Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          QEONrasetW6mLZaY6X51ufkLP5H3iioiBR1rswStsms=
Subject key identifier:   70:77:C0:C2:D3:81:43:95:B9:EC:C2:21:A8:C3:8A:F5:8D:32:EC:D0
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0EED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0EE4
Signing time:             Fri 30 May 2025 17:50:12 +0000
Manifest this update:     Fri 30 May 2025 17:50:11 +0000
Manifest next update:     Fri 06 Jun 2025 17:50:11 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: F10Y23+fV4cRMkyX7fzqkJ7ERzQKohvM9S4uyptOt2A=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3821 (0xeed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: May 30 17:50:11 2025 GMT
            Not After : Jun  6 17:50:11 2025 GMT
        Subject: CN=6839efd4-6657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:0c:0f:d4:c3:93:42:5e:56:36:71:93:52:
                    9f:35:52:10:51:c1:0f:1c:a1:f3:4b:ff:c6:27:39:
                    70:f3:b4:06:2f:71:d8:33:42:a6:b7:fb:6c:6d:58:
                    7a:b5:30:57:08:02:62:1a:67:10:0a:35:cb:b2:26:
                    3d:09:46:06:f6:4a:e2:45:c3:9f:a9:e5:77:39:d2:
                    11:70:c6:96:b1:cd:8f:dd:32:ef:53:2c:21:b5:77:
                    c4:96:2e:4f:9a:cc:6c:a7:61:3e:0e:88:1a:c8:32:
                    1e:22:34:08:b2:35:d7:bd:13:ba:14:24:e2:0c:15:
                    23:21:a8:39:fe:fc:d4:84:50:85:c3:fa:65:42:10:
                    c4:41:b8:9d:e9:49:82:b9:5e:07:0e:d8:ef:a4:e0:
                    e0:42:7c:bc:0e:f2:28:d9:a3:dc:32:42:f3:e3:c2:
                    25:fc:0f:41:97:32:e3:95:bc:86:a6:1f:76:d2:67:
                    9e:39:0b:90:fe:0d:85:f6:bb:76:d5:ba:0c:ae:d0:
                    6d:a9:03:4b:04:dc:f2:ca:2c:4c:5a:a7:de:7a:e9:
                    4d:c2:df:99:83:76:97:84:dc:44:01:16:1f:7d:ca:
                    50:08:58:75:2f:61:f6:5e:7c:73:17:c3:68:67:e2:
                    d3:49:0c:88:ac:a8:90:b2:a0:51:e2:b3:0e:c6:3b:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:C0:C2:D3:81:43:95:B9:EC:C2:21:A8:C3:8A:F5:8D:32:EC:D0
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:60:58:bf:81:f0:fa:92:1b:c5:e9:02:34:67:6f:17:f5:
         27:ad:24:35:ff:b0:b7:94:75:c9:18:dd:a7:02:d4:f1:86:f7:
         91:b7:b6:8e:83:f8:2b:ba:b4:8b:cc:44:b6:c8:bf:86:be:23:
         82:87:dc:a1:19:5b:6e:c9:78:d1:dd:fa:ac:45:9b:7a:67:a9:
         19:bd:0f:08:1d:2d:1e:7f:6b:6c:b4:c8:aa:79:12:6e:d5:8e:
         52:9e:5a:5e:26:bf:2f:b5:46:20:5a:3f:d8:0b:0a:fe:ae:5a:
         1b:9a:51:51:3a:cb:e5:78:48:1c:df:5e:57:b2:57:15:97:fb:
         3d:88:fc:3c:94:a5:9a:67:e2:f0:3f:b7:6c:ff:af:35:ea:2b:
         8f:40:2b:c2:08:db:d1:7e:0e:d7:7a:2f:2f:05:af:ec:f3:a2:
         0e:67:96:90:ff:da:d1:3c:77:c5:c4:ad:66:c0:6f:30:a7:c3:
         e7:f8:8a:c4:9e:86:2d:f4:60:81:be:d7:95:f8:0b:7c:9d:c8:
         70:a9:93:6e:6b:3e:df:9b:c2:6a:01:7d:1b:b5:93:56:fb:6c:
         2f:f6:90:c0:32:64:c1:58:d2:2f:a7:2d:63:68:0b:b1:27:99:
         2d:2d:7b:d6:16:b5:bb:c7:d0:69:71:38:fd:ab:6b:36:6e:7c:
         da:de:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:34:20 2025 by rpki-client