Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          pTacZLHNvO4U2Yp3fR4rS0v0uqVzJFGeLmj36GnUbag=
Subject key identifier:   63:DD:A9:19:99:30:8F:E6:C8:02:97:74:8D:F3:C0:66:A2:6F:A9:99
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          03F6
Signing time:             Mon 09 Jun 2025 00:04:06 +0000
Manifest this update:     Mon 09 Jun 2025 00:04:05 +0000
Manifest next update:     Mon 16 Jun 2025 00:04:05 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: V3g/NVK55URTypuFVQmb0FiLxUli6puCcc7CwwXJB2I=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: t8XuoQmVWFDhGIw5z4xI5py7yU/yXUz4bzdYNO89YHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 00:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Jun  9 00:04:05 2025 GMT
            Not After : Jun 16 00:04:05 2025 GMT
        Subject: CN=684624f5-13da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:fd:f4:6a:83:e9:49:05:6c:03:d8:64:d8:
                    a0:62:c7:77:f3:34:e4:8a:17:d2:fd:64:0b:34:95:
                    9a:0b:39:e0:5e:9c:7a:41:52:8b:03:e0:0f:01:10:
                    de:74:d2:0f:85:e3:44:2d:31:19:4f:92:22:33:49:
                    88:f7:17:47:0f:27:82:05:45:3f:c3:e4:6f:0f:bf:
                    fd:39:91:b6:ae:f3:85:ac:4d:76:54:64:f5:e9:6b:
                    4c:cb:59:5d:c5:0a:f9:6e:f2:de:43:b3:5a:8b:b6:
                    1b:88:fc:c4:ef:75:47:5f:54:fa:d4:39:ba:0f:fc:
                    cb:d6:5a:e2:a9:34:15:a3:84:7c:01:bf:43:08:f3:
                    78:c2:53:b1:7f:18:cf:4c:79:34:aa:7d:4f:70:da:
                    cb:1b:2e:94:59:d5:57:17:41:d8:83:a6:bb:cf:0d:
                    2b:84:dc:85:98:77:e0:6b:e2:1f:ef:0a:05:81:cc:
                    a1:45:95:a6:64:1b:02:8b:99:57:b5:8a:e1:cc:45:
                    bb:2d:0f:f5:d8:b6:34:c7:c9:1a:cc:c7:96:7a:03:
                    a6:94:36:83:af:96:47:9c:78:e0:16:e1:10:ba:07:
                    47:5c:17:bc:29:e2:9e:7f:ac:41:50:eb:af:18:f1:
                    c2:9a:d2:66:67:65:46:08:24:4c:82:37:61:93:f3:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:A9:19:99:30:8F:E6:C8:02:97:74:8D:F3:C0:66:A2:6F:A9:99
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:4f:16:82:17:9b:a3:92:ca:48:4e:09:13:4c:c9:d9:54:f6:
         43:27:a3:e1:bc:45:a2:03:7d:27:c5:3a:48:f5:78:e0:84:a0:
         c7:3b:1e:9d:38:87:0f:a4:c6:cc:28:70:b0:41:42:00:cd:87:
         82:97:45:9f:ff:0e:0a:bc:11:ae:17:76:75:91:28:62:89:9f:
         4a:8e:ca:b6:63:98:59:03:eb:ad:b3:b8:3e:d8:df:fe:1d:1c:
         e7:c0:f8:2d:a8:be:79:ac:96:fc:b1:01:9d:55:94:be:5a:8e:
         c0:7d:fb:d0:c1:ed:15:4a:dd:6a:08:65:de:4e:44:18:ff:ed:
         cb:ce:cb:19:91:0f:16:9a:e1:af:d8:b8:be:e8:32:80:95:fa:
         ee:fd:52:20:98:a0:d8:07:cb:5d:41:16:0a:9d:56:59:80:20:
         a2:16:34:f2:67:63:39:c4:17:50:3f:fc:96:f7:db:25:a0:42:
         2f:e3:ca:0f:a9:5d:70:58:cf:a3:24:14:1a:7b:f9:2a:6a:a0:
         96:42:9f:5a:40:c6:98:7f:ec:e3:13:6a:81:8f:55:f0:9b:ad:
         a4:e1:18:37:0f:fc:49:1f:e7:98:8d:a2:c4:d6:95:16:e9:80:
         f7:8f:96:e4:2d:9e:ee:d5:3c:78:3c:bd:71:d6:6d:f4:68:5c:
         d7:4a:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:06:26 2025 by rpki-client