Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          ctvGirhwaVnSkNP1X4ff+BKA80WkfQObokj8A1ZFHN0=
Subject key identifier:   8C:64:C7:56:38:DB:DB:3D:C2:45:F4:BA:98:31:BB:C6:D1:28:6D:E3
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       1965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          1935
Signing time:             Thu 24 Apr 2025 16:26:35 +0000
Manifest this update:     Thu 24 Apr 2025 16:26:35 +0000
Manifest next update:     Thu 01 May 2025 16:26:35 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: lbT9SLAXa3zmn2QeSYMugzS+WtxzWbWIFDajGDqxIUY=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6501 (0x1965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Apr 24 16:26:35 2025 GMT
            Not After : May  1 16:26:35 2025 GMT
        Subject: CN=680a663b-d17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:83:5e:ba:d5:45:43:9d:81:07:d9:16:11:
                    45:ee:c1:03:6f:68:ea:51:5d:e1:81:70:93:ed:3f:
                    06:ca:41:ad:80:4f:4f:e0:c7:d3:05:73:a6:a6:fa:
                    dd:2a:45:32:b8:57:7c:79:16:92:1b:81:67:5e:b7:
                    cd:37:c5:d2:73:ea:8d:7e:7e:7b:c4:9d:32:db:9b:
                    52:bc:39:12:7d:c0:79:96:ac:c1:9f:4f:89:94:8d:
                    b0:4c:af:35:19:b3:a1:1d:e0:e7:44:e7:93:8a:21:
                    cb:8e:67:bf:45:98:c9:47:3e:c3:7b:b5:df:c8:c3:
                    59:de:66:5a:d3:9a:11:e4:d0:22:29:87:e6:60:a2:
                    c5:59:9a:e5:ce:ff:eb:93:17:a9:3a:b7:2e:84:ca:
                    87:95:fe:0c:17:4a:a9:95:91:05:f8:04:ba:17:6f:
                    92:7e:ff:ce:f4:6a:79:d0:a2:44:90:20:8e:5f:21:
                    0c:30:ac:30:f6:e1:e5:86:4a:12:4a:ce:33:ee:13:
                    af:68:a1:bd:2a:3e:f4:cd:5e:15:e9:ec:d4:70:85:
                    24:03:9a:39:6d:9c:80:5b:4c:df:3e:61:ba:35:d0:
                    ed:03:08:6e:1f:03:15:37:4a:de:19:15:e8:27:bf:
                    59:66:4a:68:5f:ad:cf:1d:18:0c:6d:49:42:7c:ce:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:C7:56:38:DB:DB:3D:C2:45:F4:BA:98:31:BB:C6:D1:28:6D:E3
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:86:fc:21:64:32:f7:e3:2a:e9:ac:3d:bd:9b:88:bf:ea:
         82:35:6f:bd:cc:d6:ac:42:f7:12:1b:b1:db:48:46:89:e8:8b:
         47:d5:fa:01:bb:a4:8b:3f:4d:d1:7d:0e:2a:2d:1c:58:f7:4d:
         44:4b:7d:36:5d:d0:89:a5:56:83:74:7a:54:a1:a3:98:b3:91:
         25:73:65:ba:69:de:2a:0e:a5:71:e8:04:44:06:52:0d:77:52:
         7c:b7:7e:ad:de:09:bb:77:aa:1c:c6:a0:09:11:2b:b5:68:06:
         be:63:3a:67:0b:a7:c8:7b:b8:d2:ec:5b:29:8a:29:8a:6a:bb:
         30:e3:bc:5e:e6:1e:45:87:d5:93:8e:cb:65:2f:d3:0e:26:40:
         81:e2:af:ea:c9:c5:de:85:fa:7c:df:92:73:bf:db:04:2b:5e:
         93:07:b2:2a:86:2c:6b:4a:1e:81:3b:c4:f0:a0:f8:3d:f4:3c:
         e7:6f:75:83:11:1e:9e:cb:58:37:1a:89:80:b1:9b:eb:85:d5:
         96:0e:56:0a:81:85:c8:19:31:7a:a1:00:de:b2:66:f4:cc:64:
         d6:3d:a3:ab:34:62:45:ad:84:d4:dd:1e:04:2c:24:e2:dd:46:
         8a:68:21:35:56:46:b8:d8:00:7e:6f:9c:a0:06:80:ed:1e:f2:
         cc:88:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:47 2025 by rpki-client