Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          PPmEQPAr++G5+Wgr1w9PtTFi703cXbtxc5/JwdO1bso=
Subject key identifier:   6B:FD:99:DA:F5:52:DA:9F:6A:DD:E1:40:20:8F:11:D0:35:C8:63:EE
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          016A
Signing time:             Sat 31 May 2025 03:32:09 +0000
Manifest this update:     Sat 31 May 2025 03:32:08 +0000
Manifest next update:     Sat 07 Jun 2025 03:32:08 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: 6BqcHQLA0uj1FkbEh1tun6RoBX7jcvPZGH3JjQGEmXM=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: wIa8XsPQEKgPmaham2jaYKS/+u8e3X7+t4uptXIU2FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: May 31 03:32:08 2025 GMT
            Not After : Jun  7 03:32:08 2025 GMT
        Subject: CN=683a7838-ba27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:a6:6c:6d:4a:eb:a7:0e:37:96:5a:43:af:
                    7e:c4:e7:cb:c3:83:64:30:cd:7f:bd:e9:20:96:10:
                    f2:c7:0d:57:5b:07:11:e1:2c:9e:5b:da:1e:52:62:
                    e8:06:f2:56:23:21:16:8e:8a:68:ce:90:6d:a8:d3:
                    1e:8b:cc:4c:c5:df:4a:f0:2e:1c:1d:89:1d:bd:35:
                    eb:c4:c1:b0:7f:90:a4:23:b7:38:06:3e:71:d9:42:
                    8a:b0:f8:b7:bf:bc:04:fc:3c:d2:e4:54:49:a5:e8:
                    ba:6b:1c:33:15:2c:ac:e3:c8:46:cb:e1:c6:d4:cc:
                    89:49:3b:c2:0a:e2:d2:ac:74:4a:00:4e:10:a2:6e:
                    67:67:16:e1:28:e7:7f:89:6c:09:d2:ab:2e:08:f8:
                    dc:0e:c7:14:a8:b4:c7:c3:aa:16:6b:c0:cb:68:82:
                    a8:fe:97:4e:8d:10:59:1d:7b:32:6c:90:e5:e9:1a:
                    74:f6:39:fe:b5:33:e6:ec:d0:a7:ee:3e:0a:03:77:
                    b2:9d:ae:b0:e9:b4:b5:5b:16:52:5d:a4:ba:91:5e:
                    a9:1d:6c:21:38:c3:14:04:3f:5a:7e:b8:0a:15:53:
                    64:ac:be:ca:eb:d4:35:60:ec:a4:4f:d4:ce:57:33:
                    ba:d1:17:a3:73:1e:5e:53:cb:47:bc:42:88:7f:ff:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:99:DA:F5:52:DA:9F:6A:DD:E1:40:20:8F:11:D0:35:C8:63:EE
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:97:53:9a:a9:74:2b:0e:a7:95:a4:37:5c:51:a5:4e:55:
         e3:e3:f8:2d:09:65:0c:48:d4:67:46:72:45:26:cb:ca:fb:bf:
         fc:ae:d2:10:a3:36:3a:df:c4:f3:e9:fa:55:d6:05:4e:bb:66:
         d7:ef:f3:68:ea:42:42:64:cf:ca:1a:9a:c7:21:f9:01:38:57:
         7d:4a:37:20:3f:3c:43:cb:ac:71:71:66:50:0a:ad:45:18:99:
         9f:de:8f:1b:ac:c2:c4:31:c4:a7:9d:0b:c9:a3:81:30:4b:38:
         76:37:99:09:c4:ad:a5:94:2e:53:be:53:f0:e0:63:99:88:1f:
         0b:95:a0:cc:fc:a1:e5:f6:d7:fb:4f:92:1d:b5:09:ac:13:04:
         2d:51:fe:61:a7:5f:91:35:a9:02:3a:8f:48:a8:b4:bd:3a:4c:
         d9:c2:01:e7:ca:45:51:de:d0:0b:6f:2f:2c:9d:b1:5a:63:55:
         cd:0d:bf:78:94:a6:4f:0d:3e:69:59:a7:fc:8a:bd:e3:bf:60:
         d3:9b:66:be:f2:89:c7:7a:c6:a1:0f:e4:43:8a:66:28:81:79:
         11:14:1c:8c:ec:8b:72:2e:e5:31:7e:ec:60:da:f4:6b:93:42:
         fb:4d:2c:46:e6:07:19:47:5e:b9:60:29:81:a5:71:4b:7a:38:
         5d:a4:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:56:20 2025 by rpki-client