Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File:                     PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier:          DGV16q1XzHbZVqTr84TyQzF1lFYeUPEjPVYvd4a1q6E=
Subject key identifier:   EB:2F:45:FF:96:EA:2C:11:83:3D:89:64:13:B2:CE:E5:DB:D8:EB:32
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number:          01A0
Signing time:             Tue 17 Jun 2025 02:35:14 +0000
Manifest this update:     Tue 17 Jun 2025 02:35:14 +0000
Manifest next update:     Tue 24 Jun 2025 02:35:14 +0000
Files and hashes:         1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: nIhhNluj/FGRvvA9uCwnlnKbNanM6VuAu2k0sPZ72mE=)
                          2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=)
                          3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 02:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Jun 17 02:35:14 2025 GMT
            Not After : Jun 24 02:35:14 2025 GMT
        Subject: CN=6850d462-9a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:a8:c3:f3:4f:f2:51:60:56:e4:ab:d6:19:
                    93:f7:0b:a0:55:36:b7:a5:2f:56:33:2f:a3:32:10:
                    9e:a4:17:29:64:48:55:a1:e2:d3:8c:99:63:5f:39:
                    76:1b:94:9b:f5:50:e6:7a:ad:e8:b1:b3:dd:92:e0:
                    79:9c:b0:31:ac:e7:2a:db:60:6b:8d:21:8f:88:7e:
                    82:a1:44:2b:c7:d9:ec:fe:e8:e3:b3:e0:1e:a5:0f:
                    87:28:ec:6b:ae:37:d1:b8:95:1c:6d:52:ca:9b:e5:
                    29:22:fa:70:fd:53:7b:ec:5c:b8:b2:26:fe:8a:08:
                    a0:f1:c9:6c:aa:ab:e9:2e:5d:9d:fa:77:67:e8:f5:
                    2c:59:6e:4b:b2:c6:77:fc:6d:22:c5:7c:0a:96:2f:
                    cf:6d:b4:75:24:ad:32:f6:50:dd:1d:9d:23:bb:c7:
                    e6:a2:a9:8c:a5:05:aa:fa:0b:7d:56:1a:29:7e:00:
                    b6:7b:c7:e3:04:03:a9:65:51:70:38:5f:c5:0e:9d:
                    db:25:34:4a:ed:35:db:e0:f1:64:33:be:6c:70:31:
                    e0:17:15:98:3c:f1:7d:e8:a6:ac:42:2a:87:11:a4:
                    4f:15:7d:2b:46:21:01:60:b4:26:0b:aa:ce:05:48:
                    01:8e:6a:fe:75:60:bf:12:d0:36:07:2e:5e:fa:34:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:45:FF:96:EA:2C:11:83:3D:89:64:13:B2:CE:E5:DB:D8:EB:32
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:14:c5:dc:57:d8:61:7d:cf:24:14:da:eb:b1:cd:0a:c0:
         33:da:8c:dd:ad:75:85:a5:2a:3a:fe:e9:c5:db:7d:c8:83:50:
         e4:dc:f6:88:5f:44:23:fb:4d:7f:f1:ea:f7:8e:1a:bb:80:e2:
         48:ea:1d:f0:1c:82:8a:35:ac:52:27:a2:cb:ca:70:26:6b:77:
         08:68:ac:b1:83:4c:26:84:24:28:08:30:0b:71:b6:d8:6b:64:
         2a:15:78:a3:66:cf:cd:54:4d:d9:13:d4:cf:38:a8:f6:d0:fb:
         38:53:a4:7f:64:d5:9f:16:76:2a:a4:87:d7:a9:fb:db:b4:29:
         31:58:26:7e:a8:49:97:8d:5d:78:07:ed:51:31:67:e6:6d:86:
         27:0d:1f:65:75:56:92:9c:1c:17:09:3f:4d:86:03:42:a5:87:
         71:5e:f3:8b:c9:9a:0c:8c:e0:54:1a:a5:43:43:63:6d:3f:d2:
         12:e5:4f:e4:8b:6f:7f:e3:3f:d5:6e:e9:11:39:df:8a:ea:bd:
         e4:75:bf:c6:f3:34:59:34:26:a7:da:f6:9b:00:94:c5:e2:56:
         67:6b:b0:a8:ed:0c:5a:a9:83:5f:44:6e:97:08:b3:d7:f5:d2:
         c9:fa:03:ae:51:bf:74:99:3b:0e:89:68:aa:0a:50:01:c8:42:
         81:aa:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:12:32 2025 by rpki-client