Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          xSSFalkxeL7lQWWVRZjZ8sGkyWF1MP1+xHsvclgmOk0=
Subject key identifier:   93:DC:4B:E9:FD:92:EE:3A:E5:77:56:77:EB:7A:95:7B:30:F3:1A:03
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          081F
Signing time:             Fri 30 May 2025 21:13:23 +0000
Manifest this update:     Fri 30 May 2025 21:13:22 +0000
Manifest next update:     Fri 06 Jun 2025 21:13:22 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: TPBI8KLsYqpChZW7cmS8PckpjXtL3wAt5aXTdKDNG4A=)
                          2: 6FD66DC43ABA11F094519B49C4F9AE02.roa (hash: ntWjwbGGkkkSW84Rr8LFzgeUANepwsqTojQM4+VKZJQ=)
                          3: 3521D20C353011F08D12C04DC4F9AE02.roa (hash: ZUHYED+pi+b1jG1tkEd/wo3y4AiJaO6To/XxfF5LG20=)
                          4: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: 67c129aFdKchOeJBLSQTErVCgqpsP+UzfUSQtqZi7PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: May 30 21:13:22 2025 GMT
            Not After : Jun  6 21:13:22 2025 GMT
        Subject: CN=683a1f72-889a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:bf:6f:4e:27:93:ab:82:98:e3:5e:97:47:
                    44:57:46:ae:d1:58:fa:31:e6:72:02:19:c7:fc:ee:
                    c9:c2:07:23:b5:36:e7:07:78:18:bb:8e:40:77:e9:
                    58:bb:ea:36:ef:01:4b:bb:14:62:b5:fc:e9:ea:bc:
                    c2:6c:1e:75:8a:be:6a:3c:14:e9:ae:e5:b2:44:97:
                    3c:ca:f4:28:26:a3:d5:03:fc:4b:e0:c6:81:fe:9a:
                    d9:d9:9f:e6:96:e1:7a:c5:b4:67:ed:fa:44:e1:47:
                    5e:14:8d:4b:4c:7c:b8:5d:b6:a9:fb:6d:01:dd:86:
                    a7:f3:0e:88:99:3f:9f:28:33:d5:25:f7:a6:05:52:
                    3a:c3:8f:c0:2c:78:de:bd:55:21:14:f2:34:98:ae:
                    cc:48:9e:f2:f5:78:94:62:70:82:62:f9:e8:a0:81:
                    61:98:a7:67:2d:65:b2:12:f1:aa:ec:d6:ff:56:c9:
                    86:03:b7:12:05:ad:7a:cc:1c:26:8c:d3:5c:fd:b5:
                    ef:1f:d1:0f:5f:25:c1:29:4b:13:e6:ab:71:2c:13:
                    8a:c5:12:5c:7f:71:63:58:1a:3c:ef:db:cc:73:93:
                    73:44:66:29:85:0e:08:86:21:a4:6d:5b:fc:3a:61:
                    d0:20:e9:54:d7:f8:b7:ea:12:00:56:d8:e6:81:5a:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DC:4B:E9:FD:92:EE:3A:E5:77:56:77:EB:7A:95:7B:30:F3:1A:03
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a5:81:7c:27:f2:9d:a2:78:6b:b9:f1:75:51:df:16:bd:ad:
         f4:74:61:6a:68:6f:2c:59:0a:73:41:c0:0a:00:81:b6:41:78:
         d6:1c:7a:bb:c3:03:f2:fc:e3:a5:ef:70:ad:ed:47:60:36:d1:
         3b:ec:a3:c3:a6:36:82:01:18:79:23:9f:14:e2:81:fb:1f:88:
         ad:f6:a3:fd:30:21:c2:30:20:bc:ad:45:ae:1d:4a:d7:f2:49:
         82:55:a8:e1:5e:70:06:25:40:66:e5:5e:56:a1:e8:1a:54:8c:
         68:c9:87:91:c2:8c:2d:0c:0a:3f:c8:70:92:3a:20:7e:fb:bc:
         56:4e:61:91:56:b4:e2:5c:0c:64:4b:ec:f5:f2:1c:02:54:c8:
         84:d1:f1:12:ad:2a:19:15:85:30:f3:77:ed:d7:01:32:a9:f3:
         02:f6:10:ba:bb:b9:45:05:67:68:27:20:d6:95:b6:9e:78:9a:
         20:55:a5:de:bc:9c:55:ff:65:d8:7a:b2:65:86:12:4d:d7:79:
         bc:3b:04:3b:0f:80:e0:ad:67:a8:ae:6d:f6:35:ed:5d:a9:52:
         3e:01:3d:c9:63:55:62:6c:76:d7:ed:54:2a:0f:ce:41:3a:b9:
         22:b8:b8:dc:68:07:10:de:f3:26:50:f3:7b:c6:28:32:14:13:
         89:1f:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:46:53 2025 by rpki-client