Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File:                     YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier:          8yj8nmZg41Mjj9yRM7RNaEdQpog2FUugfvTp4jDgFNE=
Subject key identifier:   F5:FF:44:81:CA:6B:68:D9:A5:9B:DF:59:CC:65:31:E3:89:31:78:A1
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer:       /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial:       0635
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number:          0629
Signing time:             Sat 14 Jun 2025 22:28:08 +0000
Manifest this update:     Sat 14 Jun 2025 22:28:07 +0000
Manifest next update:     Sat 21 Jun 2025 22:28:07 +0000
Files and hashes:         1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: GHD/UMAW0tm+M/4Wqj5+mUW3lhFL2sV16Z9AGuETJvY=)
                          2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=)
                          3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
                          rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
        Validity
            Not Before: Jun 14 22:28:07 2025 GMT
            Not After : Jun 21 22:28:07 2025 GMT
        Subject: CN=684df778-f843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:9f:f0:00:4b:32:00:25:87:7e:91:ba:fd:
                    67:91:7c:43:09:46:c8:c1:f3:d7:af:73:64:de:a9:
                    fa:1f:b6:69:08:e3:97:db:81:13:66:6b:ae:1a:02:
                    1a:39:21:be:db:d8:0b:2a:ca:66:49:be:4e:30:b8:
                    a7:e4:e2:81:6c:7f:89:de:a3:3f:55:2a:c7:8a:c0:
                    60:d5:8a:85:c7:52:c1:26:27:a2:ef:83:42:20:97:
                    7c:51:b7:ae:f1:6d:84:6f:06:1d:9f:85:41:74:0e:
                    7b:9f:76:bf:95:16:66:1c:f1:44:f4:91:76:e2:b9:
                    79:31:e2:fb:3f:85:c7:22:cd:64:8b:0b:a2:a0:48:
                    67:68:90:e3:bd:90:c1:f1:c9:15:24:f5:d2:26:de:
                    b6:b2:c8:cd:68:57:bc:b3:03:cf:12:0d:10:a6:09:
                    8e:3d:db:80:2d:90:cf:78:87:60:a0:a6:e7:66:f7:
                    a4:e3:51:19:65:b4:54:36:cc:e9:3c:63:03:c8:0b:
                    dc:4b:bd:09:65:fc:72:dd:48:34:34:d4:38:3f:8b:
                    90:a0:f1:4f:93:7d:7b:a0:f3:8b:1d:aa:8c:95:a4:
                    e3:81:9a:e1:04:ee:75:36:49:89:98:4e:20:9f:60:
                    eb:8b:48:53:69:a9:e5:41:eb:ca:ba:64:f6:31:7d:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:44:81:CA:6B:68:D9:A5:9B:DF:59:CC:65:31:E3:89:31:78:A1
            X509v3 Authority Key Identifier:
                keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:34:d1:8d:12:86:93:57:71:b3:a5:0f:a4:c8:c3:b7:df:
         b3:81:8a:a1:42:27:40:73:bc:9a:51:77:66:da:b1:3e:17:f3:
         db:41:99:e2:e6:60:14:65:10:09:99:66:aa:5b:53:25:2e:ae:
         8b:f3:13:2a:5b:ea:d4:c6:d6:12:c3:28:8e:f6:c7:ab:87:69:
         97:55:d2:78:7d:6b:09:e3:f4:5a:08:a3:87:f7:28:02:ec:e0:
         bd:3a:3f:3d:32:2a:66:7f:f3:0c:84:da:71:9c:0f:9f:68:82:
         e9:55:c9:36:26:13:fd:26:2f:01:37:23:1c:97:40:8b:cd:ad:
         86:84:7f:62:5c:7e:e5:6b:65:bd:b7:98:b3:c3:1e:83:76:ac:
         d5:28:16:bd:20:05:85:91:02:7c:3e:a9:1c:7f:75:50:59:89:
         75:c2:85:36:dc:4b:72:4d:21:69:8e:2a:96:2f:c0:5c:d4:df:
         19:c5:f3:d5:b1:43:c0:7a:d8:09:cd:9d:42:41:1c:39:b4:5c:
         85:dc:06:20:05:27:75:10:ca:fb:67:2e:dc:8b:4b:a4:44:54:
         2b:e4:9f:45:a5:24:3e:79:6a:e2:10:2c:94:ad:68:88:d0:ec:
         5c:be:4b:16:6f:87:03:e0:9a:b1:cc:93:f6:4f:c0:54:0f:5c:
         47:0d:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:33:05 2025 by rpki-client