Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File:                     iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier:          VmMpxdEJFrpPPvn1JmB0aw0dvsh7X3/wEApbwMEtqjQ=
Subject key identifier:   DD:B9:EB:2F:FB:E7:14:9B:CD:F7:DD:76:23:26:CE:65:19:F4:37:04
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer:       /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number:          D4
Signing time:             Mon 09 Jun 2025 04:42:35 +0000
Manifest this update:     Mon 09 Jun 2025 04:42:35 +0000
Manifest next update:     Mon 16 Jun 2025 04:42:35 +0000
Files and hashes:         1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: fJlTyvOP+0VGE/SQN7UYXBJCCx+zama2N2TI1pND1Yo=)
                          2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
                          rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
        Validity
            Not Before: Jun  9 04:42:35 2025 GMT
            Not After : Jun 16 04:42:35 2025 GMT
        Subject: CN=6846663b-038d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:74:70:54:92:69:b1:94:7e:99:78:19:c5:
                    2e:7b:4f:13:92:ca:53:23:ba:00:ce:3d:7b:96:3d:
                    4b:3c:df:8e:a0:4b:bb:ec:e6:98:a6:d3:ee:73:bd:
                    a1:b3:c2:5a:ee:18:aa:d3:80:80:b2:89:92:00:09:
                    17:56:8c:4b:ed:b6:f8:c1:47:de:7e:40:e1:4c:15:
                    35:f5:12:a9:be:c0:ef:58:ad:28:2d:1c:a1:b6:1e:
                    63:d5:25:db:b5:84:0f:9e:aa:5d:7d:f1:6b:af:ce:
                    c3:11:e2:07:f0:92:7f:e5:67:41:bf:1b:79:9f:54:
                    f8:9e:4c:14:c5:f6:3e:28:3d:00:01:a3:4e:7f:80:
                    55:41:3d:75:74:4e:12:39:25:14:bc:99:af:4e:83:
                    63:a1:00:5a:ae:98:1c:d5:64:2e:49:af:ae:69:ed:
                    25:41:04:ca:6b:0e:8a:03:85:00:db:6e:fb:48:31:
                    55:45:44:25:71:f7:1d:19:c3:ce:f1:a2:57:57:d6:
                    e4:bd:bb:25:2e:cf:64:ee:d2:2c:37:d0:95:80:53:
                    c9:eb:b0:68:f4:d0:f6:c6:4f:c5:15:4f:53:d1:bd:
                    fa:87:97:e7:e4:ed:c7:d6:2b:6a:a8:85:36:d6:b5:
                    d3:45:d5:11:bf:e2:5f:40:de:fb:d0:74:9f:6e:aa:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:EB:2F:FB:E7:14:9B:CD:F7:DD:76:23:26:CE:65:19:F4:37:04
            X509v3 Authority Key Identifier:
                keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:cf:a9:b1:c0:26:2f:36:14:3d:85:18:f2:94:67:6c:93:
         d3:cb:5b:d5:56:a2:d3:84:14:ab:f7:0b:6a:bc:18:c4:5b:dc:
         74:63:9f:ba:0a:34:15:22:4b:c2:e4:18:65:19:d5:55:cf:47:
         55:6a:06:84:09:c0:62:79:2c:0e:ed:b5:a3:23:d2:20:72:b3:
         8f:2c:79:ba:81:b5:e1:fc:df:89:81:9d:5f:76:0c:86:3a:c1:
         cf:e3:5a:27:01:ca:c4:91:ca:3b:94:d4:e7:86:5a:62:14:59:
         92:e5:1d:b8:ee:32:04:a1:06:8c:69:15:61:f7:02:64:ed:e3:
         10:2f:73:c1:78:31:d7:92:12:82:6d:76:8d:6a:fa:13:93:e0:
         9d:0f:fd:3d:99:e4:f3:0b:4a:b1:f3:dc:1e:7c:8f:25:32:d7:
         4b:db:40:5e:22:a6:4d:7e:87:60:43:9c:8a:23:bc:84:e7:80:
         05:f9:32:35:fe:8c:81:f6:89:a7:2f:63:57:76:82:83:b0:63:
         87:e5:ab:2e:ac:39:ce:61:b5:c1:de:d4:0f:f4:f2:15:2a:d1:
         43:bf:ce:8e:7a:e2:97:ce:3c:89:b4:f9:92:63:12:80:49:ec:
         58:c7:8f:cb:49:95:f3:d1:d8:94:ae:a5:9a:ad:df:54:66:9a:
         9a:07:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:41:20 2025 by rpki-client