Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File:                     72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier:          AN74nuPakrExnbY+ydOvVOmsvBZZqIzm6WujMYjSw6g=
Subject key identifier:   AB:54:F7:7E:93:A3:75:8D:B3:93:4E:A7:CE:69:5B:15:0D:84:F4:37
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer:       /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number:          017A
Signing time:             Tue 17 Jun 2025 02:50:18 +0000
Manifest this update:     Tue 17 Jun 2025 02:50:18 +0000
Manifest next update:     Tue 24 Jun 2025 02:50:18 +0000
Files and hashes:         1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: xe0H0KA1q85zDqB99lTGdINo7E2sH5s6L0IO6ay4bU8=)
                          2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=)
                          3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
        Validity
            Not Before: Jun 17 02:50:18 2025 GMT
            Not After : Jun 24 02:50:18 2025 GMT
        Subject: CN=6850d7ea-8e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:cb:7b:43:2e:dd:36:3e:ac:ab:12:a7:e8:
                    d1:e3:8e:8b:10:19:0c:cd:37:8c:ae:2f:5e:8b:f4:
                    4f:7f:fa:2b:96:61:7b:5e:9d:f6:06:63:d1:ff:ce:
                    ec:50:38:4c:5f:51:3e:e2:3c:1a:4b:91:4d:5e:e1:
                    d4:c8:b5:d3:70:9d:75:a8:ed:6c:6c:c5:18:5b:52:
                    02:6e:02:13:ec:31:f4:6e:fd:82:31:da:43:4b:f5:
                    43:cd:da:c9:08:2d:da:97:a4:31:a4:1d:24:5e:92:
                    4c:f8:75:65:ac:0d:22:59:01:bc:50:74:a2:b2:f4:
                    fb:5b:ed:86:cf:0e:84:c9:c9:2b:fc:53:79:f4:41:
                    c5:8a:db:d6:81:a7:10:1a:ae:6e:21:22:04:ee:c7:
                    59:40:65:f3:18:5e:36:16:a2:b5:51:3e:5a:51:93:
                    e3:b0:0e:61:69:e5:c7:85:af:9f:4b:02:0a:99:0c:
                    4f:4a:95:29:20:22:5b:27:c1:57:bf:0d:31:9a:95:
                    91:4d:1e:44:95:8a:fb:1a:df:9f:b7:69:31:88:25:
                    13:3b:1c:41:96:e0:74:cf:91:95:f1:0e:41:c4:d0:
                    af:56:88:a1:f7:f2:a9:ed:d4:bc:42:bc:7b:c2:4c:
                    c5:04:f8:49:e9:e0:0f:90:c5:27:86:3c:4f:af:c8:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:54:F7:7E:93:A3:75:8D:B3:93:4E:A7:CE:69:5B:15:0D:84:F4:37
            X509v3 Authority Key Identifier:
                keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e6:10:43:46:4a:71:8b:a6:6e:ab:2c:11:bf:3b:d9:9b:90:
         ff:38:65:f5:13:e1:f0:4b:77:09:c6:f9:a9:ef:27:1b:e8:a4:
         e3:bb:40:ac:ae:41:5d:b8:c3:1d:c0:1c:a8:37:82:9b:86:49:
         5d:ff:99:cc:f6:2e:5a:a5:cc:7e:4b:d2:46:db:ae:c7:25:47:
         d9:10:8a:6c:86:c6:73:5e:81:c5:74:01:a2:1d:9c:81:52:33:
         72:26:9e:f0:52:49:7b:b4:d6:4c:85:17:35:53:a8:39:2a:3b:
         07:08:4b:fe:69:22:b4:25:10:60:ad:c5:70:65:c6:b9:f9:47:
         5f:2d:cb:d4:90:3e:cc:ee:8a:f2:68:f1:24:5a:57:f2:99:6c:
         9b:96:3f:8a:b1:99:59:06:d4:d4:d9:e9:15:05:63:24:23:4b:
         1a:64:16:e1:1b:27:d5:ff:ae:a3:81:bc:ff:4c:84:77:cc:5f:
         13:6a:da:e3:86:57:16:51:04:58:59:57:d3:16:56:12:25:15:
         d1:b8:e5:a2:7c:60:8b:c9:0c:aa:34:f2:07:f7:6d:f8:8d:97:
         91:3c:d7:8d:40:ff:7a:5b:b3:d0:cc:3d:c0:0e:66:be:83:e7:
         34:f9:0f:a0:7c:ef:94:f5:5b:f0:19:24:2f:e6:15:40:61:ca:
         db:87:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:14:39 2025 by rpki-client