Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          0xAA65d+AyiCkASTHLftGTAQ3APzo7Mgx74mr1199+k=
Subject key identifier:   C0:62:F4:F9:3F:00:F6:1E:CC:A3:88:32:77:4A:29:CB:39:9C:EA:51
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          0238
Signing time:             Sat 31 May 2025 02:11:16 +0000
Manifest this update:     Sat 31 May 2025 02:11:15 +0000
Manifest next update:     Sat 07 Jun 2025 02:11:15 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: fsq9GIwcOb3cEEB88MFGuGTTrLuy4CMnSQhqXjEXwPQ=)
                          2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: rLG/37V+Ay9Dg6BnPVD6CJi+pJih1xEKl0lgY1diAvI=)
                          3: 4A82F578377111EDA5C68B0DC4F9AE02.roa (hash: crvAWfSU4cUDblQBIJE2EpNRvqCqivyWgcP1Unt1EK0=)
                          4: 49CA1D50377111EDA5C68B0DC4F9AE02.roa (hash: FxlXMb1VDjKPp2gvaZUru1qfhHQyZGjKWzaIqCuCA0o=)
                          5: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: ta3kqZ6slZkLymJ1Y+FGbOuuzC0KBODU2j3d2RnD6NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: May 31 02:11:15 2025 GMT
            Not After : Jun  7 02:11:15 2025 GMT
        Subject: CN=683a6543-6398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:72:bc:17:6c:31:f9:76:94:68:9b:0c:25:
                    51:9d:1c:d5:28:f2:c3:f5:d2:c2:5d:42:d1:e6:41:
                    76:9d:2a:99:23:78:e1:fd:29:96:23:0a:aa:ab:95:
                    5d:a3:7f:fb:ba:7d:1f:46:88:9e:b5:24:a7:80:3c:
                    4c:49:f9:29:b4:ae:9f:0d:f1:26:72:6d:b1:0f:be:
                    23:69:2f:04:9a:d3:15:e3:8a:4a:6a:b1:17:fb:c9:
                    dd:6e:f3:f9:fc:1a:96:d6:27:84:0e:06:ab:a0:49:
                    bd:09:79:6c:81:9e:54:37:76:87:b1:b5:ae:5e:44:
                    48:1b:3e:9b:35:40:be:5b:99:40:de:59:e4:12:38:
                    bb:f2:9d:2d:c0:07:92:03:ea:0a:da:93:46:b6:01:
                    70:c9:c9:44:af:98:fb:1b:54:e8:45:47:76:8d:e9:
                    ed:84:c7:44:70:f2:2f:3f:c2:8a:6e:8d:b3:40:be:
                    74:20:f3:e4:50:9c:ba:92:fa:5b:b8:75:48:20:c4:
                    f5:08:1e:6d:b0:c0:26:f3:d7:8b:a4:31:2d:3c:d0:
                    86:ff:34:3c:df:19:e6:0e:ae:6e:6d:f8:3a:ea:54:
                    6f:4a:6e:37:0b:b6:07:36:31:59:25:49:12:f9:fc:
                    dd:e8:5d:5e:ee:4f:2c:20:aa:c2:88:69:b0:a5:d9:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:F4:F9:3F:00:F6:1E:CC:A3:88:32:77:4A:29:CB:39:9C:EA:51
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:cd:8d:8a:d2:cf:d7:b5:4e:57:99:64:e0:c3:dc:61:b1:
         45:fc:ef:27:34:50:b1:0f:6c:ad:b0:b2:fd:f6:73:99:c7:74:
         ef:e0:d8:19:02:f9:8d:0f:15:8b:6a:01:28:df:bd:1d:1d:f9:
         9d:58:2f:72:43:01:d1:86:72:b8:63:a3:fc:8a:fa:ad:8a:a0:
         2a:64:5f:3b:99:37:ea:2e:3b:a9:a7:4d:8a:ef:7e:43:cd:68:
         7b:48:b6:f8:b1:38:82:ac:d0:9b:11:9e:77:eb:14:2c:69:d9:
         ac:e5:03:04:39:ae:73:6b:6e:01:2a:17:c1:71:1b:6a:7c:f8:
         d5:d3:40:df:e2:56:79:aa:3b:c4:93:17:cd:73:fa:7d:f9:69:
         ec:01:db:b1:f7:af:38:80:f0:0a:4a:2b:4f:3a:e6:74:e1:02:
         ab:f8:b4:eb:87:43:e7:0d:64:f3:ae:17:04:62:d0:fd:bc:fd:
         67:06:43:bd:39:1a:d2:c1:c4:6a:11:b8:0d:11:9b:93:21:1f:
         8c:9b:53:33:b3:b5:42:81:f4:1a:84:e7:8e:a0:7c:53:73:b3:
         0e:8a:3e:a8:53:f9:b8:54:2a:1f:d9:5e:4b:e7:50:b9:ef:c2:
         8c:a9:f4:6a:0f:e1:6f:2a:da:64:87:eb:9b:1e:c3:67:10:db:
         68:cd:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:33:02 2025 by rpki-client