Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
File:                     mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json)
Hash identifier:          AuhqeEc5dxrthnx2jiz1uQ2md2vE8+6ao8hG6/ZYxyQ=
Subject key identifier:   8C:24:54:9C:8A:70:7F:74:FA:B9:35:A7:A1:AF:6F:6F:9C:9D:17:14
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       0852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
Manifest number:          084C
Signing time:             Thu 12 Jun 2025 20:27:47 +0000
Manifest this update:     Thu 12 Jun 2025 20:27:47 +0000
Manifest next update:     Thu 19 Jun 2025 20:27:47 +0000
Files and hashes:         1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: RmH68vRXmVefY6CLqQk0GzdNhfB/jtgIVUBoptCKPuU=)
                          2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: Jun 12 20:27:47 2025 GMT
            Not After : Jun 19 20:27:47 2025 GMT
        Subject: CN=684b3843-7754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:0b:e1:7a:12:93:08:8e:b6:1c:a4:88:3b:
                    47:ef:89:f3:d6:31:7f:7d:b5:46:d2:d8:35:9b:33:
                    86:be:1a:fd:aa:e4:e4:ff:48:87:e1:a2:3b:b7:99:
                    9e:fe:43:c0:39:17:2c:31:f4:f8:b9:1d:39:b0:aa:
                    50:20:e6:69:58:ec:aa:33:da:67:25:71:44:c9:e1:
                    45:c9:d0:35:11:61:fd:d8:dc:f0:1d:53:87:13:c4:
                    ec:2d:c6:cc:e1:21:3e:02:29:0d:b0:fc:ae:d7:0f:
                    c1:53:ad:5c:7a:91:6d:91:e8:a8:4b:3f:4b:86:87:
                    68:5a:7f:f7:9b:bf:4f:4d:f0:cc:a5:1d:0f:dc:b9:
                    6f:42:d1:be:69:4f:ae:93:9d:a5:c1:2f:d2:85:61:
                    f6:9e:c6:13:d8:5d:4a:4a:24:63:92:8e:9d:1e:7e:
                    87:8c:79:b4:1b:f6:18:9e:ba:97:6b:b6:70:29:d0:
                    e2:30:9d:44:ff:98:4b:58:12:b7:a1:fe:42:84:44:
                    06:b3:38:ed:04:ed:25:ee:9a:fd:e6:05:9a:ac:a8:
                    6e:1f:ec:38:fe:61:2c:dc:d6:fd:e1:de:4f:7b:c0:
                    79:55:32:d6:b3:69:22:f7:8f:9c:7b:81:19:5c:98:
                    95:3c:4e:a2:1d:ee:93:6c:0d:58:eb:d4:da:43:52:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:24:54:9C:8A:70:7F:74:FA:B9:35:A7:A1:AF:6F:6F:9C:9D:17:14
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:b7:f6:56:4f:63:95:5c:db:43:79:a2:6b:f2:af:57:ef:
         73:ce:fd:7d:9e:87:78:e4:1c:bd:fb:92:7d:f0:e0:f2:48:c7:
         14:97:ad:32:99:5d:55:b0:6d:5b:34:22:37:e8:ef:dc:12:f7:
         2e:f1:74:04:19:ae:e6:08:c7:d8:83:e4:e2:74:8e:8d:4e:15:
         a5:c0:d9:2b:77:65:aa:66:45:26:a4:48:da:a8:0d:01:ac:44:
         5c:22:2d:6b:9f:10:93:d4:6b:83:83:24:d5:28:a1:7b:59:09:
         e2:8b:19:ed:92:4f:07:a2:fe:ec:0f:2b:07:2e:c9:81:43:8c:
         d6:b7:ae:86:e9:2a:c7:84:25:ea:fe:2b:99:66:24:3a:39:83:
         40:87:34:b0:9f:be:24:5f:c0:6e:34:27:dc:3a:b4:2e:4d:73:
         a8:a4:44:84:a0:51:82:c2:45:30:aa:13:ea:92:84:f1:97:79:
         91:c0:cb:ef:09:26:0e:5a:8a:0a:15:7f:fa:be:d7:86:d5:25:
         fe:72:14:83:05:65:3b:1a:16:57:db:80:ea:30:14:1d:d4:a3:
         d1:c3:1e:ed:a4:63:8f:67:f0:f3:bc:83:41:ee:a0:3c:08:d0:
         6b:9b:a8:d7:bb:bc:d1:ee:de:d0:06:7c:0f:1b:dc:3b:40:30:
         95:57:bc:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5
MERGMEVGNTQwHhcNMjUwNjEyMjAyNzQ3WhcNMjUwNjE5MjAyNzQ3WjAYMRYwFAYD
VQQDEw02ODRiMzg0My03NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZcL4XoSkwiOthykiDtH74nz1jF/fbVG0tg1mzOGvhr9quTk/0iH4aI7t5me
/kPAORcsMfT4uR05sKpQIOZpWOyqM9pnJXFEyeFFydA1EWH92NzwHVOHE8TsLcbM
4SE+AikNsPyu1w/BU61cepFtkeioSz9LhodoWn/3m79PTfDMpR0P3LlvQtG+aU+u
k52lwS/ShWH2nsYT2F1KSiRjko6dHn6HjHm0G/YYnrqXa7ZwKdDiMJ1E/5hLWBK3
of5ChEQGszjtBO0l7pr95gWarKhuH+w4/mEs3Nb94d5Pe8B5VTLWs2ki94+ce4EZ
XJiVPE6iHe6TbA1Y69TaQ1JnZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwkVJyK
cH90+rk1p6Gvb2+cnRcUMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC
REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz
X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAw0Lf2Vk9jlVzbQ3mia/KvV+9zzv19nod45By9+5J98ODySMcUl60y
mV1VsG1bNCI36O/cEvcu8XQEGa7mCMfYg+TidI6NThWlwNkrd2WqZkUmpEjaqA0B
rERcIi1rnxCT1GuDgyTVKKF7WQniixntkk8Hov7sDysHLsmBQ4zWt66G6SrHhCXq
/iuZZiQ6OYNAhzSwn74kX8BuNCfcOrQuTXOopESEoFGCwkUwqhPqkoTxl3mRwMvv
CSYOWooKFX/6vteG1SX+chSDBWU7GhZX24DqMBQd1KPRwx7tpGOPZ/DzvINB7qA8
CNBrm6jXu7zR7t7QBnwPG9w7QDCVV7zv
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:09 2025 by rpki-client