Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          9dEQFzmza8mKoRWS283kTPXnM2/jB36iHIwrC9Jbvtg=
Subject key identifier:   07:73:9B:2C:A2:D5:E9:69:7F:F3:B3:AC:3D:99:9E:DC:1A:DD:CE:CA
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          63
Signing time:             Tue 03 Jun 2025 06:53:12 +0000
Manifest this update:     Tue 03 Jun 2025 06:53:11 +0000
Manifest next update:     Tue 10 Jun 2025 06:53:11 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: jtSAnyhIhK7bXoJoeJGfRQylPGLN4xkhlqdm1AXTqyQ=)
                          2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
                          3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Jun  3 06:53:11 2025 GMT
            Not After : Jun 10 06:53:11 2025 GMT
        Subject: CN=683e9bd7-029c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:90:42:be:1d:52:c1:9c:20:fe:8b:8e:0e:
                    7d:69:00:a6:3d:59:0c:d9:72:24:22:f7:7a:d1:ca:
                    3a:b6:3e:ed:28:22:4d:53:67:fa:08:94:24:98:40:
                    b0:89:a7:6a:b0:23:0c:43:f0:3b:6a:39:c3:e7:41:
                    35:92:36:f9:4c:73:42:cd:59:05:f5:82:04:26:35:
                    af:a5:46:c1:98:cb:c1:73:94:81:e5:1f:e0:37:c6:
                    6d:bb:3f:15:bd:01:a8:f3:33:ad:82:46:37:9d:8a:
                    df:0b:93:ec:83:89:cb:0e:ed:c3:f9:fd:78:3b:ba:
                    6a:05:5e:2f:dd:75:e4:77:29:77:5d:ec:e0:10:0f:
                    1f:70:ab:36:c2:ce:20:b6:61:43:5e:50:b4:45:ed:
                    3b:48:8d:34:78:9b:69:79:ed:b4:a1:0c:ac:e9:4d:
                    48:14:50:85:34:ba:94:eb:9e:f6:11:60:af:15:f3:
                    c8:c2:60:59:4a:dd:f9:4c:4c:12:e8:a9:57:f9:f7:
                    cc:83:a0:d6:73:3e:3b:2c:e0:48:e1:9c:f1:0d:ae:
                    06:1a:1a:3c:f6:5c:9c:2e:d3:7d:b9:59:f7:9a:73:
                    7a:a0:cc:ce:1c:5c:39:1a:c1:f3:77:e6:c8:3f:4d:
                    a4:ab:3f:ff:6a:08:6a:0f:e8:9b:bf:79:4a:1e:ee:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:73:9B:2C:A2:D5:E9:69:7F:F3:B3:AC:3D:99:9E:DC:1A:DD:CE:CA
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:09:4a:fd:65:d1:cf:70:7f:08:21:6b:d5:bc:5d:d6:8b:
         50:aa:68:d7:1f:c8:08:5f:c5:b9:7d:eb:99:07:da:f2:af:0f:
         d6:4e:61:72:bb:62:3c:0c:56:3a:3d:29:4f:c3:21:6f:f4:26:
         93:ee:5e:5c:35:94:1b:29:c8:a3:c2:52:a2:4a:a4:8d:eb:f9:
         f1:8a:68:4c:0f:fb:2a:54:48:f8:80:1a:a3:54:8b:db:6f:25:
         d3:4b:b5:7e:20:91:97:ab:46:e2:93:33:df:e0:86:e4:8b:70:
         24:0c:c4:9c:00:e3:4d:60:20:24:1c:6d:03:71:88:e6:0c:be:
         f7:69:3f:0e:e1:6d:7b:b5:ab:25:a7:63:1d:43:7b:8b:50:bc:
         25:91:3c:2f:7e:eb:be:f3:56:18:2c:70:12:b8:0e:23:ab:9f:
         66:1e:41:df:3a:33:3d:db:5d:36:3b:45:f3:a0:2c:f8:f2:0d:
         53:e5:82:ef:5a:0d:5c:1b:79:74:ac:e1:38:61:02:48:ac:cf:
         c1:3a:74:6d:24:57:48:75:12:a8:86:82:4e:ed:77:e2:43:df:
         70:a3:9c:ab:aa:fc:5b:a6:84:09:df:6c:48:4e:b1:90:c8:72:
         d5:97:0f:d4:65:1b:21:d9:60:73:32:26:6e:fb:25:26:c8:0d:
         8d:5b:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:40 2025 by rpki-client