Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
File:                     E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json)
Hash identifier:          Wv4w9kl5eFeHilvGpM1OM2PsocyJ/waKuflZozEBJE0=
Subject key identifier:   F1:28:A5:7D:C9:C4:69:FD:52:AF:BE:DB:31:9F:78:40:DC:1A:44:07
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Certificate issuer:       /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
Manifest number:          0291
Signing time:             Tue 17 Jun 2025 01:10:56 +0000
Manifest this update:     Tue 17 Jun 2025 01:10:56 +0000
Manifest next update:     Tue 24 Jun 2025 01:10:56 +0000
Files and hashes:         1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: U3/QrLsLl2axXsWxFqlziq+x70Gvyaq5edwVN3suQ/U=)
                          2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 01:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
        Validity
            Not Before: Jun 17 01:10:56 2025 GMT
            Not After : Jun 24 01:10:56 2025 GMT
        Subject: CN=6850c0a0-6a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:a8:86:28:29:17:ed:67:ed:b6:57:61:2d:
                    22:a9:f5:6b:a9:c7:4b:f9:4b:1e:bd:42:9a:08:e2:
                    4f:4d:14:9a:0e:f2:5c:74:72:e8:3e:0c:0c:e2:38:
                    55:63:62:41:b7:2e:f2:2a:cd:04:a5:2b:14:e6:1d:
                    50:a1:bd:2a:ef:ab:56:83:5c:06:83:56:44:f8:6e:
                    21:26:99:c2:10:d0:5c:54:9a:10:79:8b:ea:ab:a9:
                    5d:28:fe:1d:de:ae:ac:18:58:42:17:e4:60:10:b1:
                    81:e1:c5:17:34:4e:b5:49:ef:cd:f5:c7:68:3f:7b:
                    ef:11:93:75:f5:46:94:19:76:73:3b:c3:ff:bc:49:
                    59:ce:0e:f4:dc:1d:de:d3:f2:b2:b9:f4:b9:42:22:
                    5d:93:2c:b6:d6:ab:62:29:5d:17:af:cb:23:6d:db:
                    05:87:a5:d3:82:e7:85:c8:fd:02:40:c7:f1:d2:46:
                    6e:e6:5e:36:86:e9:e8:60:f5:b4:42:82:f7:4c:98:
                    d5:7a:58:d1:8f:e0:03:63:f5:1c:e8:9c:fb:0d:78:
                    e4:64:c4:21:d1:75:6d:37:43:7a:f3:4c:5c:04:4e:
                    f3:97:13:c9:01:35:19:3f:b3:c8:7a:9a:0a:c1:11:
                    c5:0c:59:50:e9:59:74:03:83:c9:55:fd:08:a4:74:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:A5:7D:C9:C4:69:FD:52:AF:BE:DB:31:9F:78:40:DC:1A:44:07
            X509v3 Authority Key Identifier:
                keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:5e:ac:d6:df:e8:4b:11:65:95:dd:1e:3e:b8:61:12:34:
         1a:88:7c:fd:e0:a2:b1:96:e2:26:74:8f:c3:2c:7b:97:49:c2:
         2c:b2:36:ac:80:6c:2f:53:b2:d6:9b:3e:0a:67:5d:dc:5a:79:
         03:12:75:e9:86:dc:2c:5f:58:a4:a2:0e:99:98:d7:40:cc:cf:
         c5:11:fb:f5:08:0e:0a:09:a9:b1:71:0a:f9:f2:a8:17:c8:c8:
         b2:5f:c2:be:93:36:5a:05:d5:2e:a5:e2:02:4f:06:51:b0:f1:
         05:3a:48:9e:72:f5:07:69:03:d0:33:40:3c:d5:28:0d:49:b0:
         05:e2:79:38:70:04:49:fd:0a:6b:79:20:73:8c:ec:ea:42:80:
         e6:a2:b9:16:58:17:cf:9c:48:49:24:2b:6f:7a:aa:84:4d:88:
         ec:6a:65:82:e2:ac:ec:5f:fe:03:97:b9:9e:c2:d9:99:67:3c:
         64:04:73:f1:35:8f:3b:94:e9:40:89:8d:22:0f:a1:14:bc:08:
         6e:8c:59:0d:82:bf:83:63:35:b4:c9:b2:f1:6e:53:e3:9b:12:
         95:57:c7:6c:83:55:51:40:89:be:f6:0d:3e:0b:71:28:18:89:
         62:7c:f1:e2:d0:29:66:7a:85:48:fa:1e:b6:be:07:66:d5:35:
         e9:e0:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:12:58 2025 by rpki-client