Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File:                     lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier:          OGUIvLz2wYR/RliapVHkuMa266LERhJGgywHMJeWPCo=
Subject key identifier:   44:98:72:39:92:7A:F9:76:60:BE:4D:B3:83:92:63:45:F7:68:C3:CE
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer:       /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number:          0186
Signing time:             Wed 11 Jun 2025 03:01:07 +0000
Manifest this update:     Wed 11 Jun 2025 03:01:06 +0000
Manifest next update:     Wed 18 Jun 2025 03:01:06 +0000
Files and hashes:         1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: dSVnra2qFWnRquiAZUZwF14+7UDts4zlUqL+Ow4/Cks=)
                          2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: 12wpcAe05HtenMlOH90kdV4i4OluuZbyZiMI0pKZkoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
        Validity
            Not Before: Jun 11 03:01:06 2025 GMT
            Not After : Jun 18 03:01:06 2025 GMT
        Subject: CN=6848f172-6a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:00:c7:e5:62:94:aa:b8:22:fa:49:4d:35:
                    4f:c1:11:38:db:f6:1d:4c:12:e9:ee:34:6a:c0:46:
                    38:0d:b8:0e:b1:5c:a6:9e:e6:66:21:f6:7c:e0:66:
                    3a:95:51:34:0f:cf:b2:14:7f:ef:4b:85:48:cd:fb:
                    9b:57:76:70:b3:8d:cb:9e:78:79:ce:6d:36:8e:b4:
                    80:53:d1:ee:4a:04:ab:0b:1d:67:07:08:c1:72:c9:
                    34:d6:23:22:0f:bd:83:99:97:15:03:06:b5:05:85:
                    17:26:86:2c:cf:78:5f:29:7c:6e:3b:e9:77:65:c7:
                    6a:97:eb:b4:55:3a:0a:e8:72:1f:9d:97:ae:c6:ea:
                    81:0e:ab:32:6c:13:bc:e3:65:3d:62:65:8d:11:40:
                    ae:0d:90:ec:66:3f:97:5c:e1:1b:02:74:38:6f:8c:
                    f8:b0:e9:1a:96:2d:54:ac:20:fb:af:34:32:84:cb:
                    55:80:ec:af:c5:c1:b0:b4:4e:f9:2f:31:f8:f8:7c:
                    95:49:f4:fc:a7:ed:c7:f5:70:6c:fc:4d:49:8e:d8:
                    36:22:1c:0c:aa:a1:21:ac:90:81:ab:9b:12:25:27:
                    c6:a2:a2:6f:b9:75:b9:04:fb:8e:a0:d0:33:cd:7c:
                    39:15:e6:71:4d:e3:8f:fa:63:f7:d2:41:01:f7:e2:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:72:39:92:7A:F9:76:60:BE:4D:B3:83:92:63:45:F7:68:C3:CE
            X509v3 Authority Key Identifier:
                keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:32:92:91:c8:85:6e:2e:9d:fe:c6:57:4e:de:ea:66:63:4b:
         bc:1c:7e:3e:1f:0a:4c:6e:dd:07:23:73:e3:57:3b:66:5d:be:
         cc:91:6b:f0:df:61:a2:8f:cf:5b:7a:ed:3d:52:42:5c:73:46:
         49:0d:a7:89:21:e4:10:b4:ee:fc:7a:ea:32:0b:82:ef:f6:75:
         0b:84:05:6b:b9:d9:d9:b1:aa:05:a6:9c:3e:9c:15:f9:aa:60:
         df:e1:d1:30:70:8d:11:f3:97:05:e7:a1:62:fb:d6:b5:f6:6b:
         57:5a:6c:f6:f2:9f:33:25:6f:2b:36:57:3d:8a:20:89:c6:cc:
         b6:ba:ee:af:3c:1b:8b:87:5a:9a:4f:5c:ed:9d:f5:42:ad:27:
         28:cf:96:a5:d5:fc:21:84:4a:81:12:92:83:ab:fe:07:e9:84:
         27:e3:1d:91:37:fd:5d:71:c3:7d:e6:c9:09:76:5e:49:b0:08:
         98:ed:a2:cd:5a:1c:8c:aa:7f:2a:b6:10:87:40:8a:ce:01:ae:
         71:c4:64:49:c5:95:c7:20:99:e8:39:90:5e:a2:4c:75:d0:ba:
         0b:84:ed:60:f3:96:b1:47:c1:d7:f5:78:c8:d7:60:41:a5:e4:
         e0:e3:91:c9:ca:e0:52:4d:a0:b0:14:f4:ef:14:dc:f8:16:2b:
         46:76:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:47:14 2025 by rpki-client