Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File:                     -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier:          TObv+hqUwjKbWR0NmEhKUEHcPxEuANYLzsqtjBscfzo=
Subject key identifier:   BE:36:DC:82:04:16:9A:29:89:BC:AA:F1:1B:EA:22:F7:FE:5A:1C:C7
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number:          053A
Signing time:             Sat 14 Jun 2025 23:16:34 +0000
Manifest this update:     Sat 14 Jun 2025 23:16:34 +0000
Manifest next update:     Sat 21 Jun 2025 23:16:34 +0000
Files and hashes:         1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: SlCrvYMsVpL+aasJa2qoHhLtqdM8JqU2hB8PVfkasrE=)
                          2: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: dy7HlTozJjIKYVnOC7Ac5E0oRz65i8VQkjJrYKePISw=)
                          3: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: mfi7/O1q/PlMOgkBjbRpL3IW/lsvy+Z+UkSI5FHbr6c=)
                          4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: RH9GugeUqxFAlpVwNYGHYX1wxhyc5gJGTmNYoQjg2Ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Jun 14 23:16:34 2025 GMT
            Not After : Jun 21 23:16:34 2025 GMT
        Subject: CN=684e02d2-58dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:f6:4a:e1:a8:84:bf:f8:f8:12:a9:e4:14:
                    30:dc:c6:78:ab:3e:32:8d:3b:fb:8f:e1:33:8f:ff:
                    18:0a:09:45:73:3f:54:16:81:26:5b:4e:4b:f0:ef:
                    ef:f7:80:3d:d2:d3:22:30:ff:e3:24:e8:00:e8:f3:
                    2a:a3:f8:54:81:ce:da:b5:d1:24:11:4e:26:45:c0:
                    31:f4:d5:07:5a:11:12:ee:cf:ba:c1:04:e4:80:0e:
                    fb:1c:61:76:16:0b:76:f6:e6:5f:44:cc:bd:93:ea:
                    36:a4:7f:11:01:db:ee:97:25:b3:73:db:8c:1c:36:
                    be:2d:9a:5d:47:6c:2f:51:e1:d6:9e:ed:49:d4:6a:
                    da:67:a5:9a:4d:f5:e1:87:7e:ae:92:84:c7:0c:95:
                    80:4c:66:43:74:c7:30:a6:cf:03:f3:15:d9:de:a7:
                    f6:e7:0f:4a:04:62:8c:54:a9:41:e5:22:c7:a9:0c:
                    5a:e2:e1:76:fa:9b:98:c5:27:33:b4:fc:70:b6:84:
                    93:a8:ab:fd:42:15:e6:06:cc:f7:11:aa:bf:a6:17:
                    53:86:32:11:68:27:cf:5f:7c:ca:6d:47:75:47:2d:
                    6f:14:b3:28:2d:1b:d8:d5:b3:96:8a:c2:8b:58:e3:
                    6d:45:e0:e4:e1:94:cd:3c:ab:36:a0:df:43:c9:e2:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:DC:82:04:16:9A:29:89:BC:AA:F1:1B:EA:22:F7:FE:5A:1C:C7
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:01:6e:ea:97:e7:6a:6f:5e:86:40:4e:8c:62:fc:82:0b:
         94:b2:fe:ac:0c:ca:f5:dc:b5:92:d8:57:32:57:cc:90:db:9c:
         6d:58:4e:e0:de:58:f2:8b:17:90:7c:c1:78:8a:20:5c:0d:9d:
         ca:4d:d6:77:38:52:4e:5f:b3:9c:d0:6f:60:4d:f1:f0:6f:7a:
         ef:ba:bc:52:e9:4d:af:32:94:4f:03:12:0b:70:34:8b:53:18:
         d3:6a:d7:7b:32:83:d5:b9:39:40:71:ed:94:ae:e7:72:9a:18:
         7f:16:5a:07:80:f9:a8:fd:c7:9d:e7:68:ae:7c:2b:ea:b4:42:
         37:72:f7:04:7f:85:36:a1:8b:cc:a4:b5:55:a8:d9:d6:a6:d3:
         5c:da:94:94:12:20:fe:7f:ff:34:d7:a1:d4:6b:06:0d:2e:2e:
         8b:84:06:ca:9b:66:3f:96:69:4c:c6:39:04:ec:f4:e8:41:84:
         2e:9b:7c:74:bb:47:7e:d9:21:f0:9d:f0:ad:b7:ca:0a:2f:1e:
         35:ae:63:de:89:81:b9:f3:a7:65:a0:e7:1c:be:2e:28:93:97:
         b9:28:d4:7c:be:03:94:1f:13:d3:0c:ed:09:1f:1f:fb:b4:15:
         d0:e7:3e:54:be:6f:f6:bd:bc:b3:f4:2f:eb:7d:ab:c3:ca:66:
         14:89:b2:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0
RjNDNTg2ODgwHhcNMjUwNjE0MjMxNjM0WhcNMjUwNjIxMjMxNjM0WjAYMRYwFAYD
VQQDEw02ODRlMDJkMi01OGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBD2SuGohL/4+BKp5BQw3MZ4qz4yjTv7j+Ezj/8YCglFcz9UFoEmW05L8O/v
94A90tMiMP/jJOgA6PMqo/hUgc7atdEkEU4mRcAx9NUHWhES7s+6wQTkgA77HGF2
Fgt29uZfRMy9k+o2pH8RAdvulyWzc9uMHDa+LZpdR2wvUeHWnu1J1GraZ6WaTfXh
h36ukoTHDJWATGZDdMcwps8D8xXZ3qf25w9KBGKMVKlB5SLHqQxa4uF2+puYxScz
tPxwtoSTqKv9QhXmBsz3Eaq/phdThjIRaCfPX3zKbUd1Ry1vFLMoLRvY1bOWisKL
WONtReDk4ZTNPKs2oN9DyeI93QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL423IIE
Fpopibyq8RvqIvf+WhzHMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt
aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+VgFu6pfnam9ehkBOjGL8gguUsv6sDMr13LWS2FcyV8yQ25xtWE7g
3ljyixeQfMF4iiBcDZ3KTdZ3OFJOX7Oc0G9gTfHwb3rvurxS6U2vMpRPAxILcDSL
UxjTatd7MoPVuTlAce2Urudymhh/FloHgPmo/ced52iufCvqtEI3cvcEf4U2oYvM
pLVVqNnWptNc2pSUEiD+f/8016HUawYNLi6LhAbKm2Y/lmlMxjkE7PToQYQum3x0
u0d+2SHwnfCtt8oKLx41rmPeiYG586dloOccvi4ok5e5KNR8vgOUHxPTDO0JHx/7
tBXQ5z5Uvm/2vbyz9C/rfavDymYUibIh
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:18:30 2025 by rpki-client