Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          IXOESFbME81lC83MR+2HzXoSzivg+L70l62FFI1+7+I=
Subject key identifier:   F8:85:D3:86:10:20:3E:8E:BF:D6:BE:34:47:8C:A0:8E:A9:B8:47:CE
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0E82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0E5F
Signing time:             Fri 30 May 2025 17:55:53 +0000
Manifest this update:     Fri 30 May 2025 17:55:52 +0000
Manifest next update:     Fri 06 Jun 2025 17:55:52 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: tkWLSH00bcd3xD/PF+owihIv0t0YR3oalXo/s1CaG/Y=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3714 (0xe82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: May 30 17:55:52 2025 GMT
            Not After : Jun  6 17:55:52 2025 GMT
        Subject: CN=6839f129-f020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:9d:19:c1:c0:6e:e0:f8:c5:85:63:66:99:
                    93:ba:c7:52:99:58:3a:f6:1a:56:ba:66:db:74:77:
                    ad:5b:f6:66:69:4a:4f:ae:83:6a:20:2a:aa:db:57:
                    cd:31:51:98:2a:37:2d:cc:fb:e6:54:d4:70:70:8a:
                    15:b6:83:90:44:b2:18:b0:07:83:23:17:b9:d4:44:
                    1d:84:52:92:21:b4:51:d0:54:8b:3e:61:fc:00:aa:
                    a6:ab:67:2e:b3:04:3c:d8:9d:84:6f:16:92:f4:5f:
                    71:ec:74:7c:5a:33:f9:20:57:4e:8b:bb:c8:65:e2:
                    c2:a5:a4:f0:71:f8:aa:6a:58:91:d9:30:dc:5a:80:
                    e4:b2:93:a0:98:8f:ad:1f:fa:a6:3f:f7:08:27:9b:
                    12:82:e1:77:da:e8:68:59:ec:ef:25:9a:ce:ee:a8:
                    4a:ae:1e:a3:da:90:c0:23:f6:54:22:ea:17:28:36:
                    eb:97:10:43:cb:ba:c8:3a:14:50:a1:c0:5d:39:0c:
                    e0:56:98:84:60:5a:9d:1a:5b:22:f5:e4:85:d2:70:
                    1c:41:3b:54:22:53:f6:51:09:de:e8:e3:55:80:de:
                    08:00:16:7b:b0:54:33:a3:60:55:3d:c5:93:7e:86:
                    cc:a5:ca:b0:03:50:1b:9a:bc:bb:d0:77:fe:09:2a:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:85:D3:86:10:20:3E:8E:BF:D6:BE:34:47:8C:A0:8E:A9:B8:47:CE
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4c:09:fa:e0:e3:d9:4f:b5:4f:1b:7e:fe:cc:59:d3:76:9f:
         8f:84:b7:46:30:65:af:63:a6:d8:3f:79:5a:7b:11:44:73:bc:
         c7:e8:8b:4e:a3:5a:18:79:9e:80:b4:d2:71:2d:37:53:f8:ba:
         de:2f:61:65:b9:97:d4:cb:a0:26:ee:b6:fe:7e:78:68:8e:73:
         a0:e8:a9:b7:a3:f5:a8:f4:09:52:b8:8c:85:61:a1:2a:fd:0b:
         a1:0f:e2:7f:bd:b3:cb:21:7f:9f:30:b1:ea:9a:b1:fb:5b:64:
         46:f2:b6:d4:5f:8d:ce:fd:ed:b9:e5:e5:55:78:c5:77:63:58:
         84:de:41:c6:39:d1:6d:1a:19:75:b6:ed:e9:96:46:c2:b9:d2:
         b8:04:15:2e:03:ac:6f:f5:f5:50:2b:04:25:a5:99:a7:f5:87:
         47:38:9c:8b:32:aa:87:0c:3e:4d:89:9b:e7:0e:d4:c8:78:6e:
         8d:3a:66:cc:fe:c1:bd:58:0f:8f:39:72:0b:0d:70:35:2b:8e:
         64:30:96:83:19:fd:80:b2:59:17:b2:3c:15:ba:5d:60:3b:56:
         6f:fa:49:a2:8b:e0:43:d1:88:a5:72:f0:cc:7b:0a:7c:a2:3c:
         44:b3:5a:be:d8:39:4f:9d:5e:4a:cf:6f:b1:ae:e4:f7:f3:ad:
         50:dd:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:11:26 2025 by rpki-client