Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
File:                     NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json)
Hash identifier:          XwSsSUrAMWI8UuGtyD8XSq3d8IclO4HbzSrhn5JkF88=
Subject key identifier:   1D:38:F2:90:4D:4F:3D:17:4B:C7:01:7B:BD:3B:C0:C0:0E:B6:F9:00
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Certificate issuer:       /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial:       07AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
Manifest number:          0796
Signing time:             Thu 12 Jun 2025 21:06:56 +0000
Manifest this update:     Thu 12 Jun 2025 21:06:55 +0000
Manifest next update:     Thu 19 Jun 2025 21:06:55 +0000
Files and hashes:         1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: ZeBK4cPRZNGVWXBQFTYKtdeVo3AJUtLNOWvTwwTrUDE=)
                          2: 579AC748232011EB99F53580C4F9AE02.roa (hash: YqjBxojwPaCwMm/XINEnANNU5YkC9/n1OyLFodaayD0=)
                          3: 82F92248127411EBAA54D786C4F9AE02.roa (hash: M4MOSHD8C3zUn5WtSLqHZosv2F6Rib+YwJz1DiCIB90=)
                          4: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: 0sTO565z2noH8B1LWmmqLTh0cgNZKxMSa14Hsw0ys7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
                          rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
        Validity
            Not Before: Jun 12 21:06:55 2025 GMT
            Not After : Jun 19 21:06:55 2025 GMT
        Subject: CN=684b4170-ab10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:9e:7e:27:3e:fd:19:6f:56:f5:9d:ca:e9:
                    93:eb:80:c2:66:1b:e4:46:2e:bc:72:04:c9:96:a4:
                    a4:f6:67:0e:f2:1c:41:ee:4d:05:0d:e2:38:c1:6d:
                    69:e1:cf:1e:91:ae:79:ea:e3:c6:c3:92:66:57:62:
                    4e:ed:07:41:94:0c:34:1d:2b:d0:4d:85:99:f6:8f:
                    87:ef:5c:e6:47:b6:94:fd:39:3a:38:6a:0e:98:13:
                    ef:b5:29:89:0b:6c:14:04:70:9e:92:a3:2f:76:19:
                    2b:af:c7:a3:5d:1a:c2:59:b3:fe:40:2b:60:86:74:
                    08:f1:af:72:c5:72:55:a3:f1:df:7b:e9:6a:bb:13:
                    da:c6:bf:13:98:c9:cc:2f:56:d7:0c:9a:37:c4:90:
                    48:52:91:57:bb:90:8b:cb:6e:ea:73:c3:d1:99:ea:
                    4c:fd:65:2f:75:50:77:27:89:3d:21:20:31:a9:cf:
                    8d:2b:30:a1:13:5d:2d:d9:63:c4:94:77:49:e1:37:
                    c0:ec:f8:3e:13:cb:24:95:cf:63:3a:bb:2d:29:30:
                    a6:08:f8:5a:d3:c3:ea:99:35:70:23:7a:38:1f:96:
                    72:f9:e1:fb:91:75:40:bc:7f:51:a1:bf:56:32:f7:
                    5b:1d:53:87:0f:01:41:77:12:ac:76:70:da:64:96:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:F2:90:4D:4F:3D:17:4B:C7:01:7B:BD:3B:C0:C0:0E:B6:F9:00
            X509v3 Authority Key Identifier:
                keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:6b:f1:32:f6:ff:ab:4c:58:cd:3a:00:f7:60:eb:16:90:
         e7:bb:dd:26:9d:e0:2e:0f:b5:21:6f:08:08:bb:3c:b3:7a:0b:
         94:58:a7:47:0f:b9:18:23:df:6c:08:13:9c:e0:2b:a0:19:37:
         46:c2:30:bc:56:b4:a7:69:d6:20:a0:d7:dc:86:58:cf:00:83:
         9a:83:a2:7b:6d:1f:52:09:bd:8a:a9:08:0f:04:1d:32:9e:8a:
         e3:9a:65:8d:e7:38:22:bb:61:6e:61:e8:55:7f:96:2f:d4:99:
         49:7d:b4:7f:d0:3b:57:a0:b8:84:55:8a:2d:01:4d:e8:f2:ab:
         65:75:ed:b9:c8:60:65:60:da:80:04:a7:0f:bb:a7:cd:2e:0f:
         cd:9e:42:0f:e2:76:47:cd:f7:f2:c0:d4:12:d3:93:13:6d:29:
         a0:91:b2:87:74:57:88:2c:0b:e0:49:b3:d1:3b:b8:39:f7:f5:
         3e:59:16:03:65:ca:fe:87:11:12:0a:50:94:02:ca:88:64:1a:
         74:e8:54:5d:ae:a3:31:32:66:80:bd:74:0f:f9:a5:96:59:f7:
         76:15:ce:7a:03:00:6c:97:0a:44:12:ad:7e:30:15:81:a7:eb:
         ec:6e:f1:0d:70:e0:ff:60:4a:64:d7:e6:83:ba:b0:85:46:18:
         38:7c:d0:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC
OUJCQzFFNUIwHhcNMjUwNjEyMjEwNjU1WhcNMjUwNjE5MjEwNjU1WjAYMRYwFAYD
VQQDEw02ODRiNDE3MC1hYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvSefic+/RlvVvWdyumT64DCZhvkRi68cgTJlqSk9mcO8hxB7k0FDeI4wW1p
4c8eka556uPGw5JmV2JO7QdBlAw0HSvQTYWZ9o+H71zmR7aU/Tk6OGoOmBPvtSmJ
C2wUBHCekqMvdhkrr8ejXRrCWbP+QCtghnQI8a9yxXJVo/Hfe+lquxPaxr8TmMnM
L1bXDJo3xJBIUpFXu5CLy27qc8PRmepM/WUvdVB3J4k9ISAxqc+NKzChE10t2WPE
lHdJ4TfA7Pg+E8sklc9jOrstKTCmCPha08PqmTVwI3o4H5Zy+eH7kXVAvH9Rob9W
MvdbHVOHDwFBdxKsdnDaZJaiKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB048pBN
Tz0XS8cBe707wMAOtvkAMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy
NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i
QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtTWvxMvb/q0xYzToA92DrFpDnu90mneAuD7UhbwgIuzyzeguUWKdH
D7kYI99sCBOc4CugGTdGwjC8VrSnadYgoNfchljPAIOag6J7bR9SCb2KqQgPBB0y
norjmmWN5zgiu2FuYehVf5Yv1JlJfbR/0DtXoLiEVYotAU3o8qtlde25yGBlYNqA
BKcPu6fNLg/NnkIP4nZHzffywNQS05MTbSmgkbKHdFeILAvgSbPRO7g59/U+WRYD
Zcr+hxESClCUAsqIZBp06FRdrqMxMmaAvXQP+aWWWfd2Fc56AwBslwpEEq1+MBWB
p+vsbvENcOD/YEpk1+aDurCFRhg4fNAR
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:02 2025 by rpki-client