:4c:8a:7b:a1:b0:c1:7b:ff:35:86:80:fd:f5:9c:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CF:32:A4:03:EC:E8:75:5A:54:26:B1:2A:F9:99:5D:8E:E6:91:3D
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:9c:84:3a:37:32:70:1c:37:e8:4f:2d:ff:f5:29:92:67:
         de:73:9f:4d:e1:fa:f8:99:e3:cd:48:8e:c5:68:16:92:b7:61:
         f2:bd:81:67:6f:68:21:50:6d:b7:29:7f:97:21:57:bd:3e:cc:
         83:b3:9c:07:3d:59:68:5e:db:47:89:9c:2e:d1:11:7d:d5:ab:
         82:64:4b:32:9e:32:b3:46:f8:64:8f:2d:82:fa:79:44:b7:c3:
         f0:f5:05:82:8b:fa:8e:b7:15:c9:62:01:da:f2:f8:a3:17:49:
         12:03:58:1b:e0:9a:df:38:c4:67:12:ad:29:b4:24:22:ee:4b:
         bf:4a:6e:02:c9:a6:af:e2:3d:7c:6f:d9:4c:fa:38:7a:42:7c:
         92:23:90:ab:72:4d:c9:e3:0b:a0:7b:0c:79:a8:de:82:c7:d5:
         b1:40:cb:e8:5b:23:3c:e7:31:de:c9:18:25:83:2d:9a:c3:06:
         2b:ea:aa:2f:ea:ff:f5:5b:d7:d1:9e:21:31:7a:08:fb:4a:d0:
         e8:3f:29:f8:ba:e5:ad:d7:ff:6d:40:9c:6c:93:b5:54:45:92:
         aa:16:5e:2f:3c:57:bb:2e:3d:33:f0:11:64:72:40:30:9a:19:
         dd:d1:2c:80:f6:d9:1a:a9:8c:64:06:e4:9b:6f:db:d8:bb:72:
         79:d6:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:43:03 2025 by rpki-client