Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
File:                     ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json)
Hash identifier:          ppUmcs8IY/6o2vP+lnXnEjUn9vHqKGKysEk1UiiEF3Y=
Subject key identifier:   6F:5A:F8:2D:E7:A8:9E:BE:17:CA:57:7D:07:6B:36:14:D4:F5:19:57
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Certificate issuer:       /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
Manifest number:          07D1
Signing time:             Thu 12 Jun 2025 20:48:08 +0000
Manifest this update:     Thu 12 Jun 2025 20:48:07 +0000
Manifest next update:     Thu 19 Jun 2025 20:48:07 +0000
Files and hashes:         1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: M1w0y3r+9/nv4P55q7rJR6M7rxBvCgqjWdxWc5om8ic=)
                          2: 816A256CF57311EA86849119C4F9AE02.roa (hash: jh/uFXEIZPMO8B1QG/kheiWEegpd+33S7ffLLKrSdB0=)
                          3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: d2TZXE18Xt38fADyNBS1PVNUEthCJSPtYY97KfIT80k=)
                          4: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: 5TA62bj3DT+mJ8Nio1yv4R6VCuB4DLublpXb87Ez56Y=)
                          5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: yYe2S/r+iFZmGGM++jOhHqDjwT0Z+vvfLaaWlIwsXLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
                          rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
        Validity
            Not Before: Jun 12 20:48:07 2025 GMT
            Not After : Jun 19 20:48:07 2025 GMT
        Subject: CN=684b3d07-77e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2a:20:8c:d6:7e:34:d6:3c:54:8a:d9:11:6a:
                    01:92:39:08:42:7a:33:37:fb:33:7c:10:00:76:e4:
                    2c:fa:02:72:f7:88:a9:56:cd:4b:3e:ab:32:cd:70:
                    3b:e3:b5:76:6d:5c:34:89:aa:a1:5b:dc:c8:25:aa:
                    3a:1f:ca:a7:f7:d6:01:f6:c2:20:91:f7:45:57:c7:
                    96:8e:64:9f:a5:ab:11:d7:f3:97:ac:5b:00:e8:45:
                    ad:5a:ed:2b:2a:8c:b5:72:3b:c0:57:53:90:47:cb:
                    b7:f6:b2:78:27:5a:00:bc:b4:8e:0f:6c:2a:61:21:
                    32:64:ce:17:a2:cf:94:ce:dd:65:6c:b4:3d:e5:90:
                    35:33:d2:87:6d:82:3b:58:11:ff:d6:ca:8e:38:d0:
                    97:26:00:cc:a4:5e:e5:0e:b8:8d:99:1a:36:8b:8b:
                    34:d4:a8:6b:9f:0d:92:17:6d:6d:21:fc:9f:6d:6f:
                    fb:6b:ff:43:e7:6b:3a:ca:65:44:3f:fd:8a:78:24:
                    05:39:13:4a:fc:5c:6f:bc:7b:01:21:8e:9c:2e:46:
                    c3:96:c5:64:2a:5d:32:76:81:ba:4d:3a:cf:1c:97:
                    77:c8:9c:51:8b:a8:35:61:5f:f8:10:40:50:06:99:
                    9b:20:8a:ae:12:04:87:9a:de:40:ba:34:f9:69:5d:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:F8:2D:E7:A8:9E:BE:17:CA:57:7D:07:6B:36:14:D4:F5:19:57
            X509v3 Authority Key Identifier:
                keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:a1:73:ad:3e:e1:6f:c5:19:4f:35:40:0b:3e:ef:4f:88:
         fe:2b:9b:c0:a7:19:8c:03:38:f5:7a:b4:77:1d:f6:64:84:8a:
         9b:eb:80:c0:d1:e6:e2:90:a1:7b:a6:40:e4:55:5e:2a:75:fc:
         47:c5:2a:03:66:da:81:97:2d:c7:f9:7f:91:a0:b5:fa:fc:ed:
         4f:07:38:bb:70:e8:5b:a0:20:a3:c8:38:88:b1:8a:96:a4:6c:
         5d:e1:61:88:23:c9:47:4d:46:a5:19:77:c2:e5:79:97:ae:d2:
         f8:4f:b9:87:fc:2f:79:53:00:b9:97:24:2f:07:94:56:b4:16:
         38:da:fa:eb:7b:30:15:2f:ef:37:69:12:88:7a:3e:ee:c2:2d:
         92:a8:6a:d0:aa:c7:7e:87:f1:60:9f:ce:8f:45:73:70:9b:61:
         76:80:ee:f0:91:3d:9c:17:88:da:f8:32:7d:12:76:31:9e:fd:
         c3:09:ff:ce:26:12:4e:8b:a5:26:49:39:4c:a0:d3:1d:f7:1a:
         e1:b5:fa:e2:50:d2:0f:47:3b:f1:9e:d4:b6:a1:fb:89:6f:2b:
         d1:4d:34:d1:ca:fe:1f:5e:01:78:00:d1:e8:34:0f:44:16:da:
         8e:c5:97:da:b1:29:0c:b4:52:67:fd:99:75:3d:37:13:e0:e4:
         df:dc:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:43:50 2025 by rpki-client