Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
File:                     -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json)
Hash identifier:          T/YA2Xdj1+v5MQlTfClddPGXIEBt2ZkxSU6KU1R5iPI=
Subject key identifier:   BD:17:7A:31:A2:17:27:CA:19:43:BD:9E:7C:9F:B0:B2:D1:37:4D:BE
Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
Certificate issuer:       /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
Manifest number:          E4
Signing time:             Mon 09 Jun 2025 04:25:54 +0000
Manifest this update:     Mon 09 Jun 2025 04:25:53 +0000
Manifest next update:     Mon 16 Jun 2025 04:25:53 +0000
Files and hashes:         1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: O/UDfGpfsBnOTQjvhGP6ZZC/esUO9jMAqvR61LTFYRg=)
                          2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
                          rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
        Validity
            Not Before: Jun  9 04:25:53 2025 GMT
            Not After : Jun 16 04:25:53 2025 GMT
        Subject: CN=68466251-9547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:85:2b:a9:9a:9e:d5:81:78:51:16:da:39:
                    6f:62:fd:e5:d9:8e:d4:f0:1e:3e:34:1f:44:73:25:
                    73:a8:2b:23:9e:eb:12:6a:71:5a:23:54:c4:9d:6c:
                    7d:81:df:97:60:2e:78:81:71:44:b9:aa:aa:48:2f:
                    46:f6:6a:d3:f0:69:25:7f:67:98:3b:1d:98:85:f9:
                    34:9c:26:2b:4a:46:ab:a5:c8:a9:90:d7:d2:a9:e9:
                    11:d3:07:9f:a1:02:c2:f9:14:06:48:2d:de:ef:d8:
                    ba:73:e7:b1:15:99:a9:94:75:4f:db:22:dc:ce:b0:
                    f1:0f:e7:69:38:03:41:ee:b1:65:de:7e:3e:89:a1:
                    1a:11:99:54:f9:9d:76:54:ce:8e:db:e5:ac:6a:a2:
                    79:8b:8e:f1:77:1f:18:e6:28:73:0f:94:c9:93:83:
                    a8:79:87:41:d9:00:e9:4f:18:89:d7:af:e0:dc:f9:
                    52:73:d3:b6:ed:ca:1b:38:c9:a2:50:9c:d2:f8:56:
                    1a:8d:0c:2f:de:f3:c0:c2:e6:d5:e9:04:bf:4b:38:
                    e3:37:11:8c:2f:7a:e9:af:b8:f6:1f:5d:c8:5d:ce:
                    b4:12:68:71:77:d2:b7:04:32:05:66:9c:40:b5:9e:
                    a9:0f:1f:76:d8:a8:b0:b4:22:fd:8c:50:51:12:0b:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:7A:31:A2:17:27:CA:19:43:BD:9E:7C:9F:B0:B2:D1:37:4D:BE
            X509v3 Authority Key Identifier:
                keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b2:48:92:3e:63:4f:16:d9:ef:22:7e:0a:95:1e:88:2c:eb:
         d7:87:78:d1:f5:ea:ad:5d:51:56:1f:06:ab:0c:e6:94:89:a2:
         d9:37:14:ad:c4:07:b6:cc:60:18:01:f5:b3:2f:15:aa:2f:ae:
         0d:de:dd:f8:61:f2:3f:02:df:b0:65:cb:b2:dd:a4:ca:73:92:
         b5:46:53:49:d5:ca:80:ed:4d:18:f8:16:24:2c:08:4c:47:51:
         7a:47:65:2d:3c:0f:68:db:16:83:73:7a:46:d7:fe:14:8a:9a:
         16:fe:b3:60:03:ec:7a:0e:70:de:f2:d7:fa:b5:55:ca:6b:38:
         74:01:f4:51:fb:b7:87:a5:79:13:0c:9a:73:2a:d0:11:78:b6:
         c2:b4:5d:11:f5:df:08:92:5c:41:0e:13:e4:4b:5d:4e:92:8f:
         46:90:e6:f8:33:5a:68:9d:1c:04:52:c0:af:2f:bf:98:8b:45:
         14:f8:22:73:c0:14:fa:97:10:76:f4:11:2e:d2:c2:83:c7:08:
         ce:ff:97:71:cb:74:d7:ab:e0:a9:fe:09:85:0f:2d:aa:88:43:
         f5:c5:a2:11:65:d1:00:ff:b8:5b:d8:9e:55:7a:b3:97:8d:d4:
         bb:ce:61:2f:0e:4b:60:14:f8:9d:0d:00:40:9c:54:4f:cb:71:
         c4:91:3b:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE
MjE1Rjg2MkEwHhcNMjUwNjA5MDQyNTUzWhcNMjUwNjE2MDQyNTUzWjAYMRYwFAYD
VQQDEw02ODQ2NjI1MS05NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4n6FK6mantWBeFEW2jlvYv3l2Y7U8B4+NB9EcyVzqCsjnusSanFaI1TEnWx9
gd+XYC54gXFEuaqqSC9G9mrT8Gklf2eYOx2Yhfk0nCYrSkarpcipkNfSqekR0wef
oQLC+RQGSC3e79i6c+exFZmplHVP2yLczrDxD+dpOANB7rFl3n4+iaEaEZlU+Z12
VM6O2+WsaqJ5i47xdx8Y5ihzD5TJk4OoeYdB2QDpTxiJ16/g3PlSc9O27cobOMmi
UJzS+FYajQwv3vPAwubV6QS/SzjjNxGML3rpr7j2H13IXc60Emhxd9K3BDIFZpxA
tZ6pDx922KiwtCL9jFBREgvC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0XejGi
FyfKGUO9nnyfsLLRN02+MB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1
QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW
R3NoNmR5enNvTzNTRmZoaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1skiSPmNPFtnvIn4KlR6ILOvXh3jR9eqtXVFWHwarDOaUiaLZNxSt
xAe2zGAYAfWzLxWqL64N3t34YfI/At+wZcuy3aTKc5K1RlNJ1cqA7U0Y+BYkLAhM
R1F6R2UtPA9o2xaDc3pG1/4UipoW/rNgA+x6DnDe8tf6tVXKazh0AfRR+7eHpXkT
DJpzKtAReLbCtF0R9d8IklxBDhPkS11Oko9GkOb4M1ponRwEUsCvL7+Yi0UU+CJz
wBT6lxB29BEu0sKDxwjO/5dxy3TXq+Cp/gmFDy2qiEP1xaIRZdEA/7hb2J5VerOX
jdS7zmEvDktgFPidDQBAnFRPy3HEkTsk
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:02:16 2025 by rpki-client