Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          oi5wdue+ee+/KeHFlgZiJkDa2SaY/2NQVEhUkp9xrZM=
Subject key identifier:   5A:DB:C9:76:11:04:A4:AE:87:67:83:C5:79:2C:9F:5D:08:70:E3:3A
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0D9E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0D7F
Signing time:             Tue 10 Jun 2025 14:22:28 +0000
Manifest this update:     Tue 10 Jun 2025 14:22:27 +0000
Manifest next update:     Tue 17 Jun 2025 14:22:27 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: cvI3c+APIBZJYbeNEtRviaprtP8X1p4rVgwT1QQ7mHE=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: p/azHtFptIXURVSRFgPxqoeDhngoYTd2NG88s2QFFzY=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: 9l1Haea64b2aYD99677ab4KdKZDozQlY1l2PmY/FJ1w=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: 7OpoMhu5yrBYJukUqf3gKs+QCXSGnK6psVOlWcESVPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 14:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3486 (0xd9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Jun 10 14:22:27 2025 GMT
            Not After : Jun 17 14:22:27 2025 GMT
        Subject: CN=68483fa3-f949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:3e:de:c5:ef:9d:e3:1d:ec:e8:c9:29:40:
                    b6:38:0f:27:7f:e3:82:9a:26:3c:66:c6:43:cf:92:
                    86:4e:82:8c:82:01:35:0f:79:c8:f6:ab:8c:72:68:
                    37:cc:d5:2a:e0:96:41:d0:16:81:72:1b:0b:bb:94:
                    80:b2:cc:98:64:19:7c:85:ce:e7:be:7c:4d:f0:3a:
                    97:6f:8c:9f:ac:bd:69:f2:03:bc:e9:e3:8d:a7:86:
                    5a:b6:d6:27:71:b7:f2:9d:49:b1:e3:6d:26:94:45:
                    ec:23:45:a5:c5:12:a1:15:27:6b:4c:7c:51:30:13:
                    63:99:51:28:df:09:ad:ea:a1:12:56:a4:6b:ea:04:
                    9b:81:4e:4c:71:8e:b5:d2:93:d5:e1:ef:70:cc:37:
                    78:72:22:05:19:71:05:f9:8c:e5:78:50:18:b3:ec:
                    04:a3:fd:f8:12:44:47:77:f6:5b:28:60:b1:36:6c:
                    23:3e:29:77:8f:72:71:0f:a3:9f:8b:b0:cf:6b:bc:
                    08:eb:93:83:0e:fe:6c:1b:bf:3d:cd:71:56:2b:5f:
                    9e:29:3c:8c:c9:1b:11:d3:93:10:d8:ae:cc:47:af:
                    c6:7b:14:dc:e2:82:7d:14:dd:cc:08:59:08:c2:5e:
                    8d:56:8e:6a:e1:ca:1d:bf:29:a8:59:f6:30:de:4d:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DB:C9:76:11:04:A4:AE:87:67:83:C5:79:2C:9F:5D:08:70:E3:3A
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2d:bc:5d:53:2c:6c:8f:f2:6a:f5:85:cb:cc:d3:36:f1:70:
         81:e0:e0:a6:d6:93:87:99:59:d1:b5:90:bc:f2:81:73:ea:4d:
         eb:35:93:29:66:ea:be:7e:5c:90:51:cb:51:ad:ec:c9:4a:0b:
         b2:5a:de:bb:54:0f:3a:81:bd:7c:5b:b8:ca:93:a6:32:51:b9:
         f5:3a:a0:5b:69:4c:56:09:ac:db:e4:39:b0:ab:b6:bf:01:2d:
         48:cb:24:7f:77:70:78:39:1d:4e:d9:36:0b:b1:f9:5b:6e:ed:
         63:a1:63:9c:e6:2e:14:2d:9f:fb:d4:3c:1b:33:db:b4:86:ce:
         fc:85:3c:a6:c7:c8:f1:4e:35:df:fb:db:62:c5:8c:1f:06:21:
         1a:00:16:47:2a:e2:7a:db:7e:c6:23:54:8c:09:84:56:ac:bc:
         06:0e:53:ec:82:d9:c6:19:27:54:9f:f1:08:f8:a1:a6:3c:d4:
         b0:fc:12:70:ff:9a:d4:d8:59:46:aa:68:5d:12:94:60:63:22:
         08:75:94:f7:0c:2f:19:97:60:1c:c7:20:43:73:d1:22:ea:9d:
         5c:99:91:27:78:b6:c0:21:26:7e:5b:ff:b7:42:1c:2f:57:a4:
         74:91:b5:d1:a9:f0:00:38:c8:80:f2:95:f6:13:65:9b:e6:7b:
         3e:dc:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:10:11 2025 by rpki-client