Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File:                     5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier:          bOzK795nNnpf1XGqpKPXc8VstoaFF0Upmp51g5fvHVQ=
Subject key identifier:   49:25:20:61:63:EE:D1:C9:C6:AD:72:DB:79:8E:84:48:47:6F:41:FC
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       34C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number:          34A1
Signing time:             Sat 14 Jun 2025 15:04:35 +0000
Manifest this update:     Sat 14 Jun 2025 15:04:34 +0000
Manifest next update:     Sat 21 Jun 2025 15:04:34 +0000
Files and hashes:         1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: Cl8nsUWiPaZnWeizOY0Cu9EziPiXbgalrNXWpwTyWCs=)
                          2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=)
                          3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=)
                          4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=)
                          5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13505 (0x34c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Jun 14 15:04:34 2025 GMT
            Not After : Jun 21 15:04:34 2025 GMT
        Subject: CN=684d8f83-91f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:5f:4b:74:e3:ef:c7:f6:8a:3b:f4:d6:3d:
                    5c:b6:a1:57:0d:c6:bf:c6:b1:d3:f0:d8:3e:f9:3d:
                    08:d0:8d:fa:e1:0d:65:da:5f:e4:49:b9:6a:ab:76:
                    f5:0d:df:21:dd:a4:a5:5a:18:ea:d5:d1:4d:4d:1a:
                    f9:da:93:71:d7:fe:8a:f7:f1:51:f3:9f:c0:e1:4d:
                    6e:e8:ea:0d:e3:df:15:31:14:3b:8f:79:0e:b2:1c:
                    b7:7d:78:bf:3e:fd:5d:3d:0f:66:14:96:f7:77:20:
                    a4:7f:01:40:b4:b0:d5:ec:b8:d0:58:95:84:02:63:
                    6e:b7:9d:f0:b8:06:fa:92:d8:3d:d4:9a:6f:b3:84:
                    7a:7e:c6:3d:86:df:b3:e0:e0:80:8d:ae:9c:36:3d:
                    ef:d3:6e:1b:c3:dc:46:97:c3:af:44:6e:2a:e2:b8:
                    a0:17:c8:66:d6:de:b3:ca:b4:2d:75:74:de:88:63:
                    af:84:f4:61:ba:ba:b0:67:0d:63:d4:0d:08:a7:08:
                    ca:4a:c9:8f:68:73:80:54:a6:e9:0d:ec:dc:1b:56:
                    27:8b:79:9e:08:e6:fd:03:a8:ff:fa:c9:3c:ca:e4:
                    f2:8f:27:62:5f:47:24:39:8a:5a:b3:92:48:9b:5b:
                    a9:c8:0c:25:a6:78:17:e5:2d:13:b2:4c:9a:39:a1:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:20:61:63:EE:D1:C9:C6:AD:72:DB:79:8E:84:48:47:6F:41:FC
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:13:a0:0f:93:9d:62:67:46:c0:21:a9:af:2a:70:e3:4a:c7:
         8f:4a:6f:89:4b:fa:a3:fd:3b:f0:2c:ad:1b:3b:8a:61:13:2b:
         af:f2:80:19:27:dc:13:5f:7c:d6:ca:b9:b0:ff:e9:ab:41:98:
         c4:44:4c:fc:f8:52:4d:11:f0:cc:48:95:4c:49:0c:30:0e:57:
         84:86:54:82:22:de:ce:98:0f:cf:85:37:9f:9c:e4:73:0d:f8:
         11:2e:d8:3a:fb:77:14:93:db:c0:c4:13:a1:46:7a:bd:99:50:
         b8:1b:10:3b:4a:b6:7e:43:34:86:08:44:82:72:76:7b:5a:be:
         5a:4d:87:82:51:13:4f:e7:35:30:79:78:45:9d:e0:7c:dd:29:
         0d:86:75:23:16:74:4b:93:d4:cc:62:63:d2:bb:03:c3:e0:2c:
         67:d2:57:d1:c9:f3:94:ca:e2:c8:63:f4:37:b4:6b:87:3d:d2:
         4d:7c:8f:d4:5b:27:f7:ab:b1:27:6d:a6:52:8f:4a:b7:fa:09:
         21:d3:61:97:7f:d3:f2:dc:0c:e8:2d:43:22:7c:93:ea:5c:0c:
         6e:86:7c:1e:d2:fd:67:3d:a9:05:67:ae:63:48:0c:4c:95:1a:
         7b:38:0e:2d:04:d8:4c:eb:40:3c:c3:27:71:d2:37:40:47:f5:
         19:64:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:26:52 2025 by rpki-client