Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
File:                     pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json)
Hash identifier:          ORDuyR1f6fWTmq7BSEqcRYaRifHb0SqFpiRTEcaT89U=
Subject key identifier:   21:F8:88:FB:B5:AE:99:76:08:C9:89:29:71:7D:08:B5:6B:93:DF:F4
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Certificate issuer:       /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial:       04C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
Manifest number:          04C3
Signing time:             Sat 31 May 2025 00:02:16 +0000
Manifest this update:     Sat 31 May 2025 00:02:15 +0000
Manifest next update:     Sat 07 Jun 2025 00:02:15 +0000
Files and hashes:         1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: eQLAC/abJGpreZQ6i16OM/vw9etbNM926q+TVVY5h9g=)
                          2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: W3CoFW/9z7UlujIbTWP3AOKXFMu+6O4kA5ioHKglL9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
        Validity
            Not Before: May 31 00:02:15 2025 GMT
            Not After : Jun  7 00:02:15 2025 GMT
        Subject: CN=683a4707-b164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:27:d2:ff:01:1a:8d:59:ad:34:b5:d9:7d:
                    2d:79:24:32:98:58:52:69:e7:9a:ba:bc:dc:2b:b4:
                    7c:a2:ef:09:ce:c4:1a:6e:4b:d7:c0:1c:7c:1d:7e:
                    c2:44:b3:ad:8b:27:df:f8:be:53:e6:77:0b:4b:2b:
                    96:e2:23:e0:7b:d5:fe:5f:03:5f:e5:82:62:d2:ed:
                    e7:a1:f1:89:27:80:3e:af:4c:20:d8:13:7d:4c:6a:
                    bc:d1:20:13:f6:90:88:7c:d1:f9:ba:f1:c2:e3:0d:
                    8a:77:8d:ec:e7:85:fc:da:17:25:15:eb:43:3f:5b:
                    80:8b:9b:26:72:87:4a:30:6d:58:69:7a:88:03:81:
                    70:aa:c9:da:36:3d:6d:c7:c9:d7:35:bc:7e:f1:0a:
                    09:44:e5:88:c1:7f:25:a9:10:e2:86:b2:e0:c1:8f:
                    31:d5:ba:cb:c2:a7:c2:74:96:43:71:8e:02:f3:fe:
                    63:a4:ba:88:ec:c0:ca:8f:52:6f:05:ae:d3:89:67:
                    b2:0b:bd:3e:1f:0e:05:66:1b:4a:a1:56:e4:68:dd:
                    e6:9d:5f:06:c1:3c:dc:bb:32:f1:94:8a:d9:bf:63:
                    e7:52:b6:fa:42:03:90:a8:47:6e:88:93:f3:c0:5b:
                    43:14:29:de:d9:11:f1:92:ca:b5:1b:dc:d6:84:31:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F8:88:FB:B5:AE:99:76:08:C9:89:29:71:7D:08:B5:6B:93:DF:F4
            X509v3 Authority Key Identifier:
                keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:c7:a7:5f:a1:f5:52:19:54:0c:fb:f6:17:07:17:08:c0:9b:
         5b:32:20:a7:37:37:d9:f7:61:8b:58:45:44:e2:bb:aa:4e:ba:
         37:50:bb:9a:fa:46:19:04:c5:8a:bb:8a:7c:9b:f5:c0:f7:52:
         12:51:f0:c3:9e:9c:7b:13:c3:60:dd:4c:7c:3b:23:13:95:4e:
         75:12:f7:e6:be:38:e0:e9:d8:6f:f7:1d:c3:c0:92:1f:33:84:
         60:6a:19:6c:5b:86:cf:e2:57:95:a2:22:a1:ad:07:85:df:d6:
         fc:82:75:1a:cf:63:30:c0:14:6d:e7:fa:70:8d:18:e9:40:df:
         e9:7a:0f:1b:e3:6e:ca:a9:39:89:b0:d9:e5:3b:6f:dc:e0:78:
         e4:d9:bd:e3:83:bc:8c:01:e2:ed:07:51:2b:87:1a:e8:6b:89:
         a5:e9:80:d8:64:08:71:34:b2:96:2b:4b:db:4e:22:89:ae:4a:
         e1:21:a6:cf:c5:cf:0d:ca:c1:95:d3:d0:5f:fc:2b:bf:64:eb:
         2a:28:bf:53:fe:d3:6a:23:03:78:a1:44:99:03:07:a1:d5:c6:
         7a:91:ad:13:56:dc:66:70:1e:cc:7b:7a:2b:26:b8:3c:09:4d:
         ba:d8:43:03:4d:08:70:8b:9a:6c:90:8a:65:9b:7e:d7:67:e3:
         14:a7:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:38:08 2025 by rpki-client