Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File:                     T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier:          AYeN+GV2I0ykyG1dan2lWbEUpeEPpNIDH0IdsK70hjc=
Subject key identifier:   B3:46:DC:C9:0B:B6:4B:F5:9D:CE:A4:8A:9B:AD:19:92:1C:F7:52:4A
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       07D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number:          13CF
Signing time:             Tue 10 Jun 2025 18:35:44 +0000
Manifest this update:     Tue 10 Jun 2025 18:35:44 +0000
Manifest next update:     Tue 17 Jun 2025 18:35:44 +0000
Files and hashes:         1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: HjzY0Of/MXGTW8eqWLqSm6I8AEcQ5AalLDn4XHF5z/M=)
                          2: 81A55E3629E711F08823E620C4F9AE02.roa (hash: KfN4zxeodpsFIbSyhLtkJmMGq5059ian7Q/W7KRDS8k=)
                          3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: LZ/NW4Ul+FvSw/YC7i7jRWtLnsARm09vDsPHML7acmQ=)
                          4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: vQI57o5020OkGxEigG4Zf/nYbRzTA4H4J4BJInGUUoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 18:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: Jun 10 18:35:44 2025 GMT
            Not After : Jun 17 18:35:44 2025 GMT
        Subject: CN=68487b00-cf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:70:8e:a5:95:a7:66:9b:58:c2:5e:2b:d1:
                    86:2d:c3:33:64:c1:31:aa:e4:df:5a:f9:8f:cb:24:
                    2a:05:fb:d9:40:c0:56:16:13:73:27:e6:21:bd:25:
                    0b:a6:94:d0:27:f9:dd:11:2f:33:99:0f:d2:91:78:
                    49:62:0e:59:f6:96:ec:86:f3:ad:34:1c:79:1f:e4:
                    57:e3:e4:8e:72:6a:c4:1d:1d:72:37:a9:31:73:00:
                    a2:b7:ad:8a:3c:71:bb:ed:84:d9:fa:4b:e2:a8:8a:
                    6a:b3:7f:40:20:d9:2c:5f:ae:3d:7f:e3:43:ab:d2:
                    3a:10:11:3e:a7:c7:43:a8:60:e4:d3:11:fb:57:b1:
                    00:bc:e1:90:fc:44:33:21:84:80:99:ef:67:a4:2b:
                    fa:1d:82:78:bc:60:57:e7:af:4c:02:49:f0:03:f4:
                    71:71:da:c7:cb:89:c5:ff:f8:ec:e8:ad:35:45:59:
                    1c:a6:59:88:c7:76:28:ac:75:23:80:43:5c:a4:4e:
                    83:1a:4d:48:f2:db:99:fa:07:9b:f3:59:08:40:ac:
                    13:2f:ab:da:c2:b2:31:8c:96:71:a1:de:f6:37:a3:
                    30:e4:2a:c8:e6:81:92:60:43:68:61:a4:6c:f8:9a:
                    13:b0:de:52:98:3e:34:9b:92:d0:61:19:b6:a3:c7:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:DC:C9:0B:B6:4B:F5:9D:CE:A4:8A:9B:AD:19:92:1C:F7:52:4A
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:e6:89:ee:a4:7b:ed:27:12:1d:9c:3b:a6:2c:44:2e:f0:
         5c:a4:3d:46:03:66:4d:a7:7b:1d:ba:61:de:f9:8a:a4:c9:07:
         cb:1c:93:52:ad:44:9a:36:b4:cd:e5:14:51:66:b6:cc:28:d9:
         d3:a7:bc:4e:5d:60:c1:d8:cb:74:d1:8c:b4:56:97:00:1f:37:
         38:1c:8c:1d:7f:21:3b:29:e2:3a:2c:37:82:ad:6b:01:2b:f8:
         54:20:81:a4:47:d4:c8:65:39:9c:5b:b3:a9:96:9e:e8:8d:09:
         9d:28:21:88:48:17:42:77:54:13:6e:5e:7c:5e:45:eb:77:32:
         4e:50:8a:02:a1:84:0c:39:9d:c2:80:44:21:f9:ca:21:21:47:
         8f:d5:3d:82:96:7d:7b:4f:28:39:93:44:7b:85:69:ef:b4:28:
         e2:7b:ab:3c:43:6a:f9:81:25:1f:17:72:1d:29:e7:a1:d4:73:
         0a:83:54:84:be:3e:05:c7:3e:ca:70:35:9b:a0:98:fe:5d:12:
         ae:cd:27:93:38:40:40:1e:2b:e3:78:05:1c:5c:43:57:4c:34:
         db:76:ef:75:d8:53:a2:a3:40:3f:59:ff:2c:fb:23:56:2a:cd:
         d5:a7:2c:f7:69:0c:aa:39:4d:a4:e3:14:33:9e:9b:35:5e:b4:
         94:b3:22:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC
RUQwQ0U3MzcwHhcNMjUwNjEwMTgzNTQ0WhcNMjUwNjE3MTgzNTQ0WjAYMRYwFAYD
VQQDEw02ODQ4N2IwMC1jZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhtwjqWVp2abWMJeK9GGLcMzZMExquTfWvmPyyQqBfvZQMBWFhNzJ+YhvSUL
ppTQJ/ndES8zmQ/SkXhJYg5Z9pbshvOtNBx5H+RX4+SOcmrEHR1yN6kxcwCit62K
PHG77YTZ+kviqIpqs39AINksX649f+NDq9I6EBE+p8dDqGDk0xH7V7EAvOGQ/EQz
IYSAme9npCv6HYJ4vGBX569MAknwA/RxcdrHy4nF//js6K01RVkcplmIx3YorHUj
gENcpE6DGk1I8tuZ+geb81kIQKwTL6vawrIxjJZxod72N6Mw5CrI5oGSYENoYaRs
+JoTsN5SmD40m5LQYRm2o8fr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNG3MkL
tkv1nc6kiputGZIc91JKMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0
Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVKeaJ7qR77ScSHZw7pixELvBcpD1GA2ZNp3sdumHe+YqkyQfLHJNS
rUSaNrTN5RRRZrbMKNnTp7xOXWDB2Mt00Yy0VpcAHzc4HIwdfyE7KeI6LDeCrWsB
K/hUIIGkR9TIZTmcW7Oplp7ojQmdKCGISBdCd1QTbl58XkXrdzJOUIoCoYQMOZ3C
gEQh+cohIUeP1T2Cln17Tyg5k0R7hWnvtCjie6s8Q2r5gSUfF3IdKeeh1HMKg1SE
vj4Fxz7KcDWboJj+XRKuzSeTOEBAHivjeAUcXENXTDTbdu912FOio0A/Wf8s+yNW
Ks3Vpyz3aQyqOU2k4xQznps1XrSUsyJU
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:16:03 2025 by rpki-client