Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File:                     M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier:          wWvh6ZN6ATbG2fDSp1IKCzsW6BeEa5kJOC4eIfF8GfE=
Subject key identifier:   14:CE:FC:5F:12:D4:39:DF:FE:77:45:CA:86:23:C0:55:37:83:9C:55
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer:       /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number:          E2
Signing time:             Sun 15 Jun 2025 04:38:00 +0000
Manifest this update:     Sun 15 Jun 2025 04:37:59 +0000
Manifest next update:     Sun 22 Jun 2025 04:37:59 +0000
Files and hashes:         1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: 9yaPCtn8Xcm9TtjXQ9s9vpFFkWS7D87sBwne3W/kroo=)
                          2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=)
                          3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=)
                          4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 04:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
        Validity
            Not Before: Jun 15 04:37:59 2025 GMT
            Not After : Jun 22 04:37:59 2025 GMT
        Subject: CN=684e4e28-dbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f4:f2:05:c1:ce:bc:80:00:59:ea:88:d8:86:
                    a8:bc:cc:ff:59:91:86:8a:6d:9d:a6:02:7f:89:84:
                    b4:2d:a1:4e:be:3b:fb:5a:87:9b:b9:ed:28:7f:22:
                    c1:e5:1c:63:c3:9d:19:4b:9d:4e:ba:a4:e9:05:d5:
                    6c:89:93:96:9d:c7:1f:5d:ec:c3:1e:d3:12:ec:f5:
                    d6:e0:3e:34:62:92:b0:14:39:a1:a6:57:25:92:65:
                    fd:c2:dc:2e:32:95:1d:d5:6e:c7:6a:e4:7b:9d:3e:
                    78:9b:a4:65:c1:6c:94:6e:47:19:73:75:7b:e6:71:
                    7e:58:9c:64:70:69:56:06:f4:bd:2b:82:89:43:db:
                    c7:e9:df:83:88:eb:09:3d:df:50:3e:f6:3c:db:d2:
                    2f:ae:42:bd:18:72:1c:00:69:c7:da:3c:34:b4:c8:
                    9e:e4:73:2d:b2:f0:44:77:be:6b:88:3b:17:7b:8e:
                    ea:2f:42:d1:b5:3b:7d:57:46:c5:c1:ef:5e:3e:ff:
                    f2:94:50:c5:1f:83:5d:cd:f7:9d:99:c5:3e:fe:fc:
                    70:88:de:8f:0e:11:0e:e8:21:b8:69:7b:ea:b3:ef:
                    16:15:80:bd:17:9a:28:a1:13:41:95:3b:a4:8b:6a:
                    79:6c:c2:c6:69:50:47:ea:07:98:83:91:52:92:16:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:FC:5F:12:D4:39:DF:FE:77:45:CA:86:23:C0:55:37:83:9C:55
            X509v3 Authority Key Identifier:
                keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:ee:e6:6e:f6:ee:68:be:b9:48:ac:a6:20:26:92:e5:c8:
         5c:67:b1:75:e4:ba:1f:c4:26:7d:43:df:fc:4a:15:c7:51:57:
         8f:79:e4:a4:da:4e:6a:9e:f7:2c:de:fb:da:03:c0:db:48:f3:
         29:52:04:88:e1:c2:bc:bb:ba:17:46:ae:ec:a4:62:ba:59:69:
         40:25:61:bc:23:54:69:12:60:ed:2a:4c:80:00:54:9d:17:5a:
         11:8c:2f:20:44:d2:f7:95:11:d9:83:77:5b:ec:3d:12:45:3e:
         ad:c1:62:23:ae:2c:da:61:41:51:2e:ac:33:63:34:36:77:ef:
         56:c0:4e:0e:8d:10:48:61:72:2c:67:49:bf:2b:50:eb:f0:a1:
         01:7c:e0:d2:91:b7:9b:e6:8b:4b:fb:64:dc:e3:a7:6f:4e:b7:
         8a:31:f6:3d:5a:3d:b1:f8:a4:e6:a3:88:1f:eb:5e:b0:e5:68:
         08:af:79:78:89:84:29:d7:14:db:79:81:7e:6c:b5:4b:87:29:
         51:fb:55:e2:1a:eb:c6:20:2e:16:2f:f2:2c:6d:55:55:7f:2b:
         2f:63:39:fc:63:9e:a9:eb:8d:3a:b5:89:56:d5:53:af:f0:6b:
         c7:83:6b:6f:2b:d8:35:0f:72:f5:75:8b:c6:38:0c:15:8c:d2:
         e8:ba:9c:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC
RkNBQ0RDOTgwHhcNMjUwNjE1MDQzNzU5WhcNMjUwNjIyMDQzNzU5WjAYMRYwFAYD
VQQDEw02ODRlNGUyOC1kYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7PTyBcHOvIAAWeqI2IaovMz/WZGGim2dpgJ/iYS0LaFOvjv7Woebue0ofyLB
5Rxjw50ZS51OuqTpBdVsiZOWnccfXezDHtMS7PXW4D40YpKwFDmhplclkmX9wtwu
MpUd1W7HauR7nT54m6RlwWyUbkcZc3V75nF+WJxkcGlWBvS9K4KJQ9vH6d+DiOsJ
Pd9QPvY829IvrkK9GHIcAGnH2jw0tMie5HMtsvBEd75riDsXe47qL0LRtTt9V0bF
we9ePv/ylFDFH4NdzfedmcU+/vxwiN6PDhEO6CG4aXvqs+8WFYC9F5oooRNBlTuk
i2p5bMLGaVBH6geYg5FSkhaHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTO/F8S
1Dnf/ndFyoYjwFU3g5xVMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy
RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK
bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAk4+7mbvbuaL65SKymICaS5chcZ7F15LofxCZ9Q9/8ShXHUVePeeSk
2k5qnvcs3vvaA8DbSPMpUgSI4cK8u7oXRq7spGK6WWlAJWG8I1RpEmDtKkyAAFSd
F1oRjC8gRNL3lRHZg3db7D0SRT6twWIjrizaYUFRLqwzYzQ2d+9WwE4OjRBIYXIs
Z0m/K1Dr8KEBfODSkbeb5otL+2Tc46dvTreKMfY9Wj2x+KTmo4gf616w5WgIr3l4
iYQp1xTbeYF+bLVLhylR+1XiGuvGIC4WL/IsbVVVfysvYzn8Y56p6406tYlW1VOv
8GvHg2tvK9g1D3L1dYvGOAwVjNLoupy2
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:05:23 2025 by rpki-client