Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          6Oe42/gfSSkh8daa9zEr9U9QMuPl1UNVh7yiGPAQDOg=
Subject key identifier:   67:AC:F6:03:5A:89:E4:CD:63:48:DF:FC:C4:DF:14:96:E5:3E:92:9F
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          D3
Signing time:             Wed 23 Jul 2025 05:57:12 +0000
Manifest this update:     Wed 23 Jul 2025 05:57:12 +0000
Manifest next update:     Wed 30 Jul 2025 05:57:12 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: DDrWnbTVMpIR8gf0OQrEuiuR/Nyi97t5Fk9r1rJxbtk=)
                          2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=)
                          3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: Jul 23 05:57:12 2025 GMT
            Not After : Jul 30 05:57:12 2025 GMT
        Subject: CN=688079b8-db36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:7d:95:e4:de:22:2b:dc:c7:8a:cf:de:40:
                    7b:79:8a:98:69:e0:fe:74:9b:bb:2e:f9:a0:b8:a3:
                    29:04:83:63:43:de:dc:a3:97:5a:45:32:14:74:91:
                    7c:04:49:5c:01:9e:39:31:41:17:41:d9:83:42:8a:
                    8f:bb:ae:cc:fd:cf:87:63:d0:85:d1:a1:8c:31:16:
                    29:6a:21:9e:9e:d9:8d:72:fc:71:5a:23:2d:1c:97:
                    b2:1d:11:05:1d:ba:e0:56:d4:b3:c6:e4:7e:b7:12:
                    ad:5f:94:19:69:cb:a7:a6:45:43:6b:e2:ef:c2:bb:
                    0a:53:0c:ec:84:6d:28:25:22:d8:82:b5:d1:d0:26:
                    ef:6e:cd:e4:86:17:2a:0b:be:19:1a:fc:e8:eb:1b:
                    18:3a:da:11:5a:9b:da:b4:ae:a6:76:71:54:6c:a5:
                    62:7c:69:82:8a:b9:b9:75:a3:a6:32:11:b5:06:2a:
                    db:cc:04:cc:c7:31:35:59:5b:24:15:68:87:70:b6:
                    ec:00:32:f9:74:4c:91:2d:9d:4c:b4:46:f2:53:cf:
                    0a:80:9f:04:62:8d:bc:f2:b4:86:f9:5b:48:b4:ef:
                    90:e8:a9:ba:6f:d1:7d:c0:c6:d2:4e:11:e3:5a:fa:
                    74:d8:63:ed:3f:bd:fe:c0:27:39:63:75:cc:fc:d6:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:F6:03:5A:89:E4:CD:63:48:DF:FC:C4:DF:14:96:E5:3E:92:9F
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:dc:46:16:0f:ca:90:41:db:67:4e:3f:1c:29:d5:bc:6f:
         30:c7:86:d8:ea:ec:cc:2e:4f:6f:d3:20:74:14:80:51:06:d3:
         ff:87:9e:30:4e:58:e9:d9:f9:05:33:4b:e1:34:66:df:96:b4:
         09:90:1b:a7:0c:32:90:9b:33:0a:64:74:a1:88:10:53:49:b5:
         ac:1c:23:2d:0c:62:9d:b1:ae:5a:89:3c:8c:e7:ca:0d:27:66:
         4c:81:52:33:cd:0e:80:bc:6e:60:fb:63:09:70:98:81:fb:a4:
         93:9d:3a:5c:3d:b6:85:6b:af:13:c9:47:48:a1:0e:34:e6:9b:
         05:66:7d:84:79:28:86:2f:3a:9b:16:ec:c1:27:26:dd:e9:b3:
         ec:ec:ba:3c:ba:d0:f4:4f:9e:91:95:ad:65:7b:e4:05:a8:b3:
         79:15:d8:6f:a9:b1:25:01:9e:f0:43:16:3f:08:85:31:a9:0a:
         f7:68:88:15:02:37:e8:9d:eb:b2:ec:a3:55:c2:df:e8:63:5c:
         3b:00:c3:dc:81:83:4e:ba:20:4c:b6:27:f1:b1:b8:23:13:df:
         49:ef:fb:ca:55:b0:8d:5c:01:c3:08:2c:70:f1:c9:47:6a:34:
         fb:46:2a:03:35:75:42:58:13:ae:f0:46:a9:90:00:a3:a9:26:
         25:a5:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:17 2025 by rpki-client