Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File:                     I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier:          EXdwIBr6Y5kbphqRQWMtc0Oh/Ld/MTxCSDlzizbAXaQ=
Subject key identifier:   FB:F7:48:04:95:0F:8A:C0:A2:D7:77:4D:7B:E6:9C:01:86:33:68:6E
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer:       /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number:          0149
Signing time:             Sat 07 Jun 2025 03:48:18 +0000
Manifest this update:     Sat 07 Jun 2025 03:48:17 +0000
Manifest next update:     Sat 14 Jun 2025 03:48:17 +0000
Files and hashes:         1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: qVF2fbI5BKBK23mqxOVxgj3VaMV3s5lZpT3fi4bCFPM=)
                          2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=)
                          3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
                          rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 03:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
        Validity
            Not Before: Jun  7 03:48:17 2025 GMT
            Not After : Jun 14 03:48:17 2025 GMT
        Subject: CN=6843b682-3c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:19:a3:30:38:3b:ef:19:47:db:e7:7e:d2:
                    ef:ec:d0:d2:1a:29:ea:3c:c8:af:98:51:4a:6c:74:
                    2a:20:5c:f7:1d:e8:06:5e:25:9e:ee:eb:12:2f:ba:
                    d7:dd:ff:6f:bd:d2:c6:eb:02:9f:bc:1a:ea:35:b9:
                    1d:3a:00:f5:8d:5a:4d:15:14:2f:6c:6d:a0:e6:37:
                    33:1b:e6:5b:bc:dd:f5:98:f7:76:5f:90:98:93:5e:
                    44:f3:3c:d4:0e:eb:84:d5:b6:6d:64:58:44:fc:69:
                    3e:24:40:eb:99:89:b8:0d:e5:b9:b6:d4:8e:24:8f:
                    22:da:9e:b6:43:00:c6:a0:8e:03:f1:a1:9a:af:87:
                    86:21:cc:61:e9:8c:05:94:2e:f3:3c:a6:6d:86:84:
                    d1:03:3a:b3:74:0b:50:ad:7a:d8:a0:ce:d0:3b:e1:
                    f9:42:bc:08:f9:d8:da:f1:44:45:a1:cc:ea:4a:e1:
                    2a:49:a0:73:9e:54:28:e5:d4:49:2c:b9:c7:2d:fd:
                    de:16:d2:eb:12:88:3e:8c:2e:76:0e:60:14:27:47:
                    f6:e2:57:b0:46:b6:12:90:8e:0a:84:f6:a7:79:36:
                    c3:cd:85:d1:e5:b5:c5:17:29:08:bc:ed:e8:18:c0:
                    c3:9d:bd:43:50:23:09:80:d8:35:e8:d8:42:1a:61:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:48:04:95:0F:8A:C0:A2:D7:77:4D:7B:E6:9C:01:86:33:68:6E
            X509v3 Authority Key Identifier:
                keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:27:5f:31:d2:bf:82:7d:63:c7:f4:f3:a1:8f:8b:47:87:
         a8:be:5b:6d:00:8f:83:05:36:43:83:dd:e0:c3:56:01:1a:e5:
         48:c4:59:70:aa:9a:ee:4c:1e:50:f3:50:cd:86:b3:27:ac:19:
         bb:43:b5:28:80:b0:0e:73:f6:98:9d:89:3a:fa:b8:c6:eb:08:
         3e:11:23:a0:0b:7f:1c:a2:14:68:bc:36:1f:52:a7:50:2a:c9:
         3b:b2:46:09:60:c0:32:a0:82:d3:32:55:c9:d8:f2:2b:d1:96:
         5e:63:65:9c:21:25:be:eb:00:14:da:94:3d:56:94:8b:bc:eb:
         5e:88:d2:f1:e5:80:56:28:23:42:99:0b:14:f4:64:1e:58:33:
         2e:63:9f:d5:53:5c:70:87:94:04:e6:11:58:fb:2c:48:d8:7d:
         11:1c:db:54:46:a8:99:0a:3f:ec:3d:8a:3f:df:b6:7d:68:0d:
         5a:d6:c9:58:ad:e9:41:8a:c0:a3:0d:b4:28:28:5d:db:08:f8:
         c7:4f:e2:23:ee:80:70:c1:ca:e8:1b:6c:65:75:20:8a:b0:b1:
         2c:0e:a5:07:98:8f:0c:c1:45:cf:51:d7:fb:79:08:21:b1:3c:
         db:d1:6a:ab:f5:65:f1:41:2d:6c:48:7f:4d:12:11:fd:12:6c:
         de:f7:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:44 2025 by rpki-client