Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
File:                     F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json)
Hash identifier:          MYWLPNvrBxHJ4MMyyz5SgiS61fjKIIPGzrCjTD6VrXA=
Subject key identifier:   59:6F:39:8A:B1:5D:CC:6D:8D:BF:43:05:7B:A8:B3:63:82:EB:0F:72
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Certificate issuer:       /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
Manifest number:          12
Signing time:             Sun 15 Jun 2025 07:07:23 +0000
Manifest this update:     Sun 15 Jun 2025 07:07:23 +0000
Manifest next update:     Sun 22 Jun 2025 07:07:23 +0000
Files and hashes:         1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: EU6E0xTvZhMDp6Dwgu820LeBINAkugDtcB41ch46zbs=)
                          2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=)
                          3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 07:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
        Validity
            Not Before: Jun 15 07:07:23 2025 GMT
            Not After : Jun 22 07:07:23 2025 GMT
        Subject: CN=684e712b-6958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:9c:df:75:d3:5a:08:4a:7f:e9:d3:65:90:
                    ae:7a:65:d1:6f:11:ea:0b:29:a6:ae:f4:e7:18:97:
                    bf:bb:63:b8:75:a5:dc:3f:9e:dc:f7:05:5f:15:f3:
                    12:4f:ee:84:a7:95:34:14:ce:5c:19:7c:f2:2e:d6:
                    6b:d0:8d:a6:57:c8:ef:35:57:46:2d:ed:31:cd:cc:
                    9e:0b:56:d6:7e:50:b0:22:37:1b:05:37:1c:76:de:
                    0b:25:ba:a2:30:04:58:0c:67:ed:9a:84:63:cb:8f:
                    b6:eb:e8:4d:84:ae:a3:61:76:b3:d2:41:e8:6f:07:
                    b9:79:27:e9:7d:f4:ba:d8:a8:aa:78:92:93:22:5b:
                    1e:86:a5:af:19:ee:f1:b4:60:68:9d:73:6f:77:2a:
                    79:d9:13:ed:75:ac:e0:7d:de:60:64:c0:ca:54:88:
                    50:88:46:ec:ad:0b:ac:d7:47:15:80:95:dc:04:38:
                    59:0a:f1:ef:b1:33:f2:42:56:c8:eb:6e:48:3d:a7:
                    01:75:d5:b8:b4:14:40:d0:d2:03:07:c6:6d:2e:c5:
                    60:dd:61:38:ae:10:a8:d4:29:30:3c:fb:aa:5e:ab:
                    d1:b3:07:a8:7e:65:29:4e:58:f7:d0:c0:06:ed:67:
                    0f:35:d4:b3:0d:99:38:3a:b6:6d:21:69:2f:25:a9:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:39:8A:B1:5D:CC:6D:8D:BF:43:05:7B:A8:B3:63:82:EB:0F:72
            X509v3 Authority Key Identifier:
                keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:92:86:74:bf:e2:15:77:b4:e1:a4:b7:61:1a:88:cc:bf:
         24:68:9f:07:4c:46:03:65:ae:4a:86:2c:3c:0a:d5:1b:03:b9:
         cc:38:a5:61:7e:39:da:c7:a1:cd:c5:3a:a6:7a:49:33:e8:47:
         27:2d:6b:6a:a3:1e:2c:1d:8c:ba:6c:00:26:9c:a9:d8:3b:d7:
         b5:76:50:df:aa:86:26:50:93:2e:eb:f4:f1:39:b0:4c:8c:b0:
         4b:50:dd:a3:65:45:ad:0f:14:92:24:47:27:ca:f5:19:c7:f6:
         1a:99:64:95:e5:46:d4:42:d9:4d:a9:bb:fc:55:c0:c7:e1:84:
         84:b3:80:09:f4:9a:0e:24:2f:c6:f5:66:76:63:d3:73:88:da:
         71:a2:7e:a8:7c:9a:0c:52:66:30:bc:e2:80:23:0f:7c:31:8f:
         a1:6c:21:ee:04:03:39:89:ec:cf:ba:c1:41:9a:17:80:ca:0f:
         8b:9d:91:c0:7f:08:5a:38:dd:68:ab:65:35:c9:e8:f0:c6:91:
         2e:ae:df:dc:25:39:e0:bf:a9:df:d4:eb:bf:1d:1d:f5:c8:2c:
         3f:f3:b6:d0:bc:13:77:b3:8d:e0:fe:be:9d:26:da:31:c3:82:
         5e:69:a3:b9:8b:d5:f2:13:b7:aa:24:09:22:62:f8:94:33:fc:
         60:3b:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:19:20 2025 by rpki-client