Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
File:                     -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json)
Hash identifier:          Yk3ZINwTjgfK0S7SXCkIqkXnsIQj9yUygpSJrSPrBeE=
Subject key identifier:   A1:6B:27:44:58:22:66:30:4D:18:0D:D7:BF:62:9C:75:9C:C0:66:35
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Certificate issuer:       /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
Manifest number:          AA
Signing time:             Sat 31 May 2025 05:39:10 +0000
Manifest this update:     Sat 31 May 2025 05:39:09 +0000
Manifest next update:     Sat 07 Jun 2025 05:39:09 +0000
Files and hashes:         1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: jK+2RjqZGNYeCIw928QViS4pPVH/ORDLumfMBKWA3M4=)
                          2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
        Validity
            Not Before: May 31 05:39:09 2025 GMT
            Not After : Jun  7 05:39:09 2025 GMT
        Subject: CN=683a95fd-d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:e9:ab:09:03:97:ed:9d:88:76:db:42:24:
                    c0:8e:aa:80:78:a9:a4:eb:57:5e:9c:68:a1:f9:87:
                    9a:41:3a:9f:84:19:05:02:02:62:4f:a5:db:6d:f8:
                    f8:b4:39:bb:5b:7e:80:15:36:aa:b5:e3:ff:e8:07:
                    e9:73:fc:e7:ea:df:22:da:5b:2c:63:04:55:a4:5a:
                    c4:03:64:f8:19:a2:2e:46:8d:7c:7a:29:fb:60:5b:
                    f5:2c:0f:7e:88:87:bb:9b:c2:fe:52:29:2d:6d:41:
                    78:70:df:56:16:71:74:c2:20:fb:66:99:ca:7e:75:
                    00:c9:04:25:6f:3e:de:28:4f:38:4d:61:d4:15:de:
                    a5:37:08:43:34:f1:a7:4e:c7:85:86:d5:f6:64:33:
                    c1:20:2e:11:35:18:a0:1c:49:d7:97:1e:56:cf:0a:
                    03:63:57:55:cd:2f:8a:5d:c4:61:e0:5e:f6:59:7e:
                    53:ff:f5:8c:09:e6:4f:a4:1d:ba:33:d3:d8:7e:c5:
                    8d:ae:9c:a1:f9:d8:8f:11:59:2d:32:dc:95:4c:53:
                    62:23:35:e5:f1:80:ae:85:9a:9a:be:29:50:c8:fd:
                    00:6a:16:bc:1f:86:07:3e:48:a0:48:82:04:86:45:
                    c0:3f:66:e8:2b:d1:f2:0e:32:31:c9:26:4b:19:8d:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6B:27:44:58:22:66:30:4D:18:0D:D7:BF:62:9C:75:9C:C0:66:35
            X509v3 Authority Key Identifier:
                keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:00:de:36:a7:af:3d:6b:f6:46:9d:50:5f:b5:16:71:79:
         71:a7:01:64:67:44:e5:fc:2b:0e:34:ce:3b:47:2d:fd:6d:9d:
         38:d5:f2:bd:7f:f9:b9:67:b3:c2:b9:32:4c:16:37:c2:54:21:
         80:4e:3a:0c:9b:18:a0:b4:6f:1d:de:bd:27:a4:85:31:85:55:
         62:7d:32:50:34:99:66:5a:14:fc:ad:f2:ce:9d:55:59:36:4a:
         a0:ac:fe:87:63:58:4f:08:c7:31:7f:fa:5f:20:f4:ef:c9:23:
         da:a7:20:a1:82:07:25:e9:ef:e5:4f:7d:27:06:a4:50:57:f7:
         ea:90:16:59:20:95:f8:c9:3e:0e:ab:9b:96:2b:cd:56:b2:12:
         51:bb:d0:b4:bc:41:d9:1a:a9:cc:69:50:23:8d:d4:19:9b:ec:
         d4:1c:69:0c:a0:62:17:2f:2d:5c:d3:22:74:cf:da:4f:13:a7:
         e4:90:79:6c:5e:67:ca:a7:41:6b:00:64:d4:b5:7e:c6:f3:d7:
         6e:97:60:ac:57:e2:01:45:b7:ec:0d:52:4b:40:91:c1:d1:21:
         6d:23:f3:32:ac:c2:99:93:94:43:d3:24:e9:26:08:68:24:11:
         a7:44:c4:29:8e:ba:24:33:73:57:9f:c5:02:b4:bb:27:aa:a1:
         76:60:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:03:31 2025 by rpki-client