Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
File:                     8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json)
Hash identifier:          FRiwvY3ZBrGZ5KvRs5Z5abkqt7bN+bgfH2SzoHvO+rE=
Subject key identifier:   02:DA:D7:C7:9C:99:7A:04:B2:09:71:32:B1:71:64:CE:54:33:44:14
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
Manifest number:          0119
Signing time:             Fri 13 Jun 2025 03:49:44 +0000
Manifest this update:     Fri 13 Jun 2025 03:49:43 +0000
Manifest next update:     Fri 20 Jun 2025 03:49:43 +0000
Files and hashes:         1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: YVvb9hMKC07TOGfKrL55VTTHzXikCR77mZ0xUsFIFKQ=)
                          2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Jun 13 03:49:43 2025 GMT
            Not After : Jun 20 03:49:43 2025 GMT
        Subject: CN=684b9fd7-a769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:a8:95:55:99:15:69:57:06:43:e0:6f:40:
                    09:97:29:49:b4:fb:65:3d:ec:50:9e:41:2a:be:9d:
                    de:59:eb:f7:15:32:b0:25:b6:c5:87:39:fa:12:88:
                    25:94:e7:e8:8e:fe:38:43:d3:14:a9:a3:8b:70:7a:
                    1a:31:6b:2b:f3:90:62:b2:74:6d:3b:13:cf:71:91:
                    a7:f4:b7:c5:44:e3:7b:dd:32:77:2c:02:5e:aa:76:
                    09:6b:39:6e:0f:cc:10:8e:62:b5:61:6a:f1:82:56:
                    1a:47:e8:43:47:4c:f1:ad:bc:0a:b6:e0:51:a9:42:
                    ba:a0:29:cc:cc:09:c2:74:5d:74:08:45:02:84:7e:
                    0e:85:e4:6d:f5:6c:10:f7:28:63:5a:2f:d1:19:bc:
                    01:ca:6d:6b:94:2f:fd:3a:52:22:a5:78:30:2f:33:
                    5c:56:fc:28:67:c3:ca:43:25:a4:28:af:fc:80:be:
                    e7:87:e2:11:28:7a:08:0b:ef:7f:0b:0d:2a:8c:fa:
                    55:4e:21:82:12:cd:cb:5a:97:f8:59:3f:b6:e7:e4:
                    8a:ba:28:69:1f:9f:b5:2a:b1:e5:9e:d8:b1:0e:af:
                    d2:48:70:11:49:66:1b:63:1b:82:16:58:d3:99:e0:
                    c4:4c:c0:3f:66:79:4a:30:70:c8:8f:1c:f7:9a:81:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:D7:C7:9C:99:7A:04:B2:09:71:32:B1:71:64:CE:54:33:44:14
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:e1:fe:f5:9c:82:f2:ea:1b:1f:04:b4:10:de:d6:13:a8:
         30:fc:f0:61:27:d7:fc:75:90:8a:d4:db:79:98:8e:48:68:63:
         95:55:8d:8a:bf:1f:d4:7a:99:30:7f:a6:d8:1c:29:6e:91:76:
         70:61:5b:ab:cc:17:ee:ca:d3:b7:3a:7a:49:fe:60:d6:6f:73:
         9e:d6:5f:88:bb:e4:61:d7:07:05:cb:54:4e:ff:1e:4e:5b:1c:
         a8:b0:b4:88:52:cc:62:c4:5c:2a:75:6c:7f:a2:dd:f7:c4:30:
         dd:da:e3:ce:bb:2e:53:4a:5f:94:f2:d5:09:27:17:82:a8:c2:
         35:e9:50:9e:75:fb:7b:42:d1:a2:45:4d:8c:68:51:bb:01:c9:
         0b:15:bb:ce:73:61:bf:c6:36:29:2c:4a:9d:41:7c:3e:40:64:
         d4:e8:a9:a8:db:df:52:01:0e:2b:48:b5:49:91:c4:44:d3:21:
         e5:55:ca:57:da:85:97:30:a6:63:c2:e4:62:53:ad:53:46:e4:
         3f:dc:49:48:e6:32:70:a3:24:a3:44:5c:00:c0:2d:46:6d:bb:
         31:21:24:b5:e8:90:73:45:8f:d1:80:b6:5c:be:67:17:c8:55:
         73:46:09:f1:64:58:5d:24:07:7e:30:6e:5d:ca:b9:42:16:b7:
         39:ed:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:15:06 2025 by rpki-client