Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft
File:                     mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json)
Hash identifier:          ByKVVxpppvG6Sz6Lx3F1SLn6uEYnOUHxNqrutv84MIA=
Subject key identifier:   E0:76:EA:AD:03:B3:44:AC:34:B2:28:ED:85:F9:7E:40:14:C0:C3:38
Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C
Certificate issuer:       /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft
Manifest number:          01DA
Signing time:             Wed 11 Jun 2025 02:14:00 +0000
Manifest this update:     Wed 11 Jun 2025 02:14:00 +0000
Manifest next update:     Wed 18 Jun 2025 02:14:00 +0000
Files and hashes:         1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: aL+36/WIrpL7mCnhz0pWFkG74KsjwHzOpQeLVxC8opU=)
                          2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl
                          rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 02:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C
        Validity
            Not Before: Jun 11 02:14:00 2025 GMT
            Not After : Jun 18 02:14:00 2025 GMT
        Subject: CN=6848e668-b0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:ff:9c:43:5c:ba:57:25:d3:6c:29:77:3c:
                    1c:95:eb:49:df:45:77:fb:1a:48:25:23:82:1c:2f:
                    f2:3b:59:7f:62:ed:30:b9:01:7b:58:b4:43:0a:46:
                    9c:7d:a2:94:da:ef:87:5c:65:a4:84:33:ca:51:37:
                    1d:67:0d:90:dc:8f:c4:c9:b3:33:6c:79:61:d4:ce:
                    23:60:a9:67:8b:f7:c9:2f:a8:c7:49:3f:66:c7:19:
                    8c:bf:ad:3e:c8:4a:1c:56:bd:6e:10:53:3d:2c:04:
                    df:ec:65:3d:20:03:3b:97:33:d8:35:81:61:07:e0:
                    15:81:8b:83:6d:ed:b6:28:b2:5d:c0:51:90:ec:9b:
                    86:e1:29:59:f6:c6:35:3d:e0:54:05:88:3e:26:86:
                    5c:52:5f:e5:b6:e9:a3:04:00:d4:b9:a5:47:c9:b7:
                    20:a6:1d:e7:dd:c7:fd:e5:aa:90:a4:9e:09:c0:47:
                    e4:06:ca:40:e1:3e:d1:d3:db:88:37:e6:60:a6:44:
                    38:5d:20:f5:28:6b:48:90:13:ed:8b:e9:67:f0:63:
                    75:5c:07:f6:15:5e:01:e1:4d:a2:91:c0:03:af:29:
                    bf:b3:9c:8e:28:25:da:eb:f1:40:d8:fc:e0:44:fe:
                    6b:03:08:46:bb:9c:d1:98:48:19:62:a0:0f:a4:4e:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:76:EA:AD:03:B3:44:AC:34:B2:28:ED:85:F9:7E:40:14:C0:C3:38
            X509v3 Authority Key Identifier:
                keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:54:4e:30:0f:0d:88:b3:b4:93:e3:fc:be:56:74:64:e1:
         2b:ee:1d:44:19:b2:11:af:12:04:42:05:22:2e:4e:7f:bc:b6:
         4f:10:80:b3:64:c8:d7:18:a1:04:2f:3d:a3:a6:f1:89:d6:fe:
         ba:55:33:bc:c4:45:6e:00:d0:f9:a8:ed:0d:08:ce:74:77:33:
         ff:69:8c:6a:4c:ea:37:5c:b1:95:0b:05:62:c8:23:c6:65:5b:
         73:a0:b7:fe:a4:01:e8:48:f5:b1:c3:3e:73:e4:51:f4:46:f0:
         a0:cf:06:1e:53:38:02:7c:0a:cf:59:89:1e:6a:6b:cc:b8:27:
         6e:ed:d3:4a:7e:0c:4a:e0:90:a5:1a:1d:c7:bc:04:bb:5a:eb:
         7a:9d:08:66:19:97:d8:35:40:a7:39:75:a0:c9:57:71:2d:2c:
         72:f3:fa:31:4c:c6:ef:73:c2:81:1b:62:5a:92:8f:29:c7:29:
         fa:61:7b:83:78:29:e9:42:8a:c4:9d:c9:40:af:e6:f8:72:87:
         e6:b7:8e:95:d1:53:74:20:8d:5e:20:6a:42:58:41:a7:8e:67:
         db:35:1f:51:f7:a0:ad:8d:20:17:e8:11:b8:95:9e:32:c2:03:
         14:ad:ae:4d:ed:ed:42:88:85:5d:6a:d7:f9:cd:16:e5:f1:c5:
         e7:f0:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:26:26 2025 by rpki-client