Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          iVngH1ZViPD4Yp/j+dA8+aGHuKpivAQ5VtK/m6SutAI=
Subject key identifier:   E4:EA:6E:64:A7:71:14:3B:95:7E:DC:8E:C9:B5:9D:97:88:C7:88:14
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          14E1
Signing time:             Mon 30 Jun 2025 17:02:55 +0000
Manifest this update:     Mon 30 Jun 2025 17:02:55 +0000
Manifest next update:     Mon 07 Jul 2025 17:02:55 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: BZzYfv3J9KjRm2n8PDvRwAZOfk7Cc1yEhK5X6EMQlbY=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5397 (0x1515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Jun 30 17:02:55 2025 GMT
            Not After : Jul  7 17:02:55 2025 GMT
        Subject: CN=6862c33f-92cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:af:c1:e3:a1:dd:9d:ee:56:77:d8:76:55:
                    8d:23:a0:a0:eb:e7:5d:4f:6e:d4:b2:84:35:4f:67:
                    6e:35:e6:14:59:54:4b:98:56:6a:62:53:cb:ca:6d:
                    fd:db:29:5a:d9:5f:db:52:dd:de:28:c8:76:8f:7a:
                    14:e2:4f:39:e5:00:bf:ee:82:89:d4:4a:2c:19:f2:
                    66:31:52:0d:2a:4c:96:83:f3:37:a2:e7:f8:ba:e9:
                    22:63:3a:45:bd:ca:dd:fe:ce:19:4c:ff:c0:ad:69:
                    29:cc:7e:18:38:34:f9:fe:10:ee:69:e6:ff:ec:70:
                    f4:91:49:64:3b:4e:9e:b2:f8:77:7a:1f:78:42:a0:
                    27:f5:76:6a:1e:88:3a:e6:ea:9f:41:69:ac:61:77:
                    0b:e4:b2:58:b3:dc:88:55:90:f3:bf:53:31:40:b1:
                    4d:59:79:8e:0a:29:03:46:a0:1d:eb:48:fd:75:9d:
                    4f:77:e5:af:f2:01:f6:43:f0:ed:cc:bb:0d:c4:ba:
                    b5:98:56:8e:c0:b9:75:6d:9e:58:cd:eb:5a:43:bd:
                    72:e3:41:5b:ea:ee:4c:06:1e:4b:58:0a:61:1d:4b:
                    52:3c:42:9d:60:cc:42:61:cd:de:2c:f1:5a:4e:c0:
                    9f:55:77:00:56:d1:22:65:28:f5:fc:2b:67:48:45:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:6E:64:A7:71:14:3B:95:7E:DC:8E:C9:B5:9D:97:88:C7:88:14
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:07:b3:48:c9:cb:71:65:fa:1a:29:8a:9d:21:08:16:f0:
         4a:c4:ee:29:91:dc:83:18:b1:39:a8:d1:c0:99:8f:f4:9a:8c:
         6d:d1:45:a3:0a:14:34:87:0e:51:5a:47:0c:57:18:fe:f1:fd:
         f9:5e:d1:9c:5a:54:a6:ff:7a:0b:d0:6d:ee:2b:5f:5c:3a:36:
         23:06:d6:04:07:10:ed:27:62:ee:a5:f3:1d:74:da:c9:a5:b1:
         ff:24:ca:a4:e2:ac:54:f1:b8:05:03:4e:7f:4a:37:a1:f9:53:
         b5:2d:10:ea:67:84:36:97:01:ff:d3:48:ce:8e:34:78:4f:d5:
         c0:c8:0b:10:18:be:0e:bd:cd:88:6a:a4:c6:0b:32:a1:4b:81:
         e8:33:5d:d4:bd:3d:f8:c5:23:80:6d:c9:9c:c8:2c:7c:d2:22:
         23:e1:ed:a0:51:4e:ae:a1:e6:6e:83:7c:dd:13:92:86:ff:e6:
         4b:80:e4:23:84:a2:12:5c:83:01:bb:31:cb:99:19:54:b4:bb:
         33:e1:bb:8d:1a:e1:55:2f:91:20:33:dc:ff:85:c0:de:ad:d4:
         bb:7f:2e:31:5b:aa:37:00:ff:66:57:a1:07:ac:36:1e:7a:c2:
         a6:43:7f:bb:b7:b4:ea:85:4f:cf:11:ed:cb:53:27:95:57:f2:
         62:b1:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:32:21 2025 by rpki-client