Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
File:                     j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json)
Hash identifier:          4bfhoPd/F9xXcgJGlYeWx+3mkB2mXGIzCMk3UGnAnPg=
Subject key identifier:   8F:AE:17:43:C6:41:1F:07:81:4E:DF:C8:BE:16:E9:A7:E0:62:72:C5
Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
Certificate issuer:       /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
Manifest number:          011C
Signing time:             Mon 09 Jun 2025 03:50:22 +0000
Manifest this update:     Mon 09 Jun 2025 03:50:22 +0000
Manifest next update:     Mon 16 Jun 2025 03:50:22 +0000
Files and hashes:         1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: 3yRu1vDNqsamgQ89mtWA9vSKLoc+skeG+kufi/edfr4=)
                          2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: fv6RLao5liFr7afB3PhUjumYqWdJXB/03IwWC/f2YMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
        Validity
            Not Before: Jun  9 03:50:22 2025 GMT
            Not After : Jun 16 03:50:22 2025 GMT
        Subject: CN=684659fe-a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:59:60:b1:99:ba:fe:ad:e1:b1:5f:b2:6a:
                    ef:7c:21:8c:13:58:0d:29:ab:e6:a6:79:d3:4a:e4:
                    d6:e6:7f:a8:a4:b5:dd:09:19:5d:e1:2c:ff:f9:33:
                    d1:66:2d:21:98:32:ef:62:42:28:43:fb:cb:f8:28:
                    3b:3f:cf:ff:7d:54:17:75:02:ea:ab:4d:63:07:fc:
                    16:71:d1:11:86:6c:36:b8:ad:ef:4b:47:8f:28:31:
                    ed:e0:5f:6e:e8:5c:d5:21:7d:f0:a6:09:17:21:fa:
                    43:6e:b6:d1:3c:31:95:67:6b:3e:d0:ee:57:c9:bf:
                    e1:9c:c5:76:39:8f:3c:4c:5f:10:f7:db:f7:cb:49:
                    07:f0:26:61:f7:d6:27:99:e0:1e:ff:23:2f:ef:40:
                    d6:c1:54:fa:ee:95:db:1c:f7:4b:8a:d2:bf:de:09:
                    2c:fb:77:4d:19:9a:aa:6f:1d:42:3e:10:96:30:e5:
                    8f:7a:ad:25:cc:2a:9f:5d:86:dd:45:bd:1b:c3:81:
                    fd:0f:90:a8:23:5f:0a:5d:32:76:cc:b0:78:14:66:
                    ab:52:08:39:9f:38:18:05:ff:81:15:a5:d1:15:05:
                    16:bf:4d:8a:d5:da:97:89:97:08:90:b4:03:9d:04:
                    70:ac:da:28:74:56:58:48:8c:b7:fb:a1:8a:46:aa:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AE:17:43:C6:41:1F:07:81:4E:DF:C8:BE:16:E9:A7:E0:62:72:C5
            X509v3 Authority Key Identifier:
                keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:bf:ca:a4:8e:f3:29:ce:25:ee:7d:b5:ee:da:c3:9e:ef:
         ef:65:e2:a4:d8:d8:d4:ca:62:8c:59:aa:e3:04:59:df:09:05:
         49:2f:f4:b4:dd:e0:39:69:8a:e5:4b:44:08:ae:cf:a0:40:1a:
         cc:3d:db:6c:04:40:8f:74:c0:70:88:3c:43:bb:08:86:ff:c3:
         0d:45:ad:5c:e0:09:71:6e:68:f6:96:37:b8:3f:eb:05:c1:8c:
         84:df:9f:11:51:89:ef:67:b2:3e:de:f1:b1:e3:05:07:d5:6f:
         e0:7f:3a:8c:66:76:ec:aa:a3:7f:92:96:55:dd:e2:c4:60:9c:
         ef:2e:81:f8:18:77:29:24:4f:60:6c:91:70:2d:5e:87:62:f6:
         e8:a5:42:e3:58:6a:89:23:52:f6:12:29:d5:75:05:f4:f4:35:
         1c:31:0b:35:7b:3d:ae:03:7e:ce:d0:46:1f:52:23:b2:49:0b:
         35:7b:bd:cf:d9:a4:a4:5d:14:6b:53:2d:fe:19:6c:fd:ce:fb:
         20:90:e8:c6:ab:83:a5:56:8f:a0:af:9b:39:fb:d8:72:b9:4f:
         76:94:60:dd:99:7e:89:23:ff:a4:0e:b4:1c:c8:e2:87:f8:b0:
         ee:d0:50:1a:92:5b:39:51:06:97:b2:6f:7e:92:09:12:f9:1b:
         ac:c6:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:26 2025 by rpki-client