Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          0A3hkTg/GJn8GQw3GLPtt8my/Xz19DDFz5Qf9ekvI/g=
Subject key identifier:   64:31:6E:ED:64:41:E6:93:76:1A:9D:5E:2E:54:48:B2:97:83:07:AB
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          01DD
Signing time:             Mon 09 Jun 2025 01:50:30 +0000
Manifest this update:     Mon 09 Jun 2025 01:50:29 +0000
Manifest next update:     Mon 16 Jun 2025 01:50:29 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: t0nnGIaLsSWtZyNdE6MO7EVf/bSrv0yZ7YZp2iFpTHQ=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 01:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Jun  9 01:50:29 2025 GMT
            Not After : Jun 16 01:50:29 2025 GMT
        Subject: CN=68463de6-6b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:92:03:f6:0d:b2:12:24:05:83:05:a2:bc:
                    dd:9a:89:d3:25:a9:62:b2:b7:7f:82:8c:47:a4:00:
                    fc:42:6c:cf:87:ad:c4:03:bd:9d:16:1c:37:e6:ce:
                    a7:85:90:07:04:ea:ac:76:ad:bd:92:7f:8d:5f:b5:
                    92:cc:00:1b:8e:1a:db:c8:8f:b0:75:76:92:78:44:
                    02:94:57:4d:13:1e:5d:95:2d:c3:1d:55:0b:c2:c7:
                    9e:39:40:a3:b3:31:fa:b7:11:31:ca:a9:3b:8a:80:
                    42:d9:eb:d6:2d:dc:28:ee:91:d3:91:5e:f6:99:35:
                    f8:cc:d3:49:ff:c0:d8:f7:d0:95:9a:05:5b:5b:84:
                    6d:c9:d1:6d:34:fb:fb:29:6c:fc:85:c8:89:16:48:
                    88:c8:f7:1d:14:a9:21:18:8c:06:92:8a:85:52:75:
                    6f:a7:e9:4d:99:75:cf:6e:ce:07:b7:7f:a5:04:be:
                    5a:c6:42:d8:c7:ef:74:68:07:88:56:4c:6f:70:63:
                    ff:f1:bf:bd:da:90:2e:06:c2:e6:34:f5:e1:52:78:
                    67:c1:77:40:1b:35:bc:0b:59:84:bb:e5:9f:2f:26:
                    5a:9a:18:a3:a9:f7:76:79:81:d7:90:05:8a:3b:8c:
                    b9:13:a0:d4:74:b1:d6:1d:e4:82:82:91:63:35:d9:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:6E:ED:64:41:E6:93:76:1A:9D:5E:2E:54:48:B2:97:83:07:AB
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:30:4d:ce:dd:6a:de:d3:85:1a:4f:4c:a9:e6:40:4f:c3:
         32:22:f9:25:17:71:40:dd:08:76:da:92:71:4e:1d:d0:6e:26:
         8a:83:0d:d4:1e:14:38:34:bd:23:0b:16:a9:99:e8:ac:37:5a:
         e1:e6:60:6f:f7:70:6d:c5:b0:2c:b3:91:05:3f:53:ee:81:59:
         88:c5:b9:c5:ee:d1:ac:90:be:ab:1d:cc:7b:72:44:d8:67:66:
         f5:d0:51:05:78:45:0e:1a:a0:62:95:bb:8d:9e:87:8d:e7:bc:
         c6:66:55:66:50:84:36:5f:93:35:15:2a:15:3a:46:48:82:78:
         20:1e:34:d8:c1:3f:b5:42:64:11:b8:7f:ba:5f:bf:49:c6:7f:
         0b:62:02:35:db:6f:13:77:ff:d0:17:ff:46:7c:51:b1:1f:87:
         be:fa:b2:20:0d:6b:05:19:8f:07:99:d9:41:a0:15:a8:d6:f6:
         00:86:c8:9b:e0:be:86:6f:46:07:dc:61:d1:78:70:78:ed:af:
         0b:ec:e8:df:7c:e1:8b:9f:b7:88:4a:18:58:fb:7a:b3:fe:8b:
         be:ff:c5:68:62:16:c4:19:6e:72:16:63:94:8e:67:aa:8e:66:
         d8:c4:79:ea:ac:68:13:36:e0:eb:41:0a:4d:06:2b:de:f4:a7:
         b9:be:30:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD
N0Y0RTU5MDAwHhcNMjUwNjA5MDE1MDI5WhcNMjUwNjE2MDE1MDI5WjAYMRYwFAYD
VQQDEw02ODQ2M2RlNi02YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCmSA/YNshIkBYMForzdmonTJalisrd/goxHpAD8QmzPh63EA72dFhw35s6n
hZAHBOqsdq29kn+NX7WSzAAbjhrbyI+wdXaSeEQClFdNEx5dlS3DHVULwseeOUCj
szH6txExyqk7ioBC2evWLdwo7pHTkV72mTX4zNNJ/8DY99CVmgVbW4RtydFtNPv7
KWz8hciJFkiIyPcdFKkhGIwGkoqFUnVvp+lNmXXPbs4Ht3+lBL5axkLYx+90aAeI
VkxvcGP/8b+92pAuBsLmNPXhUnhnwXdAGzW8C1mEu+WfLyZamhijqfd2eYHXkAWK
O4y5E6DUdLHWHeSCgpFjNdlndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQxbu1k
QeaTdhqdXi5USLKXgwerMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4
OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1
Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlPDBNzt1q3tOFGk9MqeZAT8MyIvklF3FA3Qh22pJxTh3QbiaKgw3U
HhQ4NL0jCxapmeisN1rh5mBv93BtxbAss5EFP1PugVmIxbnF7tGskL6rHcx7ckTY
Z2b10FEFeEUOGqBilbuNnoeN57zGZlVmUIQ2X5M1FSoVOkZIgnggHjTYwT+1QmQR
uH+6X79Jxn8LYgI1228Td//QF/9GfFGxH4e++rIgDWsFGY8HmdlBoBWo1vYAhsib
4L6Gb0YH3GHReHB47a8L7OjffOGLn7eIShhY+3qz/ou+/8VoYhbEGW5yFmOUjmeq
jmbYxHnqrGgTNuDrQQpNBive9Ke5vjCO
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:43:49 2025 by rpki-client