Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          UoPDP165asTJNfO82wjxnybjI1NIncVkwC7PiYtx2qM=
Subject key identifier:   05:50:2D:1E:4C:75:3C:E2:2B:C4:1D:67:AA:6F:E6:B0:D8:DB:7A:53
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0A56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0A50
Signing time:             Fri 30 May 2025 19:52:24 +0000
Manifest this update:     Fri 30 May 2025 19:52:23 +0000
Manifest next update:     Fri 06 Jun 2025 19:52:23 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: tbAkkRsK01uyGxliHGJ9DrbF1vRI1nEreVwur1lZclk=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
        Validity
            Not Before: May 30 19:52:23 2025 GMT
            Not After : Jun  6 19:52:23 2025 GMT
        Subject: CN=683a0c78-077a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:c9:3a:cb:45:03:3f:e6:b0:cd:24:2a:43:
                    67:21:e6:e8:a7:3b:60:c9:bc:1a:03:dd:af:57:c5:
                    2e:f8:31:32:a5:71:00:48:02:2b:1f:c4:34:93:10:
                    2e:61:44:41:71:55:16:80:e2:19:5e:c6:c4:63:2a:
                    5e:61:25:9b:00:3b:13:d8:6c:39:52:22:7b:34:cb:
                    9a:95:bd:5b:1d:1b:34:ee:77:f1:a0:50:2f:a5:61:
                    cb:93:fa:a7:a3:b0:f0:c5:21:4c:eb:23:60:a9:41:
                    65:53:09:9e:39:ff:f5:a6:92:91:6c:44:5f:9f:4e:
                    84:da:d8:10:81:2f:d9:97:00:3a:10:cd:cd:a2:f9:
                    dc:76:9f:ac:5c:28:a7:5b:07:09:3a:ee:5c:f7:b9:
                    5e:0c:bc:cf:f1:7c:66:81:b4:f5:08:59:dd:9c:a4:
                    bf:8f:b4:d9:3f:7b:0d:94:1c:ef:d4:9f:d0:0c:b0:
                    c9:f2:43:47:cf:22:07:c5:51:d3:dc:4c:7f:67:19:
                    d2:c6:94:e4:14:95:fd:50:a1:fc:54:2a:c9:91:fb:
                    b8:49:a8:5d:93:99:05:80:5d:18:a1:65:ed:3e:f6:
                    01:70:5a:c4:08:38:98:e9:90:c8:31:3d:ef:e7:36:
                    10:2f:c1:22:82:36:f7:f4:48:24:12:21:77:a2:f2:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:2D:1E:4C:75:3C:E2:2B:C4:1D:67:AA:6F:E6:B0:D8:DB:7A:53
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:fe:c9:08:8e:53:70:ca:f9:9e:66:9a:72:78:49:89:f6:
         0e:4b:be:c7:4b:79:67:c0:dc:87:a1:37:34:18:fe:00:f1:e2:
         bc:9a:25:27:7c:3f:d1:ab:72:35:64:f5:42:dc:ab:f4:26:1a:
         e4:2d:cc:74:e6:2e:b7:c2:56:eb:ef:7d:88:93:2c:af:80:93:
         fb:68:2a:e5:12:65:c4:c1:60:30:ba:43:6c:97:a8:88:c1:21:
         52:d4:2d:37:0e:fa:62:a0:3f:ee:75:82:3a:b6:9f:ad:b0:2c:
         af:c6:66:d4:9a:5f:22:86:ab:0c:0a:5c:22:53:d5:c0:6c:7e:
         fb:27:f8:c4:ec:c2:44:22:4a:27:43:b6:d2:31:22:af:94:e6:
         a6:59:79:2e:5a:26:8b:da:5d:3e:1d:bc:b2:28:0f:8e:b2:1e:
         af:6d:5a:a2:88:c3:a9:1d:8c:3c:0d:fe:50:44:71:f8:ba:a7:
         ff:59:d9:5e:03:26:4d:83:e1:62:51:32:17:2c:b7:c2:b6:1d:
         a4:a8:3c:bd:ba:12:8e:ca:30:c6:c5:30:28:e2:59:86:9e:2d:
         46:ca:d1:f2:04:37:a1:d9:4c:60:fd:e8:fe:69:d4:f0:11:e8:
         46:23:25:67:ed:dc:bc:f8:f9:ef:72:e5:a3:85:a8:f6:67:34:
         82:c1:fc:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4
RDFFMDU2QzkwHhcNMjUwNTMwMTk1MjIzWhcNMjUwNjA2MTk1MjIzWjAYMRYwFAYD
VQQDEw02ODNhMGM3OC0wNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuDJOstFAz/msM0kKkNnIebopztgybwaA92vV8Uu+DEypXEASAIrH8Q0kxAu
YURBcVUWgOIZXsbEYypeYSWbADsT2Gw5UiJ7NMualb1bHRs07nfxoFAvpWHLk/qn
o7DwxSFM6yNgqUFlUwmeOf/1ppKRbERfn06E2tgQgS/ZlwA6EM3Novncdp+sXCin
WwcJOu5c97leDLzP8XxmgbT1CFndnKS/j7TZP3sNlBzv1J/QDLDJ8kNHzyIHxVHT
3Ex/ZxnSxpTkFJX9UKH8VCrJkfu4Sahdk5kFgF0YoWXtPvYBcFrECDiY6ZDIMT3v
5zYQL8Eigjb39EgkEiF3ovJnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVQLR5M
dTziK8QdZ6pv5rDY23pTMB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2
MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTgyMS8yMzlCRkM2NDY2MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9V
N1NSSFU1OFRfa3FOSGdWc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMS/7JCI5TcMr5nmaacnhJifYOS77HS3lnwNyHoTc0GP4A8eK8miUn
fD/Rq3I1ZPVC3Kv0JhrkLcx05i63wlbr732IkyyvgJP7aCrlEmXEwWAwukNsl6iI
wSFS1C03DvpioD/udYI6tp+tsCyvxmbUml8ihqsMClwiU9XAbH77J/jE7MJEIkon
Q7bSMSKvlOamWXkuWiaL2l0+HbyyKA+Osh6vbVqiiMOpHYw8Df5QRHH4uqf/Wdle
AyZNg+FiUTIXLLfCth2kqDy9uhKOyjDGxTAo4lmGni1GytHyBDeh2Uxg/ej+adTw
EehGIyVn7dy8+PnvcuWjhaj2ZzSCwfw0
-----END CERTIFICATE-----
Generated at Sat May 31 17:03:28 2025 by rpki-client