Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File:                     lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier:          pE0ZqPXxrNinJlZAOGbJ2r0gj+RBGrX0JV4WX2yqWyw=
Subject key identifier:   C2:A0:B3:43:E2:CA:E7:80:9F:2B:74:99:43:02:6D:7E:47:C5:65:C5
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer:       /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number:          07DB
Signing time:             Sat 14 Jun 2025 20:47:29 +0000
Manifest this update:     Sat 14 Jun 2025 20:47:28 +0000
Manifest next update:     Sat 21 Jun 2025 20:47:28 +0000
Files and hashes:         1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: nfu3dRgGEXryT3Ir55PfX3xJWHeeHATMtzznEuAdnDE=)
                          2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: h5ITx5pXE/9NCEhkkWyRU4Y7R0J0MFf0GXuloXcx21g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
                          rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
        Validity
            Not Before: Jun 14 20:47:28 2025 GMT
            Not After : Jun 21 20:47:28 2025 GMT
        Subject: CN=684ddfe1-a023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:34:40:5a:ee:f6:d8:f2:cb:55:0f:69:15:
                    db:9e:ac:ba:af:33:df:29:79:f4:f3:75:c4:3c:ac:
                    fe:fc:18:a0:c3:0b:1f:35:2a:00:c1:70:1c:7b:f1:
                    e7:01:3c:ef:aa:6b:0a:ce:f9:9e:f2:cb:6e:dc:9d:
                    63:52:4c:8d:47:92:bc:00:c3:a3:58:7f:e1:a6:c1:
                    5b:d9:d6:c5:b4:a1:0e:19:fa:22:50:7c:58:2a:51:
                    2f:fa:18:78:1d:8c:72:7b:d6:7f:d8:2c:da:c0:f0:
                    1e:a0:de:71:4a:f9:f2:6a:4c:25:f5:79:af:db:77:
                    65:59:e3:ec:f0:64:3f:23:a6:ff:2f:37:ba:8e:b7:
                    33:d6:37:e5:7c:76:9f:a9:12:71:32:d2:fa:30:da:
                    b5:e6:6f:ec:3c:74:74:4e:9a:dc:21:f4:87:b6:ef:
                    5d:fb:6f:5e:1f:4b:e4:0c:b0:df:bb:14:07:b9:7a:
                    3a:de:53:9b:87:6a:cd:33:e4:35:81:4d:21:8d:8e:
                    6f:a6:35:31:a8:1c:be:2a:b2:ba:52:ee:1f:b6:da:
                    7e:e8:ff:a0:b8:93:ef:d4:e9:d6:58:49:fe:29:d8:
                    9f:04:f9:89:53:52:62:91:10:1a:a9:8b:f6:04:63:
                    fb:93:cb:86:f1:3f:8f:31:4e:55:6d:31:8c:73:9b:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:B3:43:E2:CA:E7:80:9F:2B:74:99:43:02:6D:7E:47:C5:65:C5
            X509v3 Authority Key Identifier:
                keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:a5:c9:e5:38:59:2d:21:ca:ed:eb:f8:de:0e:eb:74:76:
         bf:0b:fd:80:ee:87:44:ac:23:01:70:f7:51:25:9b:db:cc:57:
         b5:67:38:68:2c:58:65:76:a4:bc:e3:e9:e9:3e:28:0b:55:54:
         20:18:d7:3e:5f:c9:dd:39:9b:33:1b:f7:c6:73:8a:87:a2:7c:
         6b:78:54:b1:76:85:21:4a:87:05:cc:19:df:40:c9:5d:56:6f:
         98:da:4b:d9:8e:33:14:37:fe:d6:c5:40:23:12:9d:35:6e:8d:
         84:26:57:b8:42:5d:c4:44:b1:79:0d:e8:e1:ab:a3:8f:ca:02:
         a4:03:89:ad:8c:f3:a0:4a:cc:d8:6f:56:a3:c2:70:b9:d8:a5:
         a2:81:13:60:27:d4:22:db:ad:63:b5:af:ac:9c:2a:fc:c6:96:
         2f:5f:68:5a:66:45:ff:b5:60:56:3c:c8:32:64:5a:4a:d7:9c:
         a5:7e:a7:f7:c5:77:4a:b4:73:0c:48:f2:98:f0:f7:30:c9:d0:
         e8:4d:16:21:87:3b:c6:03:dd:f5:fc:50:56:e3:db:c3:fd:f2:
         ff:af:8d:98:e6:16:90:61:91:47:8d:7a:71:a2:41:53:01:4c:
         e7:a8:f1:53:0e:ee:ef:07:d5:1d:79:e8:8f:17:7d:30:55:52:
         b8:ad:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:14:33 2025 by rpki-client