Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          913yjAtH2D2A7ISGtT1IdV0Gnaus0I1pu6dxjFSITHQ=
Subject key identifier:   04:E4:CF:69:07:4D:87:D9:0C:17:9B:C0:5C:B8:D3:72:75:2A:88:01
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       191F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          1913
Signing time:             Sat 14 Jun 2025 16:23:47 +0000
Manifest this update:     Sat 14 Jun 2025 16:23:46 +0000
Manifest next update:     Sat 21 Jun 2025 16:23:46 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: jjyuIFaHz/NYlSoPWC8jQhrLnIe6oJMae8pKP6U7Y+U=)
                          2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: /U/CsYIhht9s+NW7SN7K/1R2JyIlhuy3zjDWLZs60Yg=)
                          3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: VTcOwA4/ZHFl9NF0jVq8bKcfk95wITIQIkP9/wxqkas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6431 (0x191f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Jun 14 16:23:46 2025 GMT
            Not After : Jun 21 16:23:46 2025 GMT
        Subject: CN=684da213-1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:1b:22:ab:64:f4:4b:cd:4d:f8:f7:50:b8:
                    72:29:10:48:b2:9a:b9:b6:95:f2:0e:02:db:ea:0e:
                    95:d3:b0:d2:81:fa:06:5f:dc:40:c2:57:f1:26:c2:
                    17:11:5d:29:de:e2:a7:62:82:ec:46:d8:fd:ac:ac:
                    51:3a:b3:72:94:5f:2e:66:fb:1c:e9:93:7f:c3:e0:
                    56:84:dd:3e:4e:d5:60:ba:10:b9:3d:50:4f:a0:6a:
                    61:7c:8d:2a:df:f8:8f:8a:5b:7b:a3:04:7c:4e:4d:
                    00:9a:80:40:e2:76:de:a4:25:16:83:7f:75:1c:f4:
                    b4:eb:3c:97:90:38:55:ff:8a:b9:94:f0:79:b4:36:
                    46:9c:77:54:ba:9d:62:e2:44:d7:05:e1:53:1b:61:
                    67:ad:89:23:25:73:c7:1d:14:26:6c:41:a2:8c:70:
                    71:ad:d6:50:84:1c:21:4c:4a:b7:74:43:28:ce:6f:
                    5c:21:73:fe:ac:68:84:2b:96:7a:92:6b:2c:80:a3:
                    16:b3:fb:fb:ae:a1:55:fc:b3:9f:7d:97:20:67:a4:
                    23:91:49:80:d3:c0:f4:34:59:f2:42:85:b2:a1:b8:
                    c7:ed:47:8b:26:6d:35:96:00:ea:a5:6e:6b:bc:f0:
                    32:f3:0f:e3:f8:5b:aa:f3:dc:ec:82:a5:d4:f0:4d:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:CF:69:07:4D:87:D9:0C:17:9B:C0:5C:B8:D3:72:75:2A:88:01
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:1c:c5:dc:5c:d5:3d:26:f3:59:ab:ef:57:33:06:18:7c:
         65:27:3c:cf:9d:6f:f4:c1:38:c7:a4:37:3c:78:1e:44:47:3a:
         93:da:a6:40:6e:0c:71:fd:7e:32:9a:bc:45:57:77:e4:ae:4d:
         55:42:f5:de:ed:1a:ef:a0:90:11:da:a3:3a:0d:32:d0:bf:b5:
         2c:b3:1b:51:6e:4b:88:a1:b4:47:58:0f:77:34:15:7c:9a:26:
         a2:d1:61:80:fb:0a:f7:de:67:2b:77:99:ca:9c:11:a3:2c:9d:
         35:3e:0c:7f:d7:bb:13:07:79:64:5d:7a:9b:9e:c4:b5:bb:4e:
         e7:06:da:5f:4a:78:3f:70:03:0e:e6:35:a8:1c:fb:ac:69:fb:
         d5:a7:c4:bc:38:f3:2d:61:5b:7c:fc:1b:89:45:ed:bc:ec:6d:
         d7:2e:74:9d:ba:da:0d:2c:30:9f:16:9f:91:75:00:08:4b:eb:
         22:51:fa:f0:ec:98:76:bd:c9:a3:79:88:7c:60:2f:fd:0a:12:
         45:b7:d5:15:38:ac:6d:8a:b7:09:8c:76:23:4a:e4:ed:38:27:
         46:c4:ce:93:68:ba:cb:c0:5c:a5:3c:e0:00:43:77:d7:8e:e3:
         93:d0:43:4f:04:98:dd:af:b8:9c:b9:34:a9:b4:b7:db:59:44:
         fa:54:9f:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1
RjMwMzEyMUEwHhcNMjUwNjE0MTYyMzQ2WhcNMjUwNjIxMTYyMzQ2WjAYMRYwFAYD
VQQDEw02ODRkYTIxMy0xNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUsbIqtk9EvNTfj3ULhyKRBIspq5tpXyDgLb6g6V07DSgfoGX9xAwlfxJsIX
EV0p3uKnYoLsRtj9rKxROrNylF8uZvsc6ZN/w+BWhN0+TtVguhC5PVBPoGphfI0q
3/iPilt7owR8Tk0AmoBA4nbepCUWg391HPS06zyXkDhV/4q5lPB5tDZGnHdUup1i
4kTXBeFTG2FnrYkjJXPHHRQmbEGijHBxrdZQhBwhTEq3dEMozm9cIXP+rGiEK5Z6
kmssgKMWs/v7rqFV/LOffZcgZ6QjkUmA08D0NFnyQoWyobjH7UeLJm01lgDqpW5r
vPAy8w/j+Fuq89zsgqXU8E2ftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATkz2kH
TYfZDBebwFy403J1KogBMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz
Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3
bUpyc19vYVhUanhmTURFaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW9BzF3FzVPSbzWavvVzMGGHxlJzzPnW/0wTjHpDc8eB5ERzqT2qZA
bgxx/X4ymrxFV3fkrk1VQvXe7RrvoJAR2qM6DTLQv7UssxtRbkuIobRHWA93NBV8
miai0WGA+wr33mcrd5nKnBGjLJ01Pgx/17sTB3lkXXqbnsS1u07nBtpfSng/cAMO
5jWoHPusafvVp8S8OPMtYVt8/BuJRe287G3XLnSdutoNLDCfFp+RdQAIS+siUfrw
7Jh2vcmjeYh8YC/9ChJFt9UVOKxtircJjHYjSuTtOCdGxM6TaLrLwFylPOAAQ3fX
juOT0ENPBJjdr7icuTSptLfbWUT6VJ9s
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:18 2025 by rpki-client