Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          C7arQzkwvzH1wRFlbp8RBZiYLIG7M7F1sOIC58oLMNk=
Subject key identifier:   64:AC:FF:7F:FC:36:75:5D:86:33:8E:FF:E6:58:2D:EE:44:75:E4:1D
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          01B7
Signing time:             Sun 15 Jun 2025 02:22:19 +0000
Manifest this update:     Sun 15 Jun 2025 02:22:19 +0000
Manifest next update:     Sun 22 Jun 2025 02:22:19 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: X92rqw8Mp+Lcj5SFVF7DRcTlNHGF0KIIlInK7G33LLE=)
                          2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=)
                          3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=)
                          4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Jun 15 02:22:19 2025 GMT
            Not After : Jun 22 02:22:19 2025 GMT
        Subject: CN=684e2e5b-3d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:d1:3a:73:48:9d:84:95:e3:76:5f:51:5f:
                    47:35:71:53:4f:52:28:c5:ac:ef:11:65:af:fa:01:
                    16:2f:39:2d:ac:d5:97:8b:1b:ea:f0:65:50:1e:4c:
                    65:70:e8:e2:48:22:67:61:32:4a:a6:a6:24:2e:b5:
                    14:08:6f:8a:00:c9:1b:a9:d2:7b:cc:a2:5c:4c:e1:
                    2d:84:6d:5f:95:7d:9f:d6:ef:3c:74:c7:6d:8e:f9:
                    6c:7d:f7:85:fb:0f:4b:b7:29:b9:28:19:14:30:3e:
                    e5:9b:54:f4:b8:93:a6:88:61:b0:cc:12:82:bc:6b:
                    f6:ff:b8:db:e6:06:71:c6:a7:f1:11:5c:fe:4b:d0:
                    1e:5f:94:e5:2b:82:1d:ec:b7:11:dc:00:55:c3:da:
                    ea:8b:75:7e:f1:80:06:be:97:af:c8:46:59:1b:20:
                    d6:b4:68:3a:ff:40:c1:55:30:3f:b6:f4:0a:f9:5b:
                    2f:c7:6e:51:63:6a:7a:31:3e:90:0b:bb:18:37:05:
                    9a:6b:f8:46:00:fa:54:70:a7:78:36:ae:e3:c8:cf:
                    61:81:ad:d3:48:cc:3f:86:86:bb:56:33:81:0b:f5:
                    d7:94:4c:6e:b8:a9:39:7a:52:ed:af:a5:4c:aa:f1:
                    d6:eb:0d:34:e4:f8:da:f1:27:f0:5c:cd:7d:b4:5e:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:FF:7F:FC:36:75:5D:86:33:8E:FF:E6:58:2D:EE:44:75:E4:1D
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:ec:ee:72:f6:b3:f6:9b:ad:a3:0c:7e:45:24:e1:c9:aa:
         05:1e:7d:71:f8:f0:5c:ce:0b:45:0e:66:4c:dc:1f:99:b4:e5:
         f4:8a:80:c0:23:07:41:94:71:4e:2a:33:3d:b5:31:8c:3a:72:
         84:d3:01:35:0c:75:01:83:7c:f3:3e:49:2a:90:26:2b:8c:34:
         97:c2:67:b5:8d:d5:81:0b:4c:6c:75:02:24:c4:ef:82:33:13:
         a0:01:46:a1:b5:4b:6a:9f:e9:5f:16:c3:cb:9a:07:d3:34:b3:
         1c:ad:26:88:6c:c6:3c:f0:2c:09:7b:bf:d4:69:83:f7:3c:e0:
         1b:8a:94:20:39:97:1e:a5:cf:57:8e:78:ab:bf:42:7c:86:dc:
         64:9e:f2:69:c1:33:a2:e9:26:3d:be:37:9c:9b:28:f3:27:5f:
         1e:e3:1a:c9:37:80:5e:71:18:f7:41:80:45:58:6e:4e:96:0b:
         2d:2e:e8:f5:f1:e1:8d:6b:d8:af:e9:a2:07:ae:26:f1:24:20:
         34:da:99:9e:f8:29:5a:3a:cc:05:e0:29:a4:a4:9f:8d:75:e3:
         8c:22:a1:2f:2f:68:07:46:98:da:8d:90:af:0a:88:c4:79:c0:
         fb:ff:44:50:8b:33:00:77:c2:db:b2:9e:20:df:82:74:af:40:
         24:a2:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:31 2025 by rpki-client