Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File:                     xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier:          oCgmfvgM/YS2iNMBQ1eddQ2Kq+6XCqLSSviaAHuXbvQ=
Subject key identifier:   98:FB:9E:F4:80:0A:7A:2F:C3:BC:9A:B8:8C:66:65:62:20:24:80:4B
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number:          01AB
Signing time:             Fri 13 Jun 2025 02:33:21 +0000
Manifest this update:     Fri 13 Jun 2025 02:33:21 +0000
Manifest next update:     Fri 20 Jun 2025 02:33:21 +0000
Files and hashes:         1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: JdYkTiBbglBrs3GFPnuQg12g8DVZGWGQ9+1X1735QrE=)
                          2: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=)
                          3: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=)
                          4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=)
                          5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Jun 13 02:33:21 2025 GMT
            Not After : Jun 20 02:33:21 2025 GMT
        Subject: CN=684b8df1-41a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:11:66:ed:93:4c:fd:47:8a:a2:07:69:97:
                    61:fa:8f:49:1a:77:90:b3:ec:f8:5f:0d:be:9a:95:
                    c7:49:40:66:9e:b9:15:80:52:97:10:d2:16:7f:f3:
                    c4:4d:42:d6:31:37:9e:35:9f:15:c8:c0:fe:b1:d8:
                    e3:e6:7e:48:b5:66:3a:42:f5:94:4e:81:0e:b3:ba:
                    bb:23:98:56:f5:57:d4:25:52:ba:7a:87:76:7d:5c:
                    88:af:00:ed:70:50:84:de:f7:ca:fb:39:bf:d2:43:
                    75:80:45:21:dc:b8:28:2f:93:54:05:c9:17:c4:f1:
                    9f:be:53:83:1d:91:d6:53:af:69:0a:97:d1:d0:3c:
                    4d:ff:8d:42:76:54:29:91:da:c4:14:3f:ef:31:03:
                    4b:a4:a2:58:00:83:d7:ed:62:f3:c3:dd:3a:d6:cf:
                    92:78:09:ac:81:c3:aa:74:74:d6:e2:47:23:58:52:
                    c7:f4:3f:e6:5c:0e:96:aa:58:34:34:aa:c8:d2:a9:
                    be:61:a2:d0:88:08:dc:3a:7e:5d:f9:52:94:24:cf:
                    aa:1c:21:5e:15:23:f5:95:ff:82:23:d9:d3:13:dd:
                    4d:ca:9c:da:17:37:8f:b1:6e:f6:06:7c:d7:8e:54:
                    28:e2:4b:32:6f:49:23:87:c8:5b:cd:a4:38:d6:cd:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FB:9E:F4:80:0A:7A:2F:C3:BC:9A:B8:8C:66:65:62:20:24:80:4B
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:f4:12:6d:44:58:db:f4:4a:d8:19:b7:86:f2:bd:86:d8:
         20:c7:76:3c:eb:e9:bd:2e:98:74:3c:d3:c8:bb:d9:09:92:50:
         a2:6a:19:d9:c5:11:dd:5a:69:44:fd:13:cb:3c:cd:3f:a2:d3:
         56:88:82:82:3a:70:95:ce:b4:22:4b:ee:c0:3b:b1:db:54:d6:
         99:5c:ba:c9:84:f7:f8:50:16:39:9d:09:61:00:c7:7c:3c:89:
         e8:b5:34:4c:f6:ba:bc:77:72:eb:b8:cf:fa:ff:26:71:0c:5f:
         80:12:0f:4b:9c:ab:45:4e:5e:c0:45:5a:cd:68:b0:76:64:b4:
         32:ad:61:a5:e1:5e:75:50:96:d2:46:5f:d1:a5:b1:7a:72:8c:
         2b:4b:6f:e1:3d:ea:d5:29:6b:d8:13:74:c8:05:33:cc:70:93:
         03:0d:ef:e3:3c:82:88:d8:b0:d8:43:73:b1:82:f7:66:c4:9e:
         6e:25:39:77:23:c5:04:08:8f:ee:7f:7b:cc:ed:f5:d1:cd:dd:
         dc:6f:bf:1b:c8:86:50:eb:38:e3:35:7b:dd:f2:6f:fe:01:d1:
         25:86:ff:be:5c:1c:62:26:10:82:db:6f:6b:9e:00:d2:0a:77:
         3c:31:d7:b7:53:d1:49:59:c5:84:16:eb:04:83:3f:d2:49:f8:
         8a:ba:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:53:22 2025 by rpki-client