Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          3yWqlceSKDOFTsLATZhs1plYaPYrDljORoca58BwWuY=
Subject key identifier:   11:8B:14:1A:C8:8B:58:14:02:76:E5:8B:F1:23:A9:DD:2D:9D:73:A9
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       0601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          05E4
Signing time:             Thu 24 Apr 2025 22:46:21 +0000
Manifest this update:     Thu 24 Apr 2025 22:46:21 +0000
Manifest next update:     Thu 01 May 2025 22:46:21 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: 4z5jx6K8cVsyamkgLfvcqEg6DsRKBz1RrRSAKSzlyHw=)
                          2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: kdGlpoPLDFl4EFsEkQ3+koS5Zps0quso4evVDz2ybGs=)
                          3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: SrZKBZGz8OzOGhz2SHKRuiCBww7vVTb4bHz7dYOe5eA=)
                          4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: y01Dpux3/iKwZXDRv92g3i91QNG9oOahiRukT+wPDl0=)
                          5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: OSggIm+/p+MrL8wcnCaLfLB40YedacjWTkw8IkjnU3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Apr 24 22:46:21 2025 GMT
            Not After : May  1 22:46:21 2025 GMT
        Subject: CN=680abf3d-32cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:71:66:6f:dd:9e:ec:fb:24:3a:a3:52:5a:
                    d0:fd:5b:0b:84:1e:40:6a:26:7e:60:dc:da:bd:28:
                    c2:74:45:31:91:9f:44:90:6a:c8:2c:7d:5b:2f:dd:
                    21:b5:af:4e:88:a1:86:68:d1:8e:1c:af:cc:cf:b0:
                    b8:64:96:d2:2d:82:93:ea:3e:7d:9e:d7:57:22:b0:
                    5d:f0:15:ae:a8:fb:d9:bf:3e:bd:f1:e3:b5:12:a9:
                    a5:1b:bb:eb:8c:25:a2:7d:da:2b:87:53:86:ae:bb:
                    c9:82:2a:9d:d1:9c:96:47:2f:fd:48:a2:db:50:6b:
                    da:ca:95:0e:ba:b7:35:08:6d:72:8d:e2:04:66:89:
                    3f:4a:fa:74:57:6b:73:3d:95:62:2d:37:95:f3:c7:
                    87:08:6b:90:65:ce:28:e6:42:ed:e5:69:6c:8d:95:
                    0e:4a:90:84:16:2c:44:47:4f:c4:fd:c6:e1:88:50:
                    f7:aa:d4:bb:7a:94:30:1e:86:d8:02:0d:c1:3a:b6:
                    df:be:7f:e7:bb:7d:6a:f0:37:77:33:64:29:a8:0a:
                    58:cd:a1:fa:b7:72:96:10:55:09:4f:6d:34:69:40:
                    8f:f9:1b:18:d0:4f:d0:7d:37:c4:3b:56:70:e2:ad:
                    40:3c:59:50:01:67:e4:e0:5c:78:c5:c7:e4:d3:0e:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:14:1A:C8:8B:58:14:02:76:E5:8B:F1:23:A9:DD:2D:9D:73:A9
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:18:25:7d:73:ab:3f:53:e1:1d:85:79:86:ad:47:5e:2c:0c:
         bb:bc:25:ee:ff:e0:f2:f2:58:b6:72:39:94:81:8e:6c:dd:dd:
         fe:05:40:6a:34:c4:d4:f9:17:eb:68:a8:86:c1:69:2c:19:3d:
         d0:b2:05:56:1a:c7:00:b8:69:b3:72:4a:a6:4d:e0:60:8c:1e:
         b0:82:5e:05:73:8f:fc:db:44:40:37:55:dd:93:5f:86:9c:c4:
         3f:b7:dd:1c:ec:a4:c1:f1:44:fc:dc:85:69:c7:ce:29:9a:c9:
         93:4b:bb:3f:28:49:eb:44:3b:86:41:5a:ed:0a:e2:1b:69:77:
         1a:f6:86:4b:b0:c5:75:d1:23:47:94:84:eb:6f:a5:8c:2f:80:
         ce:53:f8:d0:bb:cf:a6:df:91:40:ad:48:b8:03:73:ae:e9:45:
         96:cb:db:08:4c:93:1c:76:b5:cb:2e:62:07:27:c7:a6:29:40:
         9b:bf:18:41:ae:7b:5a:35:16:23:ce:e9:9f:95:43:76:8f:75:
         ab:0e:3f:f8:19:99:92:3e:c9:75:d2:2a:ad:0b:d3:f8:80:40:
         31:0f:12:90:7e:b1:ad:ce:3d:c4:2e:fb:fb:f1:0d:94:50:1d:
         60:3f:4a:66:3f:ef:dc:fa:0e:43:66:6c:0b:3b:69:e7:67:a3:
         7b:3b:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:35 2025 by rpki-client