Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          WVrMWMxOIwd6qn5MRpEhuG3mYZp2IdU8L4y9jnyQSPo=
Subject key identifier:   A5:25:B4:0D:E4:6E:9A:44:9A:8B:DD:87:9D:D1:68:8E:0F:87:6A:99
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       1863
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          184C
Signing time:             Sun 08 Jun 2025 16:25:49 +0000
Manifest this update:     Sun 08 Jun 2025 16:25:48 +0000
Manifest next update:     Sun 15 Jun 2025 16:25:48 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: vCDyOKWsjBfpTPDKys7FQP8H3IwWtzbfye2F8MfnBJw=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 16:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6243 (0x1863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Jun  8 16:25:48 2025 GMT
            Not After : Jun 15 16:25:48 2025 GMT
        Subject: CN=6845b98d-935a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:98:6a:da:cb:56:b5:6e:8b:57:7b:0e:bd:
                    8a:f5:cd:c4:59:d2:8b:13:6c:bc:3f:8c:eb:d9:3f:
                    66:9b:e7:db:c9:9b:0a:c6:18:67:83:ac:d2:a5:1f:
                    6c:59:a6:36:06:a6:d7:c0:72:b1:a1:12:58:ba:8d:
                    97:67:84:2f:25:75:d8:26:fd:8e:3e:0d:10:80:16:
                    ef:39:b6:20:64:56:04:63:14:4f:06:94:10:83:fc:
                    39:b5:fc:47:c5:be:ba:4f:7f:de:e7:3c:d4:41:a4:
                    08:3a:19:74:3a:4a:3f:18:13:cf:47:e1:35:c8:63:
                    62:68:68:5e:5c:b9:4e:62:c9:d3:89:e5:85:63:10:
                    bb:30:e3:30:b6:85:1b:f8:a3:b8:3c:e6:02:d4:88:
                    aa:b6:ae:73:26:49:50:72:cc:60:7b:fd:99:52:ac:
                    35:15:db:5a:3a:c9:3a:08:62:1e:0b:e1:31:f1:be:
                    21:83:dc:4b:88:e9:32:2c:22:d8:ba:a7:b8:8d:8f:
                    96:dc:d0:21:c8:a6:d7:c4:d4:ca:17:a0:42:34:46:
                    d2:3f:36:a8:24:06:d7:90:b4:63:f6:fd:05:d7:5e:
                    e1:97:8a:a0:6d:7e:10:4a:89:79:a2:ae:84:13:7d:
                    7e:6a:79:7e:62:df:7c:c3:b7:57:0a:cb:fe:1d:62:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:25:B4:0D:E4:6E:9A:44:9A:8B:DD:87:9D:D1:68:8E:0F:87:6A:99
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:f5:6a:d9:6d:48:d2:a1:30:7c:19:13:c6:c8:77:8a:4c:
         d0:0a:ae:ab:74:9c:e6:45:dc:b0:df:54:f1:bb:25:45:12:f3:
         d3:71:04:d6:8a:3e:87:39:26:0c:95:34:b3:b2:24:5c:29:d0:
         a9:9f:16:ab:0e:ba:53:8c:83:94:de:59:68:7e:17:f4:8a:f6:
         12:ea:76:9c:e7:3e:ee:da:ac:0f:6f:97:ad:f1:ab:78:1b:21:
         70:1d:2e:57:43:43:12:2f:d0:db:e4:6d:9c:7d:ba:df:74:ba:
         12:32:74:8c:a2:72:29:af:88:2b:d5:7b:9b:2b:56:94:e6:7e:
         b5:81:a2:7d:47:b1:5d:d6:31:fe:20:87:b2:1e:eb:d1:92:81:
         b0:0d:d7:6d:55:56:a3:80:81:5a:30:0b:49:ae:50:74:89:1c:
         70:99:2e:2f:b9:49:1b:29:7a:3c:a1:28:5c:d6:d5:a4:cf:c4:
         42:18:e3:53:07:5f:57:e7:e1:f9:51:0f:da:9c:02:c0:67:10:
         95:77:04:cd:0c:37:57:c1:b3:84:a1:ce:70:f0:39:f3:d1:01:
         be:b9:c6:81:6f:84:33:72:6a:7a:ae:a7:ab:0c:cc:4c:9f:e8:
         fa:c9:a9:fe:8c:22:02:41:c5:87:81:3f:f8:d7:8c:07:73:86:
         a0:74:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:21:11 2025 by rpki-client