Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File:                     _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier:          s7zanOkbSUUFTay99gmtiESYJlWOcC1HdPiy/9MPEU0=
Subject key identifier:   3C:06:1D:F2:C4:CB:B4:4E:70:4B:01:99:83:D8:13:6A:7E:E9:11:6C
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number:          4D
Signing time:             Sat 31 May 2025 07:23:15 +0000
Manifest this update:     Sat 31 May 2025 07:23:14 +0000
Manifest next update:     Sat 07 Jun 2025 07:23:14 +0000
Files and hashes:         1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: muS74A4loUuVpfqVh28fSGhKik8wJJ56oxoz2cBe+so=)
                          2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=)
                          3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=)
                          4: 9C2A80FA099011F08EA9F20BC4F9AE02.roa (hash: goFGLeo3cJQ5XXhESgnKHMy4NdQpSGyyQNhR1oIebe0=)
                          5: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=)
                          6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: May 31 07:23:14 2025 GMT
            Not After : Jun  7 07:23:14 2025 GMT
        Subject: CN=683aae63-1492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6d:14:3e:b2:c5:88:ef:bd:6c:8d:c5:db:8f:
                    0c:e9:35:81:0b:99:08:f2:03:d9:8f:be:12:9a:c4:
                    36:0a:e1:3d:72:55:56:ab:69:fa:88:00:3c:7e:37:
                    c3:20:cb:b4:4b:6e:bd:6a:9e:94:3a:1c:9a:83:f6:
                    57:72:b1:0f:e4:82:b0:03:8a:87:51:27:b0:d3:52:
                    39:de:fa:67:3f:00:78:d3:4c:bf:cf:de:6c:8f:d6:
                    a0:db:0a:b7:b9:dd:8e:5a:d6:0e:1e:42:49:6b:5c:
                    75:66:a6:53:86:c4:9a:d6:5d:6d:34:79:df:f9:9a:
                    60:21:17:2d:1d:82:fb:5c:68:78:96:6d:0e:d5:6d:
                    29:b7:d5:3c:58:81:4b:be:e5:b1:32:3f:a8:3e:b9:
                    21:f9:72:01:73:c2:95:1f:01:33:e0:42:fb:c8:b9:
                    a1:6c:17:cd:a0:c7:47:c6:3a:ec:59:83:b8:85:28:
                    94:61:21:c7:45:ea:7f:43:31:53:51:53:f0:0e:df:
                    c1:09:ad:0d:ec:fc:cf:eb:ac:3e:d1:ff:7b:2f:42:
                    27:6e:da:49:be:67:3d:f6:45:84:81:04:76:2d:b1:
                    b9:d4:e9:16:96:ab:37:b9:de:c0:45:1e:e6:30:9a:
                    14:3f:3d:51:dd:66:11:55:11:b9:4c:54:16:f0:d3:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:06:1D:F2:C4:CB:B4:4E:70:4B:01:99:83:D8:13:6A:7E:E9:11:6C
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:5c:76:b1:2d:a0:13:1b:62:eb:3b:45:c7:6e:d8:9b:97:2d:
         53:36:96:34:4a:15:f7:31:0f:a5:22:8b:a4:7e:2e:aa:e9:07:
         c4:89:90:08:2d:46:c2:de:a5:92:a3:e1:8a:7a:cc:3b:29:04:
         c8:b0:46:5c:4d:b7:78:fa:60:37:83:15:2f:e7:f3:2c:81:43:
         f6:ec:52:97:7d:dd:b8:53:62:d6:99:53:ac:f0:bf:26:c3:5c:
         75:37:52:d9:8b:be:82:2b:20:b9:b7:91:8b:ff:22:1c:8f:8b:
         5e:43:23:d8:9f:dd:83:68:eb:b3:0d:68:e2:7a:3e:2a:93:37:
         fc:5b:7e:03:da:11:6c:7e:12:d1:c8:17:a6:09:0a:d1:55:f1:
         11:4f:93:4e:28:ef:8b:8c:75:e6:26:bd:37:a6:59:c9:40:f0:
         d0:ad:a1:e1:be:2b:80:25:a2:08:fb:20:3d:43:a7:d5:20:c3:
         d1:85:d1:1c:5c:54:c0:c2:09:64:ff:53:48:04:16:8c:00:43:
         95:96:a6:d4:6f:75:97:8a:9c:95:5f:50:d7:5d:d7:94:67:38:
         8e:3e:9a:b0:b6:df:ff:4e:a0:02:75:8f:14:15:27:c2:c9:8a:
         de:5d:d7:ec:b1:35:68:64:91:25:db:77:09:91:92:23:31:3c:
         b8:14:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:46:33 2025 by rpki-client