Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
File:                     Pt_GEu6fIVySACA44L-3jfmkIt0.mft (raw, json)
Hash identifier:          ckUeHYoFtmqupq1sYclZbdbdPhDa9XQXMym1uiMF5qM=
Subject key identifier:   77:D0:CE:6F:15:5E:32:40:EB:C2:CB:54:E7:F1:73:3F:45:01:26:40
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       04E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
Manifest number:          04DB
Signing time:             Thu 24 Apr 2025 23:33:40 +0000
Manifest this update:     Thu 24 Apr 2025 23:33:39 +0000
Manifest next update:     Thu 01 May 2025 23:33:39 +0000
Files and hashes:         1: Pt_GEu6fIVySACA44L-3jfmkIt0.crl (hash: hIyCFKw7zdyCkut9QmUU6cNgu8n4hrhCoji3wjdKPWg=)
                          2: 405A719A173B11ECA6FAAE38C4F9AE02.roa (hash: WHVkMVaIDqsUtFffiasOomdMlljt2kCgIYVccMhJqfM=)
                          3: 415B7AF8173B11ECA6FAAE38C4F9AE02.roa (hash: aZljL1GmgNxI0k7AknE4ROV0CHcBUzl9gIS4j1EL964=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Apr 24 23:33:39 2025 GMT
            Not After : May  1 23:33:39 2025 GMT
        Subject: CN=680aca54-6f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:7d:65:14:9b:f0:9b:8f:2d:8d:7f:7a:0a:
                    6b:55:60:a7:d9:ff:c2:ec:5e:8f:1c:8f:d7:8f:79:
                    72:49:5e:bd:a6:26:fb:d7:9e:c2:ef:97:0b:d9:91:
                    11:40:bc:7d:c2:cc:26:eb:60:2c:4e:cd:86:03:10:
                    72:59:e0:f3:96:9b:c9:b3:63:a5:54:f8:2c:e5:c5:
                    a3:00:f1:f5:f1:ab:85:dd:f6:d3:1c:55:8d:c6:ab:
                    03:66:8f:2a:d4:b3:91:a7:85:04:02:e4:3f:fd:e0:
                    2f:f9:f1:d1:91:83:d6:21:8c:2a:6d:fb:ad:6f:48:
                    e8:a1:3c:8a:83:6e:52:0f:0d:e9:60:05:62:42:30:
                    5c:fa:77:45:cb:75:76:23:32:77:26:7f:48:7d:35:
                    86:d6:3e:32:fb:1a:1f:e7:44:52:58:7a:d6:cd:37:
                    a5:57:e7:d0:32:ad:c9:c6:cf:b8:bb:6d:7f:99:eb:
                    da:fb:df:c5:1a:bb:24:36:4f:8b:76:e9:71:37:80:
                    9e:f6:90:0d:d3:4d:77:96:48:70:df:99:b0:0c:06:
                    e6:a2:87:c4:74:4f:b9:a5:75:1d:39:7f:af:28:77:
                    a2:8a:34:43:8a:48:b3:45:2e:67:f6:55:e8:a6:96:
                    cc:a5:2a:5a:ea:0d:bd:ba:a1:f6:bb:23:59:92:2c:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D0:CE:6F:15:5E:32:40:EB:C2:CB:54:E7:F1:73:3F:45:01:26:40
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:22:95:32:f8:06:f7:9c:da:8b:ee:d6:08:57:30:f6:e7:
         1c:e8:a7:de:a0:0e:d4:4f:8d:ff:c4:c0:35:a5:3e:c3:de:a0:
         1a:d7:b5:e0:55:0e:6d:27:84:0b:be:b5:89:0f:35:6f:1b:ae:
         d8:5e:a8:24:63:07:46:ab:1e:18:d8:cc:e9:b4:d2:ae:6d:35:
         64:83:63:d7:2d:8d:4e:fd:38:a2:99:c1:64:de:96:2a:11:e1:
         05:36:54:41:4b:f2:f2:6c:26:b2:97:bf:37:ea:a7:49:d2:76:
         d8:1a:86:c0:ad:fb:42:62:d3:f8:22:59:37:4a:04:bb:eb:10:
         1e:4a:97:ed:07:d5:5e:2d:3a:7e:17:e5:c0:d9:2c:8c:f3:43:
         7c:b4:49:aa:b3:24:e1:63:4f:f1:2d:7b:cd:99:a9:32:bd:5a:
         8b:54:f8:03:bc:29:d7:a8:6b:4c:94:04:a4:17:4e:57:6a:0c:
         03:d8:c8:0e:30:7e:4a:41:36:75:19:6d:1d:1a:c4:14:04:8d:
         3a:e8:d8:ac:19:e7:03:82:74:92:98:1f:2d:2f:50:8e:b0:fe:
         47:25:2d:87:45:57:29:39:a9:d7:ae:78:3e:4e:a5:4f:bd:bd:
         16:70:73:bf:2e:a8:0d:59:a7:a2:ed:c1:41:0c:2e:d3:86:2f:
         ab:dd:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:31 2025 by rpki-client