Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          x9p8cMh+cl8q96NivtqpLy26lcyHvD/GXIQ9upwiAsU=
Subject key identifier:   4A:36:BA:74:CE:1C:12:D9:A4:6B:1E:50:F6:BD:ED:8E:DD:D8:05:9A
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          01D1
Signing time:             Fri 13 Jun 2025 01:56:00 +0000
Manifest this update:     Fri 13 Jun 2025 01:56:00 +0000
Manifest next update:     Fri 20 Jun 2025 01:55:59 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: x+JYArGqK+BvHtEZjx/05i3YdGFRC9qW3xAuz7GN+Pk=)
                          2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=)
                          3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Jun 13 01:56:00 2025 GMT
            Not After : Jun 20 01:55:59 2025 GMT
        Subject: CN=684b8530-ea53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:95:8e:46:62:d3:31:e5:99:95:90:61:e5:
                    a4:83:c2:1b:fe:f3:68:ea:2c:44:28:33:37:78:05:
                    67:17:8d:51:9b:05:e4:0d:4d:27:a5:bb:e3:65:ea:
                    07:00:a9:37:cb:05:b1:c2:66:76:37:cd:a3:da:f2:
                    6f:cc:89:f0:54:8a:19:9a:af:a7:a8:9a:e0:b8:19:
                    0e:09:e1:02:a7:f7:18:04:93:7a:4e:6e:52:81:a9:
                    6f:3a:af:8d:93:65:a6:84:f5:8e:30:c8:a6:f6:f9:
                    3e:84:68:99:36:44:da:2a:f6:19:2b:a2:d5:d4:d8:
                    3c:5e:f3:9d:1e:da:a1:d4:78:27:4c:e2:be:16:14:
                    85:cf:c1:bb:53:33:97:8b:0f:46:47:e8:32:f6:2e:
                    3f:20:72:35:68:23:d7:90:d3:08:fb:dc:24:1d:be:
                    fc:91:ec:0e:b4:a2:2f:d3:5e:97:ba:06:6a:64:b2:
                    fb:6e:61:c9:ad:f3:fa:d9:81:4e:19:95:b8:d0:61:
                    9a:ba:d6:19:27:dc:b9:88:2f:a1:7d:5a:05:a7:14:
                    fc:28:de:25:1a:3f:2a:51:3d:e4:66:3d:af:39:38:
                    d9:1e:e1:c7:a7:b2:5e:ea:96:99:20:62:ad:90:51:
                    1b:a9:b4:42:d0:09:20:6f:ce:68:f4:62:25:ce:4e:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:BA:74:CE:1C:12:D9:A4:6B:1E:50:F6:BD:ED:8E:DD:D8:05:9A
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:a0:d0:a3:62:0c:38:1e:e9:4e:16:82:1f:a0:12:a8:15:
         00:e9:e8:69:51:ec:ca:a9:f8:44:4a:91:07:a5:51:b3:f8:53:
         72:0d:78:3e:bc:ad:48:fe:31:16:7d:68:4a:e1:ef:62:fe:2a:
         4a:5a:e3:88:6d:a8:54:2b:1d:32:c8:de:fd:46:25:03:95:c2:
         79:7e:2c:d6:6c:3e:7c:9a:06:0b:a5:c6:3e:22:f5:10:0c:f4:
         10:91:0a:21:bb:f7:56:1e:52:a1:ec:5c:dc:04:9e:f7:9d:5a:
         75:17:ea:0d:52:dd:f8:08:19:d9:6f:2b:b7:d7:a8:fe:11:81:
         1f:9f:ba:6f:6e:4e:53:76:a8:40:99:6b:60:ff:40:a1:76:df:
         1b:0c:4d:c9:b7:9e:72:d9:f6:30:57:21:0c:2e:e6:f0:98:5b:
         ef:a7:f6:86:e9:25:62:c4:f3:1d:50:a0:66:82:b2:a1:30:1a:
         c2:1e:db:c5:53:de:72:56:a4:c9:c5:54:8b:96:b7:fb:91:c0:
         84:da:55:62:73:bf:f0:79:98:19:08:d1:7c:c7:37:7b:8c:b7:
         66:00:b7:c8:0f:66:6f:6f:e5:78:43:79:49:be:49:8e:49:17:
         15:52:a7:4e:61:17:a5:3d:c4:de:e3:9b:58:2c:4b:38:49:3c:
         17:f4:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:22:53 2025 by rpki-client