Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          Ij6EQe3tihsamE0x245IMoKz8yU/dSz0ek67T9Qg2hs=
Subject key identifier:   B7:11:9D:F3:02:F2:52:90:42:9D:16:93:B2:18:87:9B:E2:13:12:7B
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0BEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0BE2
Signing time:             Sat 14 Jun 2025 18:39:55 +0000
Manifest this update:     Sat 14 Jun 2025 18:39:54 +0000
Manifest next update:     Sat 21 Jun 2025 18:39:54 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: WJRvXDlXw9rmzqy1JF8jjruJZ+eM/FI/iHnKOuXVUXc=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3050 (0xbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Jun 14 18:39:54 2025 GMT
            Not After : Jun 21 18:39:54 2025 GMT
        Subject: CN=684dc1fb-834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:3f:c1:f2:76:ed:0c:0d:4e:79:a3:92:0a:
                    81:7c:31:82:48:2e:de:ca:35:bd:24:23:a1:4b:ae:
                    b4:ac:f1:d8:2e:fc:84:79:1b:01:37:c3:bf:ea:c1:
                    18:22:8e:93:6b:e0:27:cc:51:b0:5c:f2:dc:cf:2b:
                    e1:af:94:db:d9:34:08:15:6e:86:a9:cc:fa:cf:32:
                    d2:92:4f:28:14:d8:75:85:5a:8b:37:8a:eb:91:d8:
                    3a:15:12:be:9d:49:07:5d:3c:ed:ff:f3:3f:01:69:
                    7c:30:8f:96:1d:1b:0c:28:bb:08:65:ec:4c:18:dd:
                    d9:dc:8d:12:ce:fa:9a:a2:5c:a7:5d:e8:3d:7d:e3:
                    ed:42:df:16:b4:27:80:02:81:5a:85:ab:40:e0:4a:
                    1d:a6:b4:82:bc:8c:3c:df:8c:e8:ae:10:56:f9:ec:
                    9c:e6:1f:bd:85:92:f0:d3:a4:9a:c4:91:50:36:42:
                    0b:66:ed:30:6e:09:03:90:9c:69:dd:1d:e5:cc:2e:
                    58:0d:c3:9a:d5:28:32:7b:76:36:74:8d:ec:26:d6:
                    a1:a5:79:74:be:72:19:d0:bb:03:51:ff:b6:4a:4e:
                    10:c0:ec:e7:4d:6c:13:ed:16:f3:9d:05:86:5f:82:
                    4b:fb:a8:ec:0d:de:18:09:14:2f:78:a7:bf:bd:7c:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:9D:F3:02:F2:52:90:42:9D:16:93:B2:18:87:9B:E2:13:12:7B
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:d9:b3:8d:51:aa:b0:ab:40:57:ca:a6:9a:e7:0a:59:dd:
         5b:db:cd:52:6f:07:a3:a2:9c:5b:79:fb:88:2a:6a:d1:18:0d:
         ba:c8:ea:c3:a4:35:27:df:ed:db:df:7e:55:4c:59:52:50:79:
         3d:db:ff:e1:17:23:3c:a5:fd:f4:28:d3:fa:e0:ad:88:5b:57:
         a1:3f:40:9a:21:92:bb:6e:23:67:e6:bc:bd:ec:f0:80:7c:d7:
         e6:7a:33:e4:43:3e:d5:fe:dd:31:21:18:58:39:9d:d9:bf:9c:
         cc:e7:ca:c7:81:db:72:9c:bf:95:0d:b5:c8:ee:64:da:1d:7a:
         c4:85:bf:68:d1:b2:a3:c7:05:af:bb:50:69:f2:f6:02:2c:93:
         10:70:f5:9d:c7:ef:20:4b:7b:c8:c9:7d:dc:2f:ea:03:26:49:
         9d:90:c0:48:58:63:29:0f:50:ed:79:f6:01:06:e1:0a:2d:b3:
         23:f1:f4:39:81:8c:ad:01:d9:c2:72:c6:88:74:0d:0b:cf:14:
         46:68:d6:5d:d2:77:6f:77:50:f1:4f:ea:f9:1b:2e:90:c2:8d:
         86:5e:e3:b1:88:37:c0:8b:b8:bb:f1:5f:f8:76:66:56:49:09:
         41:1e:8a:e8:c8:ef:67:98:34:8c:c4:90:14:b8:c4:0e:20:37:
         4c:04:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:05:32 2025 by rpki-client