Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File:                     T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier:          /AKJCf+qNTRV5TBe9JNjJWtO7PRk+7kCh1CmndPpISU=
Subject key identifier:   FA:DB:33:94:41:DE:89:3A:A0:5B:5D:F9:9C:CF:A0:C7:15:6A:5B:68
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number:          13D1
Signing time:             Thu 12 Jun 2025 18:31:08 +0000
Manifest this update:     Thu 12 Jun 2025 18:31:07 +0000
Manifest next update:     Thu 19 Jun 2025 18:31:07 +0000
Files and hashes:         1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: 9MJEmMRVAv406VziF6osbn44KBrMG1oyE9u4aIRV554=)
                          2: 81A55E3629E711F08823E620C4F9AE02.roa (hash: KfN4zxeodpsFIbSyhLtkJmMGq5059ian7Q/W7KRDS8k=)
                          3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: LZ/NW4Ul+FvSw/YC7i7jRWtLnsARm09vDsPHML7acmQ=)
                          4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: vQI57o5020OkGxEigG4Zf/nYbRzTA4H4J4BJInGUUoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: Jun 12 18:31:07 2025 GMT
            Not After : Jun 19 18:31:07 2025 GMT
        Subject: CN=684b1ceb-d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:ca:26:d8:27:6a:a5:fc:f7:e5:79:b7:97:
                    84:9a:86:04:c5:2e:79:89:7e:2a:5b:9d:5a:d8:13:
                    73:46:7b:e3:c1:a8:de:97:58:db:b8:7e:63:a8:c1:
                    a3:48:d1:e7:70:4c:0a:ea:7a:ef:5f:3f:7d:e5:6a:
                    a6:88:00:30:10:23:8e:6b:7a:94:1a:18:f8:30:cc:
                    1c:29:b6:e1:7b:a8:06:ca:2f:82:46:83:98:b5:c6:
                    97:22:69:28:6b:e1:21:20:d1:cc:d1:9a:4e:72:f6:
                    22:b0:59:3b:c7:b2:c8:85:e3:00:52:37:72:f7:62:
                    42:6b:e7:4d:b7:a5:2f:65:cf:79:fc:04:c7:09:53:
                    74:04:f8:44:b2:e4:27:cb:7b:0c:56:d7:b8:02:2e:
                    37:4c:70:b7:d9:aa:59:ff:1b:41:60:20:e5:0a:95:
                    e0:f7:12:ce:35:ac:73:9a:8f:e7:ec:71:1f:34:0d:
                    1e:3d:bf:4b:4d:40:ab:9b:cb:f0:bb:81:cf:6e:bd:
                    04:bf:ab:3c:c1:89:20:27:e8:41:0d:10:da:1b:ce:
                    7b:a7:2b:19:91:ad:33:20:bc:4e:0e:f2:44:f3:37:
                    25:32:4a:dc:7a:c0:39:f9:38:89:eb:fe:09:71:d6:
                    5c:93:4a:4d:36:7b:cc:ea:f1:b7:5c:9b:40:02:45:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:33:94:41:DE:89:3A:A0:5B:5D:F9:9C:CF:A0:C7:15:6A:5B:68
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:c8:b8:5a:f9:ac:d3:3b:c2:d1:c3:ee:46:14:e2:f3:60:
         91:5e:a8:e8:39:ab:09:0d:49:87:c0:60:45:01:71:f2:db:e9:
         e0:ab:d4:f9:8d:bb:68:f0:2f:d4:27:a3:f6:c0:49:2a:1e:84:
         85:37:c2:cc:b3:de:bf:b5:72:08:21:46:d2:a6:6f:ec:2e:63:
         65:93:c2:c9:d6:8f:24:fd:94:ad:fe:7a:9f:7a:32:e7:b9:af:
         0f:2c:94:11:e5:9a:04:77:20:4d:9e:6d:98:54:07:16:89:b1:
         ce:d5:99:37:7d:d6:a8:80:9a:21:fd:00:3c:59:7c:cc:c4:fc:
         88:25:c8:1e:91:80:14:aa:fb:91:27:b6:aa:79:0c:2b:99:0a:
         92:dd:2d:59:5b:89:90:24:bc:af:17:36:13:52:47:cf:a3:20:
         0e:2d:9d:07:b4:6c:a8:28:40:23:e5:3f:b4:15:3c:b3:11:34:
         e0:6b:59:90:05:06:7c:57:ba:b2:37:49:3f:89:3f:f1:0b:98:
         36:88:93:8d:3d:4c:6e:7c:06:30:f4:78:a5:7f:a6:ef:cc:bd:
         f7:6f:09:fd:9f:0b:95:b6:88:e3:67:56:82:47:f0:72:19:68:
         d1:f3:1d:7f:48:fd:ce:0f:84:9d:dd:dc:69:bb:d0:03:20:9d:
         f7:d3:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:19:33 2025 by rpki-client