Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File:                     zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier:          tMAkHQqULmWDHggUqOI32V3ihSctvupjXnGUgVeuwkI=
Subject key identifier:   46:06:8C:46:4D:EE:49:84:6A:21:F6:96:9C:D6:D0:7B:C7:72:F5:CD
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0E57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number:          0E47
Signing time:             Sat 14 Jun 2025 17:40:40 +0000
Manifest this update:     Sat 14 Jun 2025 17:40:39 +0000
Manifest next update:     Sat 21 Jun 2025 17:40:39 +0000
Files and hashes:         1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: OT8jpekh/ST8GredSR0BFxrUjJe12RTOpvIvQhFZuh4=)
                          2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: am9c/5/9WUqfqDVJJkqHl1fMAMJ9WE34zLQ5kEncnkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3671 (0xe57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Jun 14 17:40:39 2025 GMT
            Not After : Jun 21 17:40:39 2025 GMT
        Subject: CN=684db418-4d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:8a:80:6e:c3:7e:e4:8f:93:7f:77:c8:27:
                    ab:dd:38:8f:ff:d8:4f:03:36:69:6f:56:fa:2d:01:
                    8d:03:00:2f:67:b3:f3:3e:d7:9a:fb:53:a7:de:70:
                    95:70:06:42:08:b2:e7:97:32:12:98:f3:4e:a2:90:
                    7d:18:05:82:61:d2:6d:2d:37:c3:6b:ee:3b:dd:7d:
                    ff:59:db:ae:8c:b5:02:9a:1c:ae:f7:90:06:30:6c:
                    e5:3e:88:ba:de:c5:c1:18:db:3c:73:ea:7d:e0:07:
                    2f:ee:d1:eb:b1:e4:9f:8c:a7:2a:7e:6f:9e:4e:82:
                    c9:37:94:8b:67:7d:2f:64:a2:cb:f8:ae:8d:de:88:
                    2e:63:b5:26:23:df:d4:87:fd:65:63:2b:c5:a2:4c:
                    6c:09:89:df:47:17:4c:26:e5:6a:94:74:4f:12:0e:
                    dd:4f:a0:8c:81:3d:88:b8:f4:37:a8:ac:75:07:42:
                    e7:a0:8f:73:b6:5d:89:0d:59:09:82:0b:79:af:0c:
                    ef:02:2e:f7:c7:bf:60:48:cb:e6:43:ef:24:b7:20:
                    e8:1b:1e:13:54:ed:06:30:28:d2:50:f4:25:6a:99:
                    3d:b6:d8:ef:fd:ca:f8:f6:7a:fa:ee:c8:a6:49:ec:
                    a6:fe:22:10:3c:71:0f:32:59:10:fc:30:3d:fb:af:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:06:8C:46:4D:EE:49:84:6A:21:F6:96:9C:D6:D0:7B:C7:72:F5:CD
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:88:0f:1f:db:97:78:34:e9:30:c5:fb:80:0d:4c:99:f6:
         b3:4d:38:62:9b:f0:5f:a0:a2:b5:b1:19:47:5d:98:8e:85:d7:
         ba:db:15:73:2c:de:f4:1c:d2:d4:9f:c4:2a:ea:1e:fd:b7:56:
         08:80:e3:29:fc:9d:69:f5:70:a2:ed:d5:9f:92:ce:bd:56:0c:
         40:91:b4:0b:06:0b:3a:d1:10:24:f5:bf:55:04:be:8a:27:03:
         4b:d1:b2:0e:4c:72:a1:67:ba:88:74:25:33:4f:47:9e:71:27:
         4d:ef:b6:c8:b0:10:5d:58:2a:8e:33:43:0d:a4:15:0c:88:a3:
         e3:f1:2b:ca:4a:0c:6e:79:b2:20:1d:35:8c:ba:69:e0:54:2b:
         58:4e:df:0f:da:ab:af:b4:dc:76:ef:f0:4e:39:7a:5a:7b:ac:
         6f:d5:4c:eb:0d:dd:b1:ed:ab:fe:4b:e8:b4:f7:d8:26:31:f0:
         4c:bf:28:78:fb:54:a8:c9:c8:f1:fa:ca:33:9a:13:2b:92:21:
         2a:77:8d:3a:d7:2e:71:48:a1:c2:8b:c7:eb:67:64:f3:8a:f9:
         3a:de:29:f1:af:d7:9f:89:36:b5:3c:cb:70:d0:3c:1e:92:05:
         30:a9:42:d8:f6:27:92:7e:91:c5:72:ed:1a:01:40:3b:06:f4:
         51:e1:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:58:53 2025 by rpki-client