Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File:                     Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier:          5zPF/ysZVItwq1i0Ndd3JwphblCMAxZs1QwOQtiZdaM=
Subject key identifier:   12:C0:3C:45:64:33:5D:7F:2B:F8:25:76:DB:5A:1B:74:19:DE:B5:E8
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer:       /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number:          0138
Signing time:             Mon 21 Jul 2025 04:41:59 +0000
Manifest this update:     Mon 21 Jul 2025 04:41:59 +0000
Manifest next update:     Mon 28 Jul 2025 04:41:59 +0000
Files and hashes:         1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: ZzEyURhCW2D20Dg5p9RgbHFS3PxQ7AAHzhpvuoQ4z6Q=)
                          2: 8BBDAB46651411EFBBCB6F31C4F9AE02.roa (hash: /I9CcLQXhCW4GEfreSLW1LTWj50i7vh8PtKD8gQU1UQ=)
                          3: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: pW8SIPuT5kOD4eZTF7di+hTXS7DwDK8pm89HGFANye4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
        Validity
            Not Before: Jul 21 04:41:59 2025 GMT
            Not After : Jul 28 04:41:59 2025 GMT
        Subject: CN=687dc517-3742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:db:fb:35:19:4c:76:0e:e7:45:9c:80:ec:
                    25:a4:83:f6:3a:40:b0:f4:33:86:29:d8:1a:f2:1e:
                    6a:9c:fd:60:a5:da:d2:ee:a7:00:0f:d4:28:97:dc:
                    c0:3f:6a:b4:dc:5b:c7:89:92:4e:3c:f0:f6:63:2c:
                    a4:83:57:79:fe:ab:a5:c0:3f:da:01:45:94:6c:8d:
                    cf:3b:45:50:3b:5a:4c:ea:1d:cd:b7:70:93:00:fc:
                    0f:93:ea:68:5b:d0:a4:a0:8c:cc:c2:a9:f5:df:b5:
                    16:3b:ac:09:6a:0d:ce:49:6a:9a:1c:6d:3a:07:0a:
                    3a:ed:78:de:35:56:82:a1:d0:e9:b3:ab:fa:ed:7b:
                    42:a9:29:93:d9:22:b7:25:d9:3f:6f:17:af:fe:4a:
                    90:be:c4:6d:0c:8a:9d:70:a0:b4:bd:cd:40:9c:8c:
                    d6:5c:6d:14:dd:92:94:f8:af:be:7d:32:ff:db:69:
                    fe:6b:98:92:d0:dc:40:e6:18:8e:35:80:7c:9a:9d:
                    17:d2:fb:14:dd:74:f8:09:16:6e:39:0b:8a:ca:ff:
                    b7:0f:f5:da:32:9e:d5:ef:09:7b:74:77:5c:4f:e1:
                    c0:6b:73:ec:cf:d5:bc:56:45:b6:a7:54:0d:e6:a5:
                    a8:c0:dd:0f:b6:b0:4c:1f:5c:6d:1e:8b:d6:76:de:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:3C:45:64:33:5D:7F:2B:F8:25:76:DB:5A:1B:74:19:DE:B5:E8
            X509v3 Authority Key Identifier:
                keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:a3:d0:57:3c:61:9a:5e:d2:13:e4:d5:5a:80:47:33:79:
         75:b5:5b:8c:c8:47:7b:1a:9a:58:17:7a:86:22:05:3e:84:f0:
         92:21:30:a8:75:a3:12:c0:23:08:24:a0:8c:b4:4a:52:e1:a4:
         b6:85:be:46:7b:d9:7d:05:f7:11:bd:bd:b0:7a:74:0b:80:91:
         c3:6e:84:3b:eb:1f:60:e4:02:d3:41:de:10:06:9f:09:e3:00:
         c9:74:82:b8:20:ff:9e:15:04:d0:77:1b:d9:78:88:30:df:93:
         73:79:e6:b7:7d:36:c4:fb:2c:d7:b0:7f:05:ee:d6:b9:00:01:
         1a:ef:70:02:e4:8a:10:c5:c5:ac:b7:32:d7:b0:37:d1:58:a9:
         39:26:5e:4c:ba:f7:b7:03:30:ac:75:ab:c6:06:27:8c:28:01:
         f9:44:9a:71:06:b3:cb:08:65:84:d7:7c:44:46:e3:cf:90:00:
         cb:7f:8e:fc:da:65:09:91:d2:4f:55:f3:e2:0e:e6:e8:9e:e0:
         d2:1b:89:68:8a:d7:bb:82:3d:2f:6f:36:86:91:ee:79:ea:51:
         f6:fb:b2:7c:07:7d:e7:6a:c9:8d:48:43:c4:1c:f3:89:58:8a:
         c2:01:1a:1a:d1:a6:a6:33:a3:e5:5b:13:eb:bd:8e:65:19:16:
         82:4a:3d:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjAwNkQxMTAvBgNVBAUTKDQ2Rjk3MkQ3QjgzRENBMDYxREI5REZBQUYwMTc3RjJE
REYxRUU5MEEwHhcNMjUwNzIxMDQ0MTU5WhcNMjUwNzI4MDQ0MTU5WjAYMRYwFAYD
VQQDEw02ODdkYzUxNy0zNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwevb+zUZTHYO50WcgOwlpIP2OkCw9DOGKdga8h5qnP1gpdrS7qcAD9Qol9zA
P2q03FvHiZJOPPD2Yyykg1d5/qulwD/aAUWUbI3PO0VQO1pM6h3Nt3CTAPwPk+po
W9CkoIzMwqn137UWO6wJag3OSWqaHG06Bwo67XjeNVaCodDps6v67XtCqSmT2SK3
Jdk/bxev/kqQvsRtDIqdcKC0vc1AnIzWXG0U3ZKU+K++fTL/22n+a5iS0NxA5hiO
NYB8mp0X0vsU3XT4CRZuOQuKyv+3D/XaMp7V7wl7dHdcT+HAa3Psz9W8VkW2p1QN
5qWowN0PtrBMH1xtHovWdt5zXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLAPEVk
M11/K/gldttaG3QZ3rXoMB8GA1UdIwQYMBaAFEb5cte4PcoGHbnfqvAXfy3fHukK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDA2RC8zQzEwMEM5Mjk4
QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXlnWWR1ZC1xOEJkX0xkOGU2
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J2bHkxN2c5eWdZZHVkLXE4QmRfTGQ4ZTZRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDA2RC8zQzEwMEM5Mjk4QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXln
WWR1ZC1xOEJkX0xkOGU2UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB27aPQVzxhml7SE+TVWoBHM3l1tVuMyEd7GppYF3qGIgU+hPCSITCo
daMSwCMIJKCMtEpS4aS2hb5Ge9l9BfcRvb2wenQLgJHDboQ76x9g5ALTQd4QBp8J
4wDJdIK4IP+eFQTQdxvZeIgw35Nzeea3fTbE+yzXsH8F7ta5AAEa73AC5IoQxcWs
tzLXsDfRWKk5Jl5Muve3AzCsdavGBieMKAH5RJpxBrPLCGWE13xERuPPkADLf478
2mUJkdJPVfPiDubonuDSG4loite7gj0vbzaGke556lH2+7J8B33nasmNSEPEHPOJ
WIrCARoa0aamM6PlWxPrvY5lGRaCSj1f
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:50:54 2025 by rpki-client