Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File:                     40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier:          mLXvOf9qVXKQY4apOGx3ui75z0pSXoNdutjAgaNC3Mo=
Subject key identifier:   16:18:BA:A7:09:F9:11:DE:38:75:10:06:35:BD:BF:95:D9:06:02:DF
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number:          02DF
Signing time:             Mon 09 Jun 2025 00:54:38 +0000
Manifest this update:     Mon 09 Jun 2025 00:54:38 +0000
Manifest next update:     Mon 16 Jun 2025 00:54:38 +0000
Files and hashes:         1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: BS8SvDGCbLUpEly1I7A9ABuGVd2Psk9byg4ZCfeT++A=)
                          2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=)
                          3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=)
                          4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 00:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Jun  9 00:54:38 2025 GMT
            Not After : Jun 16 00:54:38 2025 GMT
        Subject: CN=684630ce-c630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:7c:66:c5:26:75:ad:15:c1:82:ce:3f:be:
                    82:2e:24:4d:6e:c2:9f:50:f1:b3:51:f1:6d:6c:de:
                    06:97:39:35:cc:ee:c1:b7:b2:c6:c8:08:85:28:2d:
                    04:fd:8d:6f:eb:20:e9:d0:b5:dc:d5:26:ed:e9:9d:
                    3f:1b:13:a4:e2:bd:c0:05:99:fd:f2:91:55:ed:ae:
                    00:df:55:04:ee:5e:1a:9a:17:c1:6e:56:00:3c:86:
                    29:f0:9f:92:5e:ae:fb:2a:42:18:40:86:80:18:06:
                    d3:ac:0b:b1:25:4d:a4:ac:49:73:97:33:93:be:54:
                    79:33:53:64:ab:7f:f8:78:e5:76:92:2d:ef:e6:61:
                    c0:86:5c:bf:a3:d9:39:56:7d:da:3a:0a:62:23:54:
                    5f:30:22:55:17:bd:f9:47:f3:12:90:df:80:77:34:
                    17:74:41:8b:ae:ca:ed:13:08:16:2e:60:11:c0:fc:
                    68:b9:7c:58:a8:07:8c:dc:2d:98:22:27:ba:d3:24:
                    24:d8:77:3e:a6:7f:97:fa:49:54:65:07:79:62:bd:
                    53:06:d3:95:18:20:74:8f:b7:69:6c:36:73:e0:29:
                    8c:cb:da:2a:04:58:b4:99:5f:32:18:ac:ae:c5:74:
                    08:6b:6c:88:0d:14:b6:70:05:dc:3e:5f:ee:cc:bd:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:BA:A7:09:F9:11:DE:38:75:10:06:35:BD:BF:95:D9:06:02:DF
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:70:af:6f:d7:78:4d:fd:8e:97:64:a4:60:07:86:e9:06:8a:
         0b:e5:5e:d7:3f:69:41:41:30:b2:d8:b5:51:8a:b5:3f:79:ff:
         b5:30:29:f0:2a:95:d7:57:d5:a8:07:0f:93:5c:f0:ec:e3:14:
         65:bb:60:c1:91:c9:1f:fe:6c:9d:4f:7b:28:c3:d8:16:62:36:
         af:63:69:49:6c:ae:d0:4a:8e:fa:d8:a2:bf:5b:bc:d2:e8:07:
         1a:a0:94:a1:c7:b9:95:81:8d:ba:e7:09:7d:f7:22:93:b5:d7:
         98:01:4e:9b:bd:fb:6a:8a:09:2f:99:27:ef:fd:70:6d:39:96:
         c0:95:72:08:8d:15:3a:b5:77:ea:d8:b1:ab:68:21:20:eb:1a:
         ae:ac:ee:bb:25:4f:85:00:3b:6f:f0:26:cd:09:71:81:df:d9:
         5e:8a:ca:8d:d5:0b:cf:2a:17:de:af:b0:29:e0:e8:33:ea:93:
         7f:89:b1:b2:e9:76:6d:28:82:16:d9:86:64:73:ff:90:7e:0b:
         d4:c6:bd:72:03:35:ba:8c:87:51:33:38:0b:f2:c4:68:ab:e7:
         3c:3c:36:88:a6:dc:d4:99:17:8f:a5:28:7e:4f:e3:98:ce:7d:
         bd:81:5e:37:a7:0e:b5:6e:2f:6b:26:b1:d9:ca:bb:6b:8d:28:
         42:0c:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:26 2025 by rpki-client