Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          woeY/7AIL+ieQdAIeOIbzO72kDuKq6otA89LKqbMVuI=
Subject key identifier:   E3:D4:32:9D:31:0F:40:A8:31:5C:52:25:57:C9:CC:91:B6:3F:EF:D6
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       0920
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          0919
Signing time:             Thu 12 Jun 2025 20:03:51 +0000
Manifest this update:     Thu 12 Jun 2025 20:03:51 +0000
Manifest next update:     Thu 19 Jun 2025 20:03:51 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: VrpmjgOmYUbJw2EycozYX3T19JHvwjYSndly14gGI5o=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Jun 12 20:03:51 2025 GMT
            Not After : Jun 19 20:03:51 2025 GMT
        Subject: CN=684b32a7-a5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:9e:81:eb:ca:32:4d:41:17:6b:80:28:62:
                    4f:c7:2b:f7:7a:14:e4:b1:fc:82:3c:62:41:a8:f0:
                    ba:c1:f5:fe:93:61:60:70:76:f1:33:4d:15:de:39:
                    fa:b9:69:df:e6:cb:a4:ec:f5:be:23:f9:45:db:fb:
                    41:d6:d9:b7:70:4f:4b:d7:8c:52:42:ff:8f:12:65:
                    75:70:f8:6f:c4:b2:8f:a0:71:df:fc:79:ea:ee:31:
                    14:65:92:f2:fc:4d:eb:ca:49:b4:53:6b:e8:2b:e9:
                    4b:66:d3:25:76:3b:1d:0e:dd:21:98:25:a5:46:ff:
                    4f:49:78:5e:26:11:91:02:6a:b3:53:e3:61:75:e2:
                    ea:6a:5d:b3:50:d8:4e:34:76:c8:4c:11:b9:4d:51:
                    d1:3f:30:d4:57:10:a3:35:af:2e:d0:ad:a5:13:43:
                    ba:41:78:bd:ad:fb:c2:8e:60:37:a3:37:4e:b6:cd:
                    25:64:6d:f6:31:23:d1:01:29:d4:d6:a6:ec:ba:90:
                    c6:8c:15:42:65:0e:73:b1:4b:54:05:69:53:10:a4:
                    de:00:86:32:4f:0c:85:b3:b4:ee:3f:5e:c6:8b:fb:
                    3e:61:a2:61:47:bf:ce:4f:9d:48:8c:29:0c:b0:ab:
                    be:f9:e3:05:24:0c:78:77:f0:b9:42:6b:39:a7:14:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:32:9D:31:0F:40:A8:31:5C:52:25:57:C9:CC:91:B6:3F:EF:D6
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:1b:c0:bc:8d:47:29:91:9d:1f:14:44:d1:a6:14:52:fb:
         cb:db:0e:8c:6c:ec:f4:bf:ab:54:ec:a1:bd:93:32:63:d1:ad:
         66:e8:46:0f:68:bd:85:99:6e:58:31:56:a9:b5:df:87:3d:33:
         f1:6e:4c:4c:49:91:37:1e:63:7f:9d:67:ad:bb:17:38:0a:0d:
         5c:7e:91:32:07:41:52:5f:04:71:42:0a:1b:7a:71:6c:6c:8e:
         ed:d2:c2:bd:f9:23:c0:40:5b:c1:52:ab:02:a2:dd:f6:53:d5:
         56:34:16:d0:b9:1f:22:d2:48:10:3b:2b:e9:b0:7e:72:06:15:
         13:af:a1:f1:b0:1d:fb:76:56:e7:86:85:0c:c5:30:ec:ab:dd:
         08:31:5b:25:3d:21:11:5c:63:66:3a:5d:ef:c0:d6:16:90:6c:
         b5:87:51:b7:e2:2c:11:fe:cf:8b:18:55:44:95:62:6a:54:7d:
         87:74:25:76:36:ef:4d:35:9b:9a:ed:8a:05:38:9f:96:1c:e2:
         3a:04:70:4c:1e:0f:a3:27:58:71:b0:00:7a:1d:17:97:53:ee:
         27:ed:68:96:0f:a3:c9:57:91:01:bb:a5:5f:7c:9d:2b:a9:2e:
         ae:7e:fd:16:8e:77:ff:ef:63:12:11:9f:5c:c0:4a:f7:2f:7e:
         b3:50:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:15:19 2025 by rpki-client