Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
File:                     ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json)
Hash identifier:          NAity4IN/K9rtoMLBUbYY3kDqJ2OmqONwAFRmCKTUdc=
Subject key identifier:   CE:AC:A5:9B:7B:F0:C1:C7:69:56:63:7A:8A:36:70:A9:8A:02:0D:13
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
Manifest number:          0243
Signing time:             Sun 15 Jun 2025 01:34:39 +0000
Manifest this update:     Sun 15 Jun 2025 01:34:38 +0000
Manifest next update:     Sun 22 Jun 2025 01:34:38 +0000
Files and hashes:         1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: aqeH99nZpxbVy/So4VHgUARBu4j73ilh3yrMNCodLN4=)
                          2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=)
                          3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=)
                          4: 2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa (hash: U22myChDK0J4NLA39gSglrY/Ph9QMALivvjc+F5pl5Y=)
                          5: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Jun 15 01:34:38 2025 GMT
            Not After : Jun 22 01:34:38 2025 GMT
        Subject: CN=684e232f-29f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:a5:32:c5:24:10:23:da:76:e6:16:1e:32:
                    aa:c6:54:f1:d2:15:33:33:44:c9:92:c1:2b:30:8f:
                    41:ea:e5:7c:11:23:1d:f7:6d:c7:bb:4f:b6:60:fc:
                    0a:ed:c7:4c:61:ba:06:4f:e3:09:3a:24:33:da:3a:
                    e8:53:b4:0c:cd:8c:ca:aa:41:ec:95:4d:f4:d1:58:
                    1e:cb:cc:51:ef:72:d2:30:53:01:5a:8b:aa:b6:7c:
                    b2:3e:20:ed:c8:a7:a5:7b:d6:a9:0d:4a:3b:e7:12:
                    f0:6b:20:55:13:75:84:9b:60:e5:f0:56:72:3a:06:
                    aa:c5:38:83:61:c3:6d:e9:97:a4:26:89:02:d1:c1:
                    8d:c2:3f:9a:a2:1b:4f:0c:8a:9a:a8:cb:67:5b:fe:
                    a6:92:9a:0f:9f:15:8c:1c:80:b2:72:e3:bc:58:5c:
                    9d:8f:7f:8f:07:8b:bc:13:32:fd:e4:d6:80:2c:3d:
                    f3:a4:c6:90:d1:75:e7:fe:63:e2:cb:94:00:25:75:
                    9a:47:75:9f:19:e1:52:63:38:b3:4e:e4:7f:cc:c3:
                    46:a2:f4:98:c7:c1:49:56:ef:2c:c3:46:a6:dd:63:
                    0a:13:4d:24:fe:84:fd:04:3d:89:17:71:f1:58:ee:
                    2a:62:0c:0f:c0:a8:57:40:21:72:a8:6f:5e:24:37:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AC:A5:9B:7B:F0:C1:C7:69:56:63:7A:8A:36:70:A9:8A:02:0D:13
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:db:ca:f2:bc:0a:52:43:ee:0c:0b:2d:41:ba:ec:54:25:
         e4:1a:1a:3c:2a:da:0d:a1:f6:d7:51:7e:e1:15:40:ae:5d:86:
         bb:82:c9:79:d6:ca:22:4d:cb:e8:0e:5d:e8:12:53:dd:d2:19:
         8e:ba:92:35:bb:9c:14:47:95:b6:e0:15:8c:82:91:7f:be:bf:
         15:da:bd:32:52:f1:10:60:ca:43:56:2f:52:00:8c:2b:53:fa:
         6b:e4:87:24:6a:e3:d4:26:3f:29:db:c0:c8:64:36:31:e4:85:
         30:c7:cc:33:d4:e5:08:54:b0:9b:e3:99:20:40:58:29:de:56:
         ba:c9:8e:6e:d5:cd:c2:12:b8:71:66:34:6f:4d:be:d6:fd:ad:
         b4:1a:69:2a:8d:83:29:25:c6:ca:0e:9e:ff:3f:53:70:85:07:
         a5:74:d0:b2:f4:48:91:ef:f7:58:11:69:e6:54:0d:c0:5e:27:
         ff:94:89:54:2c:1b:a3:de:d1:82:c6:68:b2:37:a4:89:91:e5:
         0e:f9:48:5f:1c:91:ee:53:8b:a9:67:d0:d5:8c:d2:79:ae:33:
         77:10:dd:a6:b1:44:8c:9a:20:a9:d7:7e:8e:71:70:09:47:2b:
         1f:fe:c8:e5:b4:21:5a:eb:74:c4:13:61:96:6b:2b:f4:30:1b:
         2a:49:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:24 2025 by rpki-client