Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
File:                     sae05J_PFfDFALickX8mZHJQ8K4.mft (raw, json)
Hash identifier:          rhukgTuYfWdjUzO+IEFKPHpg/NU2DU5YXHWwtxkKKi4=
Subject key identifier:   6C:0B:8C:04:87:2D:9D:33:81:5B:F8:BA:15:DB:72:44:34:3F:D1:03
Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE
Certificate issuer:       /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
Manifest number:          08
Signing time:             Sat 31 May 2025 07:42:43 +0000
Manifest this update:     Sat 31 May 2025 07:42:43 +0000
Manifest next update:     Sat 07 Jun 2025 07:42:43 +0000
Files and hashes:         1: sae05J_PFfDFALickX8mZHJQ8K4.crl (hash: +bTuyvA1t95FWOMeSCngHimrBB+RfYF62pcgYkCAKnc=)
                          2: BA4C0E94330911F08D233546C4F9AE02.roa (hash: dP93uYFjOQGVmzTzM0xXMIjOeOKOZofW9HJX5/7YBks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
        Validity
            Not Before: May 31 07:42:43 2025 GMT
            Not After : Jun  7 07:42:43 2025 GMT
        Subject: CN=683ab2f3-eb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:3a:5c:ad:72:f0:2d:7d:9f:37:0e:03:48:
                    2e:4d:2c:e5:ec:9e:61:ed:a8:3c:fe:b2:b1:62:e9:
                    9a:21:7a:7d:e1:e0:65:d4:df:2e:ba:a4:d1:ea:e4:
                    2d:49:7d:c3:14:4f:38:5f:76:d8:6f:38:d8:1c:bf:
                    27:d8:16:38:53:dd:e8:45:a5:95:01:ad:5f:20:0e:
                    73:4f:18:5b:9d:d4:52:39:94:f4:e5:36:50:c9:24:
                    de:26:b9:af:60:5b:e6:5e:29:25:5b:47:bb:61:a7:
                    ed:a4:c0:29:1c:18:ec:87:a9:63:3e:12:7c:67:be:
                    be:5a:5a:65:51:6d:1c:60:83:90:2e:28:18:fa:01:
                    96:08:ef:2e:23:64:ce:ca:34:15:a2:5e:d9:b8:b0:
                    e0:1c:81:36:a2:ab:39:ed:1e:68:02:20:83:a4:c3:
                    35:a5:54:4a:f5:1b:cb:fa:54:02:94:d5:81:d1:e4:
                    de:ad:86:67:df:49:ce:8e:56:0d:a8:5a:60:26:37:
                    c9:5d:4d:8d:12:ce:6a:09:45:30:38:84:3b:d0:54:
                    11:ad:57:3b:4b:30:21:63:1d:41:bc:a2:11:f9:92:
                    d5:f6:75:43:14:39:0c:af:3b:a7:4b:db:f8:46:d6:
                    4c:0b:21:e1:51:1b:66:34:75:0a:26:48:22:7d:1b:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0B:8C:04:87:2D:9D:33:81:5B:F8:BA:15:DB:72:44:34:3F:D1:03
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:06:0f:bb:49:4d:92:68:9f:21:64:be:55:80:e0:f0:77:
         f4:b6:0b:dc:aa:61:46:0c:b7:aa:67:e7:5d:33:33:fe:7c:77:
         50:36:1e:c7:4c:ca:5a:c6:a9:a1:b9:ce:05:fc:9c:b0:49:f0:
         fc:05:a8:48:a2:74:07:7e:a3:3c:18:d8:77:60:ec:12:91:e4:
         69:12:e6:de:73:30:48:e7:6a:37:35:88:42:1c:fa:68:a9:57:
         8e:45:04:4f:15:0b:8b:b1:b3:dd:9a:b2:f0:49:45:0d:b4:b2:
         5f:52:04:fa:93:a2:dd:a0:d2:03:be:77:e3:5b:56:98:f9:a1:
         29:7c:78:ac:0a:8d:90:93:a4:d1:7f:1b:b7:4b:d2:6b:0e:46:
         d9:c5:9d:0f:81:ff:7e:a7:66:88:a6:fc:d2:20:5d:5e:3f:5e:
         ff:8c:02:9a:ae:5b:95:bc:9e:b3:68:cd:7a:29:9d:46:e7:70:
         ff:e4:ac:f9:e3:3d:bf:f4:5d:09:77:11:db:f7:ba:b9:2a:39:
         18:6b:ff:62:30:e7:06:a7:d6:fe:31:47:c7:cf:bc:bb:2d:05:
         ef:44:06:2d:7e:ee:8b:25:8b:68:67:75:08:bc:70:b4:2b:cb:
         a2:60:0f:31:e3:0c:8f:dc:c7:31:2e:3f:8d:66:39:28:78:43:
         40:80:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:27:42 2025 by rpki-client