Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File:                     2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier:          YYKts+cj3Vx/hNI7I1FKKw7w4W13lNiEmjXt0auF/wI=
Subject key identifier:   66:26:64:DE:E7:2F:03:3C:0E:AB:1B:10:05:F3:59:8E:D1:8F:73:AA
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer:       /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial:       0668
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number:          064C
Signing time:             Thu 12 Jun 2025 22:15:22 +0000
Manifest this update:     Thu 12 Jun 2025 22:15:21 +0000
Manifest next update:     Thu 19 Jun 2025 22:15:21 +0000
Files and hashes:         1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: V5sO+MtKvCcmYvo1/USzOTXPHSt2+p5a1P1Vze1wkcw=)
                          2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=)
                          3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=)
                          4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=)
                          5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
                          rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
        Validity
            Not Before: Jun 12 22:15:21 2025 GMT
            Not After : Jun 19 22:15:21 2025 GMT
        Subject: CN=684b5179-3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:26:a3:4c:89:c1:6c:c4:5c:b9:ba:72:a1:
                    c4:7a:ac:3a:cb:df:bd:c6:82:92:25:d9:f1:0d:f0:
                    bd:d0:80:64:0a:fb:87:07:28:04:0b:3a:2c:f7:ad:
                    7c:06:4f:05:9b:d3:bd:e2:8a:a9:c4:2c:b7:9c:c6:
                    db:4f:15:c6:47:c9:ac:cd:30:6c:18:50:2d:3f:d6:
                    c9:d9:38:37:62:87:96:9f:80:c7:00:51:e9:4f:83:
                    45:bf:86:02:8e:a8:75:7a:a9:d4:2a:86:0c:bf:67:
                    93:5d:b6:10:06:a5:e6:d1:d9:10:40:77:50:20:31:
                    ab:e0:4b:35:bb:05:4f:36:85:03:91:20:e1:04:a3:
                    9b:e9:2f:f9:85:26:cc:ee:43:67:f6:6a:da:31:4c:
                    bc:f3:ce:de:32:47:b2:57:c0:f2:97:75:9d:5f:d6:
                    54:15:21:58:46:b9:5d:a2:53:e6:9e:63:65:a8:7b:
                    e7:16:85:02:35:64:40:0c:b6:47:8f:c8:28:86:f9:
                    14:60:4b:a0:53:6e:c1:4a:7b:83:c9:39:7d:8d:25:
                    b4:c4:d0:e2:b6:dc:08:45:60:54:12:5f:63:10:cf:
                    73:35:40:7a:7f:4f:0b:31:ae:ba:b7:e3:0d:cb:32:
                    5f:af:51:0e:20:d8:15:e3:3c:77:ba:d7:ad:98:73:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:64:DE:E7:2F:03:3C:0E:AB:1B:10:05:F3:59:8E:D1:8F:73:AA
            X509v3 Authority Key Identifier:
                keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:c4:b1:b9:6b:e6:b8:02:02:a0:62:08:8c:9f:5f:6c:e7:
         21:92:3e:a3:cf:bc:63:67:df:15:aa:31:7d:59:d3:dd:f8:df:
         b0:7c:48:e2:49:4e:33:a9:ff:d2:b4:19:8c:f2:9f:17:0e:49:
         f3:ed:42:19:92:85:2a:f1:be:18:d5:81:d7:2a:49:e1:d0:2d:
         b7:87:49:c5:14:69:bd:b4:e5:4f:1e:74:a3:f4:83:52:84:fa:
         a6:39:23:cf:f6:4c:ba:84:c9:40:4d:d1:d1:70:ed:f8:80:9f:
         7a:68:f5:7c:36:07:31:01:73:10:2c:47:65:52:ee:40:5d:f6:
         b6:9b:f1:87:d3:76:39:ce:c9:be:87:dc:44:dc:81:d6:23:47:
         6d:58:e1:7a:b2:94:e0:0b:fe:7f:25:03:66:cc:b4:ba:ee:79:
         27:c3:5f:77:48:3a:0b:e1:8d:87:f9:67:3b:9e:0a:cf:f1:1e:
         ca:7b:a6:97:fa:2e:73:0a:c0:13:70:52:6c:ae:80:56:50:cd:
         64:22:01:88:5f:c5:bd:54:09:99:8b:41:20:c8:49:a4:f1:ed:
         6b:b4:58:16:9a:d0:c7:37:41:2e:59:e6:0f:20:24:cf:56:86:
         9e:90:05:de:b0:64:f2:cd:96:82:32:c9:16:10:18:c3:55:54:
         70:0c:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:28:14 2025 by rpki-client