Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
File:                     MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json)
Hash identifier:          9/7LwbiuprCaFPTWxZnFJLVtX6kOws2GGUXZOalggt8=
Subject key identifier:   D8:93:7F:FB:1A:35:68:F2:CE:FC:51:61:2F:66:E1:AF:29:54:ED:D8
Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88
Certificate issuer:       /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
Manifest number:          EA
Signing time:             Fri 13 Jun 2025 04:17:09 +0000
Manifest this update:     Fri 13 Jun 2025 04:17:08 +0000
Manifest next update:     Fri 20 Jun 2025 04:17:08 +0000
Files and hashes:         1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: m2qWROz1bposyZZ+6D1Zs6WUm75vlbMpV6tY730OM3k=)
                          2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl
                          rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
        Validity
            Not Before: Jun 13 04:17:08 2025 GMT
            Not After : Jun 20 04:17:08 2025 GMT
        Subject: CN=684ba644-0af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:18:4e:63:07:c9:17:aa:dd:b2:8b:7e:b1:
                    2b:c5:23:75:81:71:63:d9:33:7c:f9:5f:61:3e:09:
                    0c:a7:c7:0f:f7:8a:b1:9b:f0:b5:d9:f3:b4:c7:4a:
                    17:86:ba:21:7f:e2:99:fb:f2:cd:84:e6:0c:aa:52:
                    83:cd:a2:6b:00:40:de:a4:03:e8:3d:53:4b:61:27:
                    41:97:ad:30:fb:41:45:0f:50:93:ef:df:73:b9:f3:
                    ac:a1:d7:52:1e:b8:d7:e1:cd:4c:ed:42:f3:be:55:
                    11:96:74:51:f1:90:59:f1:f9:36:8d:84:09:79:d8:
                    71:84:13:1c:5d:89:6e:01:92:cc:9c:95:4c:a4:56:
                    09:6e:3b:26:e8:04:fc:9f:af:84:aa:b3:96:98:1f:
                    ff:0a:00:3d:22:05:02:86:35:28:89:90:d5:00:51:
                    63:d7:ef:27:e5:8c:d2:8c:73:7e:f7:51:ef:d2:f9:
                    54:bc:a4:8e:20:45:27:e1:cb:73:9f:2c:0b:29:65:
                    68:0b:63:03:01:17:82:75:40:16:67:0c:98:21:1c:
                    d9:05:63:a1:25:44:92:59:68:d2:48:86:84:13:ee:
                    25:19:ab:e8:23:55:93:64:10:70:b7:dd:f4:1b:92:
                    d9:72:72:dd:56:19:da:79:50:6b:5e:e2:52:f9:bc:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:93:7F:FB:1A:35:68:F2:CE:FC:51:61:2F:66:E1:AF:29:54:ED:D8
            X509v3 Authority Key Identifier:
                keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:55:69:91:62:b5:32:62:c0:68:cb:2c:d3:13:cc:12:72:f4:
         25:c5:5a:17:de:16:d4:3a:0f:c9:87:a8:8c:f1:92:48:47:f3:
         7a:e8:3f:ed:7a:78:81:18:9d:1e:dd:3c:a6:81:2d:08:3c:5e:
         54:a1:39:0a:41:d7:f1:37:8f:7b:34:6f:d1:0d:81:87:26:43:
         62:a8:94:24:28:77:ae:ca:1a:14:a2:8c:ed:29:77:13:68:fc:
         a6:23:50:26:d6:e6:56:73:16:ae:39:88:ec:79:b6:ac:8c:fc:
         04:8d:c9:76:b0:19:8e:04:b0:0b:22:8c:54:83:03:a7:fe:df:
         a5:6a:b7:89:37:28:d8:7a:b1:c3:61:d3:a4:1f:a8:77:9c:90:
         8e:92:8c:5b:bb:8e:bb:44:68:3a:76:43:84:9c:81:bb:34:b1:
         7e:c9:b8:f4:3e:64:c9:11:9a:10:84:2b:8f:6d:90:29:19:5a:
         02:8d:42:81:22:42:ff:40:13:04:89:66:e9:f0:34:71:8c:f5:
         95:0c:2f:0a:20:b3:fc:59:fe:03:d9:67:48:99:a3:68:de:14:
         5f:bd:bd:3d:29:b5:5a:e6:6d:84:a2:32:71:87:5a:14:fd:5d:
         9e:fc:c0:74:6b:24:78:68:80:c0:72:bc:02:73:c4:41:51:b6:
         da:bb:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:12:46 2025 by rpki-client