Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
File:                     X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft (raw, json)
Hash identifier:          MDD8e66UDS52LcVZWE2S0HQBn8jWEADSRv24guFWzOk=
Subject key identifier:   73:38:97:FD:45:36:98:D0:4D:E6:8A:40:1F:94:FC:36:1D:C0:11:B8
Authority key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
Certificate issuer:       /CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
Manifest number:          0829
Signing time:             Thu 12 Jun 2025 21:58:27 +0000
Manifest this update:     Thu 12 Jun 2025 21:58:26 +0000
Manifest next update:     Thu 19 Jun 2025 21:58:26 +0000
Files and hashes:         1: X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl (hash: WNSOqCpks2sz1LysCS9E2a4dFuqZ55BcLMI9qrw5tUY=)
                          2: 5C925054E06811EF895B471EC4F9AE02.roa (hash: WJ6jshg1hMuefWZWAvCq9BHL/JR2w7ml13fnTUu4Jz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5413, serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3
        Validity
            Not Before: Jun 12 21:58:26 2025 GMT
            Not After : Jun 19 21:58:26 2025 GMT
        Subject: CN=684b4d83-7810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:60:74:92:e8:d3:8c:24:94:ff:6a:8a:e2:
                    74:bf:b7:9e:7d:ef:a0:50:2b:79:73:c1:79:09:b2:
                    23:22:3e:dc:03:c9:6e:bd:41:2b:76:99:01:a1:f6:
                    c2:10:fe:d1:31:e0:f3:d7:fd:47:9f:1d:b0:1b:11:
                    9f:07:7e:b4:52:60:f2:0b:58:61:d3:8f:19:65:03:
                    36:3f:5e:fd:ca:4d:d6:ea:8a:25:59:54:f8:25:23:
                    cd:a8:d8:cb:a0:7e:fc:a1:44:dc:69:69:48:e1:b3:
                    ac:90:c8:ac:fd:3b:b4:88:1c:a1:cc:fe:05:be:e9:
                    1b:ea:24:38:3d:4e:55:5d:6f:25:43:ba:35:0f:03:
                    b7:c4:73:9d:82:e3:6d:4c:33:f0:87:a7:57:6d:20:
                    51:b0:63:27:53:2d:9a:78:c3:c5:65:8a:ca:9b:96:
                    f5:14:98:e3:96:1d:1b:4e:c5:c8:ed:b7:7d:44:b5:
                    81:d7:90:bf:0e:e3:f6:eb:44:9d:a4:98:21:87:c9:
                    7d:3e:98:b6:78:d3:58:75:78:b0:5f:dd:aa:77:c3:
                    8e:77:a7:df:c1:d0:ce:88:9c:57:c3:d1:f2:10:d2:
                    ee:ff:0b:b7:cc:ba:99:48:75:7f:30:0f:fb:c0:d1:
                    36:6c:6e:d9:4f:17:30:18:c0:2f:ce:a6:5f:fb:58:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:97:FD:45:36:98:D0:4D:E6:8A:40:1F:94:FC:36:1D:C0:11:B8
            X509v3 Authority Key Identifier:
                keyid:5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:11:63:07:86:43:21:40:96:72:f2:80:3a:16:8b:61:e0:77:
         0f:97:77:f2:ad:5f:54:3a:e6:ce:5c:61:6e:48:72:4b:9b:db:
         78:9b:8f:17:cb:7f:b3:8b:82:6c:da:bb:d8:36:0a:d3:2d:13:
         b1:56:75:e2:0e:c1:f4:45:b9:6c:f2:f9:59:37:6d:3b:d5:a8:
         09:2a:77:a9:25:cb:2c:cb:17:5a:83:ff:74:d2:e8:6a:bc:be:
         e8:c9:84:0d:b8:23:2f:75:ed:18:46:01:84:83:e8:54:56:81:
         3f:57:13:33:db:12:f0:cf:81:9b:87:ad:8b:c5:92:f1:0c:71:
         6e:b3:8e:4b:56:a8:d7:7a:d8:ca:44:15:61:ca:ee:31:28:08:
         84:00:62:5c:8b:3b:0a:81:a8:df:39:e3:b4:9c:24:a2:a6:3b:
         7e:35:cf:3a:d2:97:98:27:1a:be:c3:7d:cc:7d:cc:5b:af:a1:
         04:07:d4:ac:ed:4b:62:f8:8b:70:ce:1a:09:d3:4c:58:50:f9:
         2a:67:78:1e:35:7e:68:5f:d2:61:f3:b7:c3:78:26:ac:df:05:
         25:a9:d5:09:d8:18:75:42:3f:e8:66:07:05:8a:de:26:7b:78:
         bf:98:4b:b3:d2:b4:ca:5a:ee:ae:3d:ff:23:f8:ad:12:2f:57:
         42:9b:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:20:43 2025 by rpki-client