Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
File:                     31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json)
Hash identifier:          qMG4C0ZlDq1i9GqwtfjKXSSJjBGLPYiRTyj0ctGZ4MU=
Subject key identifier:   5B:A7:FD:5E:AD:EB:6F:77:6A:1E:08:CF:01:B3:2B:28:03:9A:B2:4C
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Certificate issuer:       /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
Manifest number:          0681
Signing time:             Fri 04 Apr 2025 22:25:38 +0000
Manifest this update:     Fri 04 Apr 2025 22:25:38 +0000
Manifest next update:     Fri 11 Apr 2025 22:25:38 +0000
Files and hashes:         1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: oLHdHDIYJzi6qTtx8EtnnQzDkyZT3AyhFi6uQU2qqXc=)
                          2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
                          rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FBEA
        Validity
            Not Before: Apr  4 22:25:38 2025 GMT
            Not After : Apr 11 22:25:38 2025 GMT
        Subject: CN=67f05c62-346d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:21:8f:4c:2d:30:ed:9c:05:a5:67:1d:03:
                    d1:64:a6:3c:fb:b3:76:eb:7e:39:a0:8d:58:25:5a:
                    42:3c:f2:f3:b9:04:3f:d7:79:bf:96:63:76:90:fa:
                    48:54:15:3a:23:79:22:53:08:c5:67:9f:8b:ee:41:
                    45:78:ca:47:8c:72:ad:45:7d:e6:85:9b:f2:81:fe:
                    9b:f0:75:52:54:74:d1:1e:17:0c:62:d3:99:d3:71:
                    9b:46:c3:d3:56:a4:12:23:dc:d0:1c:f4:99:79:4f:
                    69:fa:a8:92:ab:16:b5:97:07:82:83:bc:96:9e:f0:
                    80:76:c8:1b:11:22:40:34:3d:d3:c0:24:6d:75:a2:
                    f3:39:f1:af:c9:2d:c1:e6:4e:62:d0:55:b9:ed:9b:
                    f6:12:68:c0:a9:82:03:de:79:55:7c:ca:3a:b0:19:
                    50:d3:a3:f7:25:c9:aa:de:63:c1:b8:f3:ba:a4:e5:
                    3c:d3:e0:2c:4c:a2:6f:f6:58:24:93:1f:38:7b:62:
                    cc:95:94:7c:7e:ce:47:97:d4:69:e5:a9:d0:7f:bf:
                    80:95:62:39:a3:f0:80:03:bd:95:c4:86:73:5c:a1:
                    b9:8c:dd:5a:a3:e7:29:11:37:fb:2d:9c:ee:c5:79:
                    aa:42:da:26:dd:c1:af:7e:e4:14:92:26:87:8c:5d:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:FD:5E:AD:EB:6F:77:6A:1E:08:CF:01:B3:2B:28:03:9A:B2:4C
            X509v3 Authority Key Identifier:
                keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:b0:cd:8e:55:c1:13:29:18:76:3b:65:0c:63:c3:9c:b8:
         cd:16:86:9a:4d:b1:12:75:55:58:f1:2d:b3:58:fc:b2:0f:35:
         64:cf:cc:83:ac:ed:a9:3e:a8:e3:71:bb:3e:50:21:c0:01:41:
         a5:0c:ba:22:ee:23:8e:ff:f1:4f:2b:d6:01:56:e3:da:45:9b:
         04:7c:3c:76:bd:76:7c:7a:b9:72:5e:26:84:a1:d6:37:a7:c7:
         dc:d9:7a:bb:62:c1:85:90:65:cc:db:07:53:e1:a6:23:1d:56:
         e3:41:ba:ec:f8:35:e0:d0:54:97:df:93:cb:55:8e:ed:ab:8e:
         9a:38:e2:23:a6:b5:a3:d7:e6:fe:12:bf:f8:9b:0b:d0:95:8e:
         9f:d2:4b:53:0f:ba:9b:f6:eb:34:21:8a:62:07:0d:be:db:41:
         6a:4d:01:16:5f:4d:e2:44:e8:01:b9:59:dd:05:ec:b9:b7:50:
         f2:ee:f3:40:b5:bf:97:76:ed:35:d2:ad:13:06:74:65:9a:9a:
         f0:75:a6:00:3b:19:8e:c0:1b:25:11:2b:3d:f6:bf:ca:0e:78:
         ad:a3:bf:38:9c:1d:7e:bc:44:72:73:0c:d5:ad:3b:39:26:d6:
         7c:81:da:c5:12:73:bd:84:86:16:8a:59:3f:dc:b1:ef:df:ec:
         9f:d9:a8:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw
OTc4MTVBMzUwHhcNMjUwNDA0MjIyNTM4WhcNMjUwNDExMjIyNTM4WjAYMRYwFAYD
VQQDEw02N2YwNWM2Mi0zNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs84hj0wtMO2cBaVnHQPRZKY8+7N26345oI1YJVpCPPLzuQQ/13m/lmN2kPpI
VBU6I3kiUwjFZ5+L7kFFeMpHjHKtRX3mhZvygf6b8HVSVHTRHhcMYtOZ03GbRsPT
VqQSI9zQHPSZeU9p+qiSqxa1lweCg7yWnvCAdsgbESJAND3TwCRtdaLzOfGvyS3B
5k5i0FW57Zv2EmjAqYID3nlVfMo6sBlQ06P3Jcmq3mPBuPO6pOU80+AsTKJv9lgk
kx84e2LMlZR8fs5Hl9Rp5anQf7+AlWI5o/CAA72VxIZzXKG5jN1ao+cpETf7LZzu
xXmqQtom3cGvfuQUkiaHjF2GqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFun/V6t
6293ah4IzwGzKygDmrJMMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD
NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkJFQS9BQTdFMzkxQTZDNkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00t
N2JSRTBad3dvQThKZUJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTpbDNjlXBEykYdjtlDGPDnLjNFoaaTbESdVVY8S2zWPyyDzVkz8yD
rO2pPqjjcbs+UCHAAUGlDLoi7iOO//FPK9YBVuPaRZsEfDx2vXZ8erlyXiaEodY3
p8fc2Xq7YsGFkGXM2wdT4aYjHVbjQbrs+DXg0FSX35PLVY7tq46aOOIjprWj1+b+
Er/4mwvQlY6f0ktTD7qb9us0IYpiBw2+20FqTQEWX03iROgBuVndBey5t1Dy7vNA
tb+Xdu010q0TBnRlmprwdaYAOxmOwBslESs99r/KDnito784nB1+vERycwzVrTs5
JtZ8gdrFEnO9hIYWilk/3LHv3+yf2aiv
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:46 2025 by rpki-client