Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          ieXAn0NEWiy7RI+Mmlgi12mVj4YFps0osgWFlyq9zVU=
Subject key identifier:   74:24:B5:82:3F:B0:BA:E0:DD:CB:38:59:E7:ED:5B:99:F3:C7:72:07
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          8A
Signing time:             Wed 11 Jun 2025 06:07:12 +0000
Manifest this update:     Wed 11 Jun 2025 06:07:11 +0000
Manifest next update:     Wed 18 Jun 2025 06:07:11 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: 8vMWjh/wT1FB/UxiDxir5qP17CdPHvD05ClGsVuGMR0=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: NMDs0Vn0lErQbJ2ubqn2Wa0iHcDZLQ+NyOe8KJVyEl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 06:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Jun 11 06:07:11 2025 GMT
            Not After : Jun 18 06:07:11 2025 GMT
        Subject: CN=68491d0f-d74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:d0:64:14:d3:64:bc:b8:34:62:e3:ac:ea:
                    c2:14:e8:d2:89:22:62:cf:a7:09:4e:48:a8:39:43:
                    3b:a6:f3:9a:c0:dd:68:18:d1:0d:6c:86:49:b7:9e:
                    5c:e2:19:75:2f:dd:fd:1f:1e:03:91:ef:06:62:73:
                    dc:86:14:f6:ad:c8:ad:ec:11:92:e7:9b:a5:cc:e0:
                    3d:77:ce:f4:9a:82:de:61:42:28:f1:6b:ce:1a:ed:
                    6e:9d:c9:9b:2e:d1:51:81:7f:1b:16:6e:4d:e0:93:
                    4d:28:5a:a0:af:ee:91:e0:e8:ce:f0:5b:47:32:21:
                    69:8b:24:bc:52:ff:9d:4a:8d:3f:08:1d:a3:5d:77:
                    fb:be:54:7a:4d:61:0f:42:94:b0:f3:eb:fa:23:e4:
                    51:e1:37:ac:c1:a5:79:29:61:ae:44:00:15:0e:e1:
                    51:d5:85:89:09:fa:f8:03:83:90:6a:2c:9b:d8:da:
                    47:71:2d:97:49:33:bc:b4:5b:22:ba:c3:e3:17:91:
                    c3:25:d8:fe:8b:b7:20:0c:7d:36:d6:28:bb:b6:60:
                    f3:42:35:10:69:2d:a5:c4:57:c2:e8:c4:2f:61:c6:
                    fd:c3:54:9e:1a:67:7b:e9:7c:84:dd:08:0a:16:86:
                    f5:2b:c1:36:94:b3:39:b1:a5:52:31:58:18:27:02:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:B5:82:3F:B0:BA:E0:DD:CB:38:59:E7:ED:5B:99:F3:C7:72:07
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:2d:35:18:f3:f1:42:c5:1e:5e:a5:be:95:39:a8:f8:e7:
         ab:6b:b3:45:6a:44:24:03:aa:3c:7b:d9:f5:d6:20:8c:34:63:
         9c:0c:c3:5e:8f:0c:e7:9f:fb:f4:27:38:56:18:e8:2f:50:fd:
         af:af:b5:d1:18:c3:ee:d0:78:88:65:a2:bd:0d:36:b8:47:d1:
         a8:79:24:b7:55:78:f2:b2:e7:e2:1a:2f:71:dd:ff:6e:43:df:
         e9:a1:a1:29:a5:77:3d:3b:1e:a6:87:b3:79:c4:56:6e:fc:73:
         1a:60:91:ff:62:bf:7f:73:c5:38:ec:b5:99:aa:8d:d6:2a:f3:
         9a:2c:05:03:aa:08:4e:c0:d1:31:49:72:c0:13:f8:33:b7:a7:
         54:c5:09:e9:4a:0a:41:79:81:6d:70:47:0b:4d:83:ac:51:6b:
         37:c8:11:1d:76:29:86:76:84:c5:75:da:d1:ca:c9:1f:f0:8f:
         39:0e:5f:3f:a8:86:81:bc:31:d4:d0:3d:7a:5c:08:93:de:8d:
         b4:30:28:4a:70:ce:b8:8f:fe:cf:40:64:39:27:a4:b4:27:9d:
         27:b9:34:2b:08:15:b3:da:f6:81:24:c5:1a:af:da:1e:10:7b:
         93:2b:e0:93:af:02:30:17:e5:57:ca:06:a9:4e:38:ab:b5:7b:
         4b:ac:ea:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDMzAxMTAvBgNVBAUTKDcyRTg4NjBCMkI0NzMzNjVCRjI2MTQyMEQwNkI1OEE4
MDRDMjk2QjIwHhcNMjUwNjExMDYwNzExWhcNMjUwNjE4MDYwNzExWjAYMRYwFAYD
VQQDEw02ODQ5MWQwZi1kNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCXQZBTTZLy4NGLjrOrCFOjSiSJiz6cJTkioOUM7pvOawN1oGNENbIZJt55c
4hl1L939Hx4Dke8GYnPchhT2rcit7BGS55ulzOA9d870moLeYUIo8WvOGu1uncmb
LtFRgX8bFm5N4JNNKFqgr+6R4OjO8FtHMiFpiyS8Uv+dSo0/CB2jXXf7vlR6TWEP
QpSw8+v6I+RR4TeswaV5KWGuRAAVDuFR1YWJCfr4A4OQaiyb2NpHcS2XSTO8tFsi
usPjF5HDJdj+i7cgDH021ii7tmDzQjUQaS2lxFfC6MQvYcb9w1SeGmd76XyE3QgK
Fob1K8E2lLM5saVSMVgYJwIm2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQktYI/
sLrg3cs4WeftW5nzx3IHMB8GA1UdIwQYMBaAFHLohgsrRzNlvyYUINBrWKgEwpay
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC83NjBENkE2NDhD
NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0yV19KaFFnMEd0WXFBVENs
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUMzMC83NjBENkE2NDhDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0y
V19KaFFnMEd0WXFBVENsckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgSy01GPPxQsUeXqW+lTmo+Oera7NFakQkA6o8e9n11iCMNGOcDMNe
jwznn/v0JzhWGOgvUP2vr7XRGMPu0HiIZaK9DTa4R9GoeSS3VXjysufiGi9x3f9u
Q9/poaEppXc9Ox6mh7N5xFZu/HMaYJH/Yr9/c8U47LWZqo3WKvOaLAUDqghOwNEx
SXLAE/gzt6dUxQnpSgpBeYFtcEcLTYOsUWs3yBEddimGdoTFddrRyskf8I85Dl8/
qIaBvDHU0D16XAiT3o20MChKcM64j/7PQGQ5J6S0J50nuTQrCBWz2vaBJMUar9oe
EHuTK+CTrwIwF+VXygapTjirtXtLrOr4
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:46:25 2025 by rpki-client