Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          G1Z8TuKBxNya1MNM57RqBKk7BPNzlm6aCY6edNw25Gk=
Subject key identifier:   E8:B7:B1:36:0A:BC:E9:66:34:22:4D:A3:46:39:51:20:7F:B1:F5:22
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          082D
Signing time:             Mon 16 Jun 2025 20:43:53 +0000
Manifest this update:     Mon 16 Jun 2025 20:43:52 +0000
Manifest next update:     Mon 23 Jun 2025 20:43:52 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: MYGEdgUnoquFvp10aOInktx3YkwU3i25iHD7dTHXMQc=)
                          2: E033560A3FAF11F0B47BD563C4F9AE02.roa (hash: BgVF3hos/cvrYkz28jUIYI7Xb8wsouZzUNXAPAQJeqA=)
                          3: 03476D523FB011F097B5F864C4F9AE02.roa (hash: V/GUkEYycrfVr0CeXDFIAE3DCEVs8ccFAFXl7jAkBfQ=)
                          4: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: 67c129aFdKchOeJBLSQTErVCgqpsP+UzfUSQtqZi7PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Jun 16 20:43:52 2025 GMT
            Not After : Jun 23 20:43:52 2025 GMT
        Subject: CN=68508208-7f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:94:e2:78:2d:46:89:81:12:93:37:9e:30:
                    81:66:dd:91:a5:dc:55:82:9a:70:a2:cb:d7:56:ee:
                    2a:56:a3:2d:45:00:46:bd:00:10:3a:fc:2b:cf:e2:
                    a1:98:8d:81:fe:8f:6c:ec:58:bc:ff:3a:21:4e:fe:
                    71:c4:3f:a6:36:0c:39:0e:86:d6:31:a9:52:66:be:
                    7f:90:ca:ab:f2:82:e8:0c:35:ab:e3:91:fc:a2:54:
                    f8:d5:36:5b:66:52:4d:6b:a3:b4:81:db:0c:36:15:
                    6e:a8:05:d9:f9:8f:1a:26:51:b7:1c:ef:a0:ec:8f:
                    83:61:ca:c2:b7:9c:bf:36:c5:cd:35:c3:bb:a3:14:
                    8d:24:0f:a6:d7:a6:9a:59:0e:40:af:62:da:ea:3c:
                    8c:5c:70:fc:0e:9a:9f:9c:38:be:98:19:df:6b:ca:
                    07:bd:8b:0e:66:66:33:3c:a4:5d:e3:4c:fe:6e:85:
                    ff:cc:7e:be:32:0e:9c:fc:aa:5d:dd:41:57:84:90:
                    dd:77:0b:45:df:6a:32:06:4a:cc:b9:1b:19:1a:7a:
                    d8:eb:53:78:0a:e9:cf:7b:80:2f:b1:7a:dc:ae:c6:
                    c3:76:4d:32:24:87:f1:3f:9b:d9:37:59:22:ac:da:
                    b0:b2:0f:b5:d0:6c:c3:4e:a9:b5:17:ee:e0:71:2d:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B7:B1:36:0A:BC:E9:66:34:22:4D:A3:46:39:51:20:7F:B1:F5:22
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:1d:a8:bd:00:b4:57:b2:a1:ee:9c:a0:08:84:4c:8c:d9:
         c3:29:e2:e8:fb:13:6b:e9:73:c8:3a:ae:67:4a:fb:fd:e9:10:
         5a:fc:9e:3d:3f:cc:cb:48:21:55:a1:9f:ba:73:6f:b5:fa:da:
         b9:48:82:8c:ac:5e:00:22:22:40:b0:1c:1c:dc:4d:b8:aa:10:
         11:b8:3c:c9:1f:d4:8d:f7:10:44:ca:8b:8c:f2:c7:14:b3:a8:
         a5:72:5d:a2:9c:58:74:d5:61:51:ad:0b:55:96:74:91:8e:35:
         b2:c0:df:05:a2:71:49:65:6c:32:c0:26:54:ed:ca:6a:fe:a5:
         db:be:8d:f2:b1:7f:87:12:ef:a3:0c:30:67:2b:95:c2:8c:17:
         81:68:3e:54:a6:e0:7b:cf:31:89:ce:37:08:1e:2a:26:07:84:
         cc:7c:ad:65:ed:34:53:ec:dd:c2:e2:86:29:3a:f8:5e:96:47:
         f5:64:1b:63:3b:44:b1:1f:35:d9:97:ab:5c:3d:7d:57:76:a2:
         36:03:38:bb:a2:5f:20:bb:c3:9b:8b:0f:6a:fc:ba:55:5c:8d:
         44:67:04:93:ac:2c:cf:80:fe:ea:7d:6f:ad:40:33:de:0b:bc:
         c9:e9:4b:24:4c:77:5d:31:7f:14:f4:96:6a:1a:eb:14:04:6c:
         fe:d5:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:05:14 2025 by rpki-client