Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
File:                     iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json)
Hash identifier:          HxNJZTxPc5pkokYgffXyOehe9Rg9Lk2T4s3SGn1V00I=
Subject key identifier:   40:2B:2E:1B:AA:F0:A1:40:DD:BB:08:A4:C0:4E:F0:49:2F:92:A4:29
Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
Certificate issuer:       /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Certificate serial:       0879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
Manifest number:          1FA3
Signing time:             Sat 14 Jun 2025 16:33:38 +0000
Manifest this update:     Sat 14 Jun 2025 16:33:37 +0000
Manifest next update:     Sat 21 Jun 2025 16:33:37 +0000
Files and hashes:         1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: imagHWAgv5TWRaIWh07BUVubiy9BWvceqSl/krerRgk=)
                          2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: jQL/fiO/nnfKq4pv4enzbX7soonmf0Sd8syRd3Z9270=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
        Validity
            Not Before: Jun 14 16:33:37 2025 GMT
            Not After : Jun 21 16:33:37 2025 GMT
        Subject: CN=684da462-4d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:e7:eb:30:a2:2a:e2:d3:8f:ac:b9:ac:cd:
                    b8:19:da:53:45:49:6b:c1:5e:05:7d:e3:35:81:6f:
                    34:d9:d3:21:9a:55:9c:a6:d2:2f:a7:22:a8:36:05:
                    f8:d4:43:2e:9a:a8:27:95:ec:ee:ae:79:6e:53:57:
                    7c:30:36:79:29:e4:17:2e:f6:a9:30:8c:ec:6d:05:
                    80:c0:53:46:b2:e7:f4:2f:62:8d:8f:ea:22:0a:8b:
                    be:df:7a:6d:c2:7c:05:20:b3:ba:b0:19:16:7d:ff:
                    85:60:b1:1b:76:47:28:ad:58:79:2f:86:bc:16:59:
                    04:d1:32:64:62:65:62:29:79:31:6a:29:07:00:c3:
                    52:01:eb:67:4c:b1:77:e6:9c:ab:6d:fc:e5:35:17:
                    4d:4f:c3:de:c7:32:a0:fb:70:e5:dd:d8:47:4c:1e:
                    66:c5:6b:59:2c:11:b7:78:99:72:3a:2e:ff:75:58:
                    2e:8a:25:99:92:5a:80:e1:60:6a:ff:88:5e:30:92:
                    69:eb:4a:fc:e5:0b:19:33:d7:b2:56:0f:ac:7b:13:
                    fb:7f:a9:61:5b:31:08:c5:5d:87:1b:98:d0:67:95:
                    9d:8b:29:12:8f:1a:40:06:7f:cc:7f:a4:7f:c2:d3:
                    e3:42:3b:ac:96:b2:a1:31:2b:00:57:67:61:3a:a0:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2B:2E:1B:AA:F0:A1:40:DD:BB:08:A4:C0:4E:F0:49:2F:92:A4:29
            X509v3 Authority Key Identifier:
                keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:ca:d8:64:23:bd:c6:ac:57:9a:b0:02:1d:b8:1a:2c:6e:
         4f:3e:65:27:91:28:10:d2:36:b1:cf:22:30:07:d3:fe:3e:3e:
         87:d6:31:c7:14:33:8b:eb:f2:27:aa:0d:07:1d:16:99:00:a6:
         a8:3c:9e:1b:9d:96:6a:28:b3:de:a1:0c:1b:9a:35:02:3d:87:
         4e:a3:f2:dd:df:f1:c5:69:8a:54:9d:da:5e:05:4a:69:bf:b3:
         a0:ce:94:e7:22:ab:67:da:f8:52:82:5c:ae:61:d9:71:32:14:
         d4:f4:62:aa:a2:0c:dd:32:6a:68:96:ad:c6:9e:52:24:0d:44:
         89:4c:4c:37:87:d6:1a:f5:d6:ca:c4:fb:29:47:ee:76:77:d5:
         bb:93:6c:f3:c7:b2:e8:b5:24:e9:70:75:74:2c:0e:ff:f7:11:
         72:2a:ff:4c:2b:8e:1c:54:4e:ad:42:70:dd:8f:19:17:23:d4:
         0c:91:20:d3:6c:84:1b:a7:35:94:e9:1b:9d:15:58:71:07:7e:
         f7:f0:e1:07:78:70:56:6a:27:18:99:78:70:86:69:5b:0a:ff:
         54:5c:72:bf:b1:12:2c:20:cf:0b:7d:1b:17:61:45:92:f8:69:
         a6:97:a1:30:c1:3b:7f:19:01:e6:8e:31:ae:af:58:d1:cd:b0:
         af:1e:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:32:36 2025 by rpki-client