Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          jdzd5cA3VrIKefBUFGVNH4LlT0wf+XZ0HDOtuadMslM=
Subject key identifier:   1F:78:C2:92:59:25:55:F4:5D:B2:FA:42:1B:34:03:A5:08:5E:F9:13
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0801
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          07BC
Signing time:             Sat 14 Jun 2025 21:10:09 +0000
Manifest this update:     Sat 14 Jun 2025 21:10:09 +0000
Manifest next update:     Sat 21 Jun 2025 21:10:09 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: cn38yx7bmMBqfHZxomovMSF0M/GdRznkIjblijQ6giY=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=)
                          3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=)
                          5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=)
                          6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=)
                          9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Jun 14 21:10:09 2025 GMT
            Not After : Jun 21 21:10:09 2025 GMT
        Subject: CN=684de531-262e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:9f:08:0b:f8:79:db:76:e0:5f:25:c9:c7:
                    8e:5b:7b:a6:f0:19:d8:1e:8a:fc:31:70:f2:a6:67:
                    e8:fa:b9:4f:e3:87:c1:f6:12:39:01:4d:0e:49:7a:
                    4c:3f:b4:a4:45:1a:92:0d:37:44:62:34:17:0b:18:
                    a8:31:44:04:27:be:87:b8:c5:59:5f:a1:48:88:fd:
                    31:fa:68:19:6d:8f:e4:57:f2:8f:b3:74:cc:fd:b4:
                    19:7f:3a:d1:90:1f:d3:8e:8c:72:60:0e:c8:a9:3c:
                    31:70:3f:71:58:23:72:5e:38:2f:83:fc:b1:ea:a3:
                    ca:67:1a:1e:dc:2b:07:f8:6b:ec:8d:a2:b5:b4:1b:
                    4b:62:f8:f0:c3:35:43:a0:37:23:03:96:e1:52:4f:
                    81:5a:87:40:8e:9f:c5:98:39:1b:ea:82:98:7a:46:
                    cd:54:91:3c:12:e8:69:b7:2b:d9:11:86:9e:ee:fb:
                    2f:84:08:84:cf:d7:68:61:4b:aa:0e:d1:3f:1a:6e:
                    1b:0b:db:ca:57:16:58:ff:87:85:ec:e4:a7:d4:e5:
                    18:a1:31:9d:85:55:a0:93:74:2d:17:a0:86:22:dd:
                    4c:2c:e0:c2:9b:b0:74:31:0d:8a:36:61:46:7e:f8:
                    cc:a1:26:89:cf:39:06:66:b4:44:b7:b5:16:2f:93:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:78:C2:92:59:25:55:F4:5D:B2:FA:42:1B:34:03:A5:08:5E:F9:13
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:13:23:d2:b8:8b:18:80:e8:44:e5:71:0b:59:3f:b1:5d:f8:
         c4:76:4c:fd:64:50:d8:24:a3:55:15:22:96:0e:af:9a:60:37:
         06:b9:27:83:ec:a4:bb:fa:b5:71:c8:ee:e7:70:89:78:6a:45:
         2d:82:2a:b5:04:d9:d6:38:f7:2b:67:af:79:75:1c:d3:ca:88:
         9d:b7:69:79:a0:25:7e:f6:67:6b:2f:55:d3:e9:0b:6f:0c:35:
         5b:49:88:63:5e:28:67:6b:62:cf:69:ab:a1:c2:d2:55:ba:3e:
         dc:00:2d:97:5e:d1:2e:75:be:b9:b9:e6:20:25:5f:67:86:9f:
         8b:c4:4a:0b:e9:f8:2a:1d:27:d5:69:a9:34:30:59:b3:95:2f:
         3c:b4:3d:f4:0e:d8:4c:a9:57:e6:3c:bf:45:d0:54:e8:ee:34:
         15:1a:28:67:41:90:1f:85:60:23:10:64:e0:d4:e0:5f:fb:5e:
         4c:f2:d1:42:3f:ad:81:7f:d2:a7:75:4b:35:0b:ed:ee:37:b3:
         8e:ad:15:1f:fb:db:35:b3:dc:ee:bc:fd:7c:37:e1:1b:33:ea:
         e7:02:61:dc:95:c5:b7:0b:98:41:15:2c:ff:4e:7c:e0:97:db:
         42:fb:86:c0:40:c6:61:92:2c:69:68:4e:d3:af:b4:63:9f:5a:
         f3:74:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:38:08 2025 by rpki-client