Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
File:                     72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json)
Hash identifier:          OXqE3KfO7BhNSGo7/QQXDGAU27NVtX+O6GMWz3JqTlk=
Subject key identifier:   7C:EA:87:6D:FF:E5:F0:38:1D:B5:92:74:40:9E:91:86:5F:DF:89:C7
Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
Certificate issuer:       /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Certificate serial:       0E5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
Manifest number:          0E54
Signing time:             Mon 16 Jun 2025 17:43:35 +0000
Manifest this update:     Mon 16 Jun 2025 17:43:34 +0000
Manifest next update:     Mon 23 Jun 2025 17:43:34 +0000
Files and hashes:         1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 9ml9AdSCtDPVI1NI29PZ/u3l/Dmz78kPN7n2jDAGdC4=)
                          2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 17:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3676 (0xe5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
        Validity
            Not Before: Jun 16 17:43:34 2025 GMT
            Not After : Jun 23 17:43:34 2025 GMT
        Subject: CN=685057c7-549a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:a9:df:ed:1c:db:c1:ac:4e:fa:95:73:44:
                    23:38:f1:2f:32:79:01:68:90:af:32:5a:65:7c:e8:
                    05:5a:28:9b:30:9f:f4:87:42:fe:d2:2f:78:bd:8e:
                    21:18:ca:c4:31:9b:8d:ba:5e:ca:09:73:b9:ce:31:
                    50:4b:85:86:47:44:b3:af:da:27:e3:4a:8c:62:98:
                    e4:56:1d:9a:d1:12:4a:dc:a4:f0:17:02:ed:51:71:
                    bc:fd:0e:92:93:51:84:01:c5:d9:60:1d:ec:f0:fb:
                    b2:c9:3f:ad:bb:e3:d9:9e:49:85:d2:21:a4:76:45:
                    c7:a7:f1:51:8c:d7:47:85:ce:d9:fd:cf:00:00:36:
                    3f:c6:2f:5c:0c:08:ad:f5:57:1c:2a:d8:01:84:ff:
                    a3:48:4b:ae:82:f4:91:c4:70:e7:eb:63:8b:94:3a:
                    16:05:aa:53:02:da:d2:6b:c3:ae:73:ec:99:61:45:
                    25:05:3a:dc:47:e2:b1:ef:ed:e7:b2:39:b2:44:d6:
                    e5:42:d4:d3:c4:e5:b7:c8:14:b7:8e:fe:e4:6b:c5:
                    ca:01:8d:1c:fe:a4:00:7a:9e:0e:0c:5d:3a:77:f4:
                    fb:d3:4f:e8:6d:07:ca:2a:8c:0c:f2:74:33:54:88:
                    e3:14:8c:c5:dd:5d:c5:44:4a:3e:1f:87:d8:b8:22:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:87:6D:FF:E5:F0:38:1D:B5:92:74:40:9E:91:86:5F:DF:89:C7
            X509v3 Authority Key Identifier:
                keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:3c:d2:29:3c:70:04:41:b5:cc:62:ad:8d:39:3f:db:f0:
         07:c8:df:2f:91:4b:14:f8:db:74:e4:86:ff:5c:12:05:6f:21:
         13:a7:5d:ab:79:cc:35:88:99:ea:67:56:73:94:f3:46:fe:22:
         1b:10:4f:80:dc:8f:48:5e:44:4d:07:08:d0:73:d4:cd:a6:4e:
         bb:8a:5b:62:50:81:3f:3c:85:46:99:ca:b7:51:0d:bf:74:9d:
         9b:5e:1a:52:38:b4:56:9f:80:a4:a0:97:96:d2:8e:9a:b0:9e:
         f5:4f:3e:12:96:a1:61:ee:db:fe:ff:f7:6d:0e:c0:5a:22:44:
         f5:da:02:4e:bd:b6:fb:3f:bd:11:6a:af:3e:f2:1c:e5:f1:21:
         5a:bd:1f:00:9a:6b:29:f0:96:ee:d4:a8:1f:7d:12:9f:3c:cd:
         a2:fa:9f:33:85:2d:e4:5d:07:ea:fa:b6:70:c6:dd:c8:6e:1b:
         92:10:51:0f:03:ef:57:80:26:7f:d7:73:f3:0d:94:59:ec:af:
         d6:33:4c:52:d8:5e:06:19:0f:f4:ca:04:fd:7d:ea:6c:0e:88:
         ae:f8:cf:12:7a:f2:d7:8d:33:c9:ab:3c:4a:f5:bf:f8:73:15:
         a9:ad:36:61:80:c5:1f:6c:74:c3:12:8b:04:0c:8d:89:55:a4:
         31:8a:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:40:18 2025 by rpki-client