Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
File:                     81jWhVW6te9ipNz9TzJANe5gJLY.mft (raw, json)
Hash identifier:          P1SkcOBUHdTyPAzYvMnnH525AV78PNwl7Ex664DNiv8=
Subject key identifier:   37:44:8B:EB:77:6B:44:46:96:46:2C:61:51:8C:28:B3:05:5B:CA:C1
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Certificate issuer:       /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
Manifest number:          2D
Signing time:             Thu 05 Jun 2025 07:11:18 +0000
Manifest this update:     Thu 05 Jun 2025 07:11:17 +0000
Manifest next update:     Thu 12 Jun 2025 07:11:17 +0000
Files and hashes:         1: 81jWhVW6te9ipNz9TzJANe5gJLY.crl (hash: nr4R5mAPWwoc9bDtMTn4ogT6uJmFoAzVDbHQqWRFKbI=)
                          2: 39E77242050B11F097AB4F3BC4F9AE02.roa (hash: PDiocTjJKaFu9YNf5gjKMiNkfOKqtTVuKhZKfr9ypcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
                          rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 07:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
        Validity
            Not Before: Jun  5 07:11:17 2025 GMT
            Not After : Jun 12 07:11:17 2025 GMT
        Subject: CN=68414316-7a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:05:94:b6:5a:fc:f1:59:af:e0:2c:de:70:
                    65:d5:f5:14:b3:10:36:18:ee:69:c2:8b:74:fd:c2:
                    8d:26:5a:2e:96:e4:e9:91:25:cb:82:b3:e4:0a:39:
                    04:10:06:2f:83:59:bd:3c:4b:d8:7f:96:21:af:8b:
                    71:ef:ae:0e:b7:25:83:02:d2:a8:be:0b:1a:f5:b2:
                    b5:59:18:5c:66:72:f7:49:ae:f0:51:66:de:4c:3f:
                    30:23:07:d0:54:6b:0f:de:26:3f:99:87:4a:5d:55:
                    c4:80:c6:5d:c4:9b:de:e1:84:e1:a6:95:87:fb:e0:
                    30:fe:b2:54:34:2f:2f:b2:c4:a6:b7:14:4a:a6:09:
                    28:b2:53:2f:50:f7:a9:de:b1:9e:6d:85:37:c4:78:
                    a9:71:a9:45:65:ea:c2:a2:d7:53:f9:86:a8:44:46:
                    66:40:3d:bc:37:0f:18:82:5e:89:45:45:3f:74:4f:
                    58:8f:22:2b:a0:86:36:8e:59:8e:38:b6:c9:25:27:
                    9c:82:b4:8a:8c:9e:87:8c:c6:b3:af:ba:5a:cf:7d:
                    af:97:cf:db:67:b2:77:dc:92:ca:52:5b:00:27:15:
                    04:0b:b1:3a:cc:26:ec:50:19:a5:93:90:f6:10:b3:
                    80:d0:12:b8:06:6d:6d:41:fd:bc:71:9e:bd:33:a7:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:8B:EB:77:6B:44:46:96:46:2C:61:51:8C:28:B3:05:5B:CA:C1
            X509v3 Authority Key Identifier:
                keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:6e:82:2b:84:19:01:75:6e:24:52:bd:0d:c0:4c:5e:3b:
         15:58:95:92:10:f2:94:30:6c:e2:02:a2:8c:ab:87:74:59:7a:
         f1:e3:02:7c:a2:bf:1c:f1:18:a5:20:53:09:18:21:d7:d9:3e:
         ac:4a:2d:5e:25:ea:3f:84:81:9d:e0:31:38:c9:1e:0b:9c:5f:
         fb:5c:7f:b7:95:a6:27:24:b9:df:9e:10:90:20:a7:aa:5d:31:
         a3:90:c9:e0:52:a7:d3:16:b4:2e:80:20:87:0d:f9:0f:10:3f:
         17:32:dd:75:79:00:e5:ce:59:d7:36:84:ba:e9:b4:36:9b:fa:
         ad:ce:18:0d:33:95:a7:8c:56:95:34:d8:78:25:97:89:25:79:
         ea:3c:25:17:49:98:df:81:83:f4:8f:07:ee:8e:cb:12:ab:9e:
         02:02:71:75:a4:4c:08:16:3d:2c:6a:0c:90:ba:1b:17:91:e7:
         d1:36:b1:c9:da:8b:8d:86:9d:25:94:fe:a4:5a:24:a6:4d:8c:
         89:d2:ab:3a:fa:77:db:2a:db:6e:30:e8:be:cf:0f:cb:c9:93:
         2c:fd:b6:32:81:1f:d6:2a:a1:9d:dd:15:10:33:3d:00:40:a5:
         4b:50:2a:b1:fb:77:83:8e:33:03:d8:76:a4:0d:b3:d5:29:10:
         e1:02:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:18:50 2025 by rpki-client