Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File:                     YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier:          omJbS2H3U4HiMPimU4VxVZtcJ3k8UnmabTwyAljI/PY=
Subject key identifier:   12:24:D8:8D:EC:35:8F:51:31:D0:58:30:79:75:2A:92:9F:85:EA:E8
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer:       /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number:          81
Signing time:             Mon 09 Jun 2025 05:34:22 +0000
Manifest this update:     Mon 09 Jun 2025 05:34:22 +0000
Manifest next update:     Mon 16 Jun 2025 05:34:22 +0000
Files and hashes:         1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: ANmtNqch1FabidXwGu5DfhC/tcO4duB++iAXoMIbwqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 05:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
        Validity
            Not Before: Jun  9 05:34:22 2025 GMT
            Not After : Jun 16 05:34:22 2025 GMT
        Subject: CN=6846725e-dbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:b1:fd:02:17:57:ae:a0:b7:c8:be:f9:90:
                    3e:2d:55:40:12:f6:90:3f:a3:53:e0:31:5b:a9:23:
                    0b:7e:89:ce:cc:08:6f:3c:46:57:df:9c:3b:5d:9a:
                    92:a3:1e:4b:23:ad:56:77:f3:96:3a:38:8f:db:86:
                    06:83:e2:fa:90:34:8e:96:30:5c:e9:32:41:ac:0e:
                    26:63:fa:d1:49:7b:6e:c8:f9:67:5c:ed:91:13:90:
                    4e:5a:f5:78:a2:8a:ee:63:e7:c7:5f:44:05:54:ce:
                    30:59:7c:7f:8e:47:ab:30:d9:f5:45:15:78:a6:86:
                    dc:18:20:1f:48:cb:3f:e8:1d:93:c8:fe:57:ae:44:
                    49:3f:40:52:eb:c9:11:bb:69:b1:c0:4c:f1:d4:3a:
                    31:64:d4:1a:d6:df:1b:b2:cc:bf:49:68:10:13:df:
                    bd:17:25:83:5a:19:c6:cf:21:36:7e:19:1a:55:f1:
                    57:76:38:04:cb:e3:6a:b6:43:74:5d:1f:68:34:36:
                    8d:aa:3a:ed:0d:7a:f2:3a:f7:ae:f3:f1:1e:9d:e1:
                    07:c4:9b:41:0d:11:11:2b:52:11:f8:6c:b2:de:ba:
                    75:7a:aa:3a:9a:f5:1f:c3:94:24:c7:b8:ec:16:30:
                    f7:db:75:8c:ad:d5:56:83:4c:55:55:9a:b5:9d:ee:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:D8:8D:EC:35:8F:51:31:D0:58:30:79:75:2A:92:9F:85:EA:E8
            X509v3 Authority Key Identifier:
                keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:0c:e1:a6:3f:8f:71:43:8b:a0:42:0b:fa:5b:63:58:cc:
         09:3d:5b:09:bd:9d:97:f2:52:35:6e:15:44:eb:30:bc:cd:74:
         8f:f0:bb:71:78:d8:69:6e:01:da:ab:6b:4a:2a:9f:9e:79:9d:
         5f:e7:eb:1e:d9:c4:de:8a:e3:19:14:b5:9c:eb:9a:e5:cf:48:
         c9:e6:40:66:76:90:2f:5f:7f:ab:85:4b:32:b3:28:f2:9e:2e:
         cd:1a:56:cb:a7:ec:9e:cb:2b:2e:98:09:08:20:0b:d4:1b:bd:
         d7:e5:f7:90:6b:4d:e3:a3:18:df:00:76:0b:19:39:6e:80:7f:
         4a:28:cd:bf:b1:3f:02:ca:6d:d2:52:28:b9:1f:56:1f:5b:37:
         72:b8:bd:17:28:60:05:4d:2b:6b:e0:31:cc:49:e7:73:4e:c8:
         39:39:41:01:c0:6c:5d:28:41:2a:3d:ff:f0:71:ff:49:0b:b9:
         61:51:23:e2:bf:e3:26:e8:36:0d:f1:90:77:2f:a4:77:47:f3:
         32:1d:6c:4c:6b:d5:35:35:39:68:f8:54:e3:46:fa:dc:17:26:
         f6:b6:27:96:09:54:c9:46:12:87:4e:db:97:93:47:bc:65:3e:
         a1:75:95:dd:05:37:16:f0:38:89:cd:e7:cd:4d:41:40:9d:c6:
         df:b0:49:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1
NjkyRjQxODAwHhcNMjUwNjA5MDUzNDIyWhcNMjUwNjE2MDUzNDIyWjAYMRYwFAYD
VQQDEw02ODQ2NzI1ZS1kYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcux/QIXV66gt8i++ZA+LVVAEvaQP6NT4DFbqSMLfonOzAhvPEZX35w7XZqS
ox5LI61Wd/OWOjiP24YGg+L6kDSOljBc6TJBrA4mY/rRSXtuyPlnXO2RE5BOWvV4
ooruY+fHX0QFVM4wWXx/jkerMNn1RRV4pobcGCAfSMs/6B2TyP5XrkRJP0BS68kR
u2mxwEzx1DoxZNQa1t8bssy/SWgQE9+9FyWDWhnGzyE2fhkaVfFXdjgEy+NqtkN0
XR9oNDaNqjrtDXryOveu8/EeneEHxJtBDRERK1IR+Gyy3rp1eqo6mvUfw5Qkx7js
FjD323WMrdVWg0xVVZq1ne7FzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIk2I3s
NY9RMdBYMHl1KpKfheroMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx
eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHrQzhpj+PcUOLoEIL+ltjWMwJPVsJvZ2X8lI1bhVE6zC8zXSP8Ltx
eNhpbgHaq2tKKp+eeZ1f5+se2cTeiuMZFLWc65rlz0jJ5kBmdpAvX3+rhUsysyjy
ni7NGlbLp+yeyysumAkIIAvUG73X5feQa03joxjfAHYLGTlugH9KKM2/sT8Cym3S
Uii5H1YfWzdyuL0XKGAFTStr4DHMSedzTsg5OUEBwGxdKEEqPf/wcf9JC7lhUSPi
v+Mm6DYN8ZB3L6R3R/MyHWxMa9U1NTlo+FTjRvrcFyb2tieWCVTJRhKHTtuXk0e8
ZT6hdZXdBTcW8DiJzefNTUFAncbfsEnp
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:15 2025 by rpki-client