Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
File:                     BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json)
Hash identifier:          jud3pL8qhdrSaJwxLr2F3EvWWUAkjXBTueseo4EUxmo=
Subject key identifier:   B7:F2:E8:84:BF:7B:C7:03:F8:49:1A:5B:D3:D7:77:DA:32:A7:DF:80
Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
Certificate issuer:       /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
Manifest number:          021F
Signing time:             Fri 13 Jun 2025 01:26:15 +0000
Manifest this update:     Fri 13 Jun 2025 01:26:15 +0000
Manifest next update:     Fri 20 Jun 2025 01:26:15 +0000
Files and hashes:         1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: UJUFzkOpsGDXf2wGR0Py8Ysv6KAp8LLwSxXGMByG8sY=)
                          2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 3Nsuy1l5CDxfVHqXS1wMZ/Du4WneIJgwFtAnNJmX/bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl
                          rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
        Validity
            Not Before: Jun 13 01:26:15 2025 GMT
            Not After : Jun 20 01:26:15 2025 GMT
        Subject: CN=684b7e37-ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:58:28:70:82:52:73:f6:f5:61:fc:10:c7:
                    d0:8d:04:c6:b8:b3:09:54:37:fd:d9:9a:f3:9f:63:
                    d8:50:5b:90:65:33:50:95:80:ba:94:c5:be:7e:d9:
                    87:e9:e3:7f:b6:9c:7c:d9:84:51:24:37:ce:13:70:
                    9b:ea:40:e3:ad:e6:ee:65:7e:43:fc:f2:95:d1:7c:
                    2a:a1:1c:e4:c0:50:cb:ff:8d:39:cf:3d:b6:79:cf:
                    83:e6:dc:9c:87:22:4d:23:4c:2f:f5:26:f6:bd:29:
                    9b:d4:15:1c:a0:d2:8a:58:af:c9:ce:7a:72:dd:00:
                    1f:73:42:44:2a:10:1c:85:9c:26:0c:a5:ac:e1:13:
                    f6:3a:f3:55:a8:59:8c:d7:76:7a:69:90:ff:b4:82:
                    26:42:9d:2d:17:1f:c3:c9:c5:25:10:9f:32:a4:31:
                    c8:94:ee:1e:91:33:b6:4f:5f:7a:bb:60:82:0a:c1:
                    7a:00:2f:3b:18:ef:86:f0:78:4f:17:e2:a9:c4:14:
                    00:41:6f:d0:7f:94:23:cc:97:1e:7d:08:30:48:3f:
                    2c:c6:3d:cc:f3:13:36:66:98:2d:3b:a3:b6:c9:69:
                    b4:d3:b0:31:b6:cb:44:a4:0f:16:db:5e:fc:24:ed:
                    29:ce:2c:d5:f3:60:58:42:87:ff:08:c8:1f:ef:b5:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:E8:84:BF:7B:C7:03:F8:49:1A:5B:D3:D7:77:DA:32:A7:DF:80
            X509v3 Authority Key Identifier:
                keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:d1:74:5e:5e:fc:16:8f:cd:ca:06:a6:5f:5e:01:d5:a3:
         0e:d6:01:55:95:f0:80:7e:01:b7:63:2b:4a:b9:58:73:e2:18:
         a3:18:45:a1:d9:07:a4:8f:a8:c8:dc:d3:27:88:59:14:4a:da:
         d8:8c:1d:23:b3:99:46:e7:38:1b:6e:3e:59:44:5d:3e:3b:51:
         f6:48:ae:7c:03:0e:f5:f4:30:fc:eb:56:3a:e9:27:aa:f9:1e:
         8a:d0:79:61:5e:de:14:ce:9b:86:9e:bb:b6:d3:02:32:fc:63:
         6f:4c:1f:48:0e:e2:71:22:fb:e5:95:40:e0:20:60:16:f1:a8:
         50:41:4c:73:68:c5:2c:cd:f0:12:4b:f3:7b:1c:f3:ca:12:00:
         d5:c9:07:f3:91:75:27:f4:67:0c:bd:93:2e:32:ef:fc:03:63:
         42:05:58:d4:e9:9b:28:c3:28:13:dc:c6:a2:b5:81:ad:8a:38:
         b6:90:c5:1e:24:cc:1f:a7:18:c2:f5:84:8e:8c:49:fb:19:f6:
         6c:5a:92:81:f6:59:e6:bc:58:62:39:49:e5:7b:69:7e:8a:68:
         0f:91:89:33:c3:e3:68:c0:aa:e8:d8:5b:a7:87:3a:0a:4f:38:
         99:2b:66:45:ae:8f:57:30:1e:b5:57:f5:5d:52:0b:08:68:05:
         4f:a8:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:13 2025 by rpki-client