Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft (raw, json)
Hash identifier:          AGjJy0UNB6goYHeMqVafeOgSe0tlCfSjYL/B12QxiXQ=
Subject key identifier:   95:B5:83:64:F0:10:1C:BA:9A:F5:AD:4D:FC:05:65:AE:5C:69:CD:F4
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       1461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
Manifest number:          145A
Signing time:             Wed 04 Jun 2025 16:55:42 +0000
Manifest this update:     Wed 04 Jun 2025 16:55:42 +0000
Manifest next update:     Wed 11 Jun 2025 16:55:42 +0000
Files and hashes:         1: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl (hash: 15xlSKNiR1dOATq8+TGMamLUu9e4pZzpEClXph8WPXc=)
                          2: 36295E5A6E2611E8A01E307EC4F9AE02.roa (hash: LMl3pmdQ0erztJB/e2Vdkx7AhrXjoDAPVdtW6u4E224=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5217 (0x1461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Jun  4 16:55:42 2025 GMT
            Not After : Jun 11 16:55:42 2025 GMT
        Subject: CN=68407a8e-32a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:68:bb:6b:cc:4e:02:92:0f:4a:79:76:39:
                    f5:de:17:50:fd:43:f9:f4:5f:1c:41:95:3c:55:30:
                    da:d8:db:ce:5c:24:5c:19:1c:3f:f1:7d:e5:48:f1:
                    c7:74:06:bc:40:90:7a:1e:84:ff:c5:d2:50:23:b5:
                    f5:a1:de:14:a9:14:11:c8:bb:93:18:4b:e2:99:39:
                    0f:1b:8d:92:43:9b:0e:14:af:2d:49:ba:01:a0:81:
                    f5:a0:64:16:0d:07:63:32:12:b2:13:d9:52:5c:1c:
                    d5:a0:ea:f0:40:43:7e:00:ab:ca:5d:d7:2e:87:35:
                    48:aa:56:2a:e2:c3:49:b8:3d:67:6b:de:72:28:ec:
                    1e:cf:a3:75:bf:7b:35:78:7f:08:b2:7b:39:f2:82:
                    58:23:a4:d0:69:12:62:41:0b:c2:09:49:d5:98:72:
                    a8:8e:64:d2:84:d2:88:9a:95:7f:3e:5e:f2:4e:c7:
                    27:94:f4:40:00:17:07:63:2b:e6:26:ca:15:9b:c2:
                    d2:63:24:88:3d:46:85:eb:ea:8f:8d:e0:9c:c0:6d:
                    5a:f3:64:21:25:a6:c0:f2:79:61:92:39:c1:f0:9d:
                    0a:02:8f:67:bc:75:32:d5:38:5e:ee:9b:0e:d3:6a:
                    b4:f0:8a:f8:0d:61:84:a4:d7:6e:de:23:98:50:56:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B5:83:64:F0:10:1C:BA:9A:F5:AD:4D:FC:05:65:AE:5C:69:CD:F4
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:ca:ce:53:e8:65:46:17:f8:44:5e:09:e8:a7:ad:b7:ff:
         be:bf:14:b3:12:da:f7:99:82:b1:2d:4d:0f:07:76:35:74:b8:
         fd:28:43:ac:65:12:5f:22:b6:4d:01:47:dd:6b:ea:73:34:0d:
         7e:d2:63:c7:a2:75:69:58:b6:99:25:79:32:de:d2:6f:d3:6a:
         aa:db:55:b8:52:e4:2a:a4:c9:b8:92:4b:46:49:be:4d:5e:94:
         89:70:1d:36:06:ce:52:30:5a:5d:2f:56:d6:45:55:95:ea:47:
         9c:a8:05:da:99:9a:3e:9a:54:eb:1a:76:5c:e6:bb:e7:8b:9d:
         1e:4c:8d:da:6a:2d:75:94:b5:6d:f5:37:02:be:cc:08:6a:a1:
         0a:e3:da:d9:9c:68:79:e5:8a:cb:4f:f7:6d:aa:0a:28:5d:27:
         78:5e:c4:ef:bb:15:52:4c:75:0f:54:0f:0a:31:36:1e:a4:72:
         65:10:80:6d:6a:15:77:b4:d2:50:3a:af:27:a5:08:b7:a8:78:
         0f:95:28:03:96:45:6c:4b:77:af:13:c4:6c:d7:02:c9:8d:a1:
         fb:b1:b7:1c:27:18:23:d1:01:ad:71:8f:f1:24:cd:01:d5:bd:
         eb:51:3f:72:6d:94:43:3b:61:07:48:26:b6:b7:b8:0d:33:40:
         d6:82:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:21 2025 by rpki-client