Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File:                     PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier:          QPmFk8qo0ezIY7/CICkod5KpxPkoq9gu/Hb3TIITs64=
Subject key identifier:   E7:90:62:2B:21:05:7A:66:3F:78:40:B0:A6:70:E6:55:70:E0:59:9F
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer:       /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number:          7E
Signing time:             Fri 13 Jun 2025 05:36:16 +0000
Manifest this update:     Fri 13 Jun 2025 05:36:15 +0000
Manifest next update:     Fri 20 Jun 2025 05:36:15 +0000
Files and hashes:         1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: /1cmvCwJMV4/7X98cyzZflyfFZLtK69SR1Kor7acvvg=)
                          2: 0C2CCB529B6D11EF9DC26822C4F9AE02.roa (hash: 3dvjbuMT8Y0qb48SF6bJUwqEnOmDrnVR3qZ9bmDelg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
                          rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
        Validity
            Not Before: Jun 13 05:36:15 2025 GMT
            Not After : Jun 20 05:36:15 2025 GMT
        Subject: CN=684bb8cf-0799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:ee:b0:5f:34:51:42:9e:20:ae:15:8d:77:
                    ed:4c:47:94:ea:fe:c4:c5:9d:3d:91:4a:85:72:3d:
                    98:fb:a8:4f:ee:9e:52:23:9d:c7:5f:13:ac:4b:2f:
                    2d:d8:1a:f1:80:0c:2f:c6:ae:6e:18:16:4c:41:69:
                    ee:f0:bd:3f:56:2f:57:12:8d:ef:96:1c:c9:70:42:
                    e3:74:f5:6a:81:10:8f:71:91:5a:0b:08:c3:0f:42:
                    d8:d8:fb:59:5a:a4:4d:e3:f7:64:2f:b2:41:d3:0d:
                    c6:cc:39:91:f9:ce:8f:ce:be:43:28:dc:2d:a2:f5:
                    c1:72:b2:8e:ab:56:a3:22:2a:53:e4:58:d8:e3:49:
                    2c:23:38:fd:1d:19:bc:9c:de:dd:85:f1:ef:33:3d:
                    59:a0:46:bf:08:d3:4b:ea:31:87:0a:51:b2:69:aa:
                    b4:d2:80:20:ab:16:12:45:b0:6c:cb:37:cd:be:75:
                    f8:7a:2b:e9:02:cc:b9:49:1a:94:3c:50:82:99:d2:
                    4b:80:a9:0e:b0:4d:59:50:49:62:1a:d1:54:02:79:
                    31:24:5d:dc:99:13:67:94:06:e9:d4:2b:a0:88:72:
                    92:9e:af:19:77:4c:b5:02:bd:7f:a8:e0:30:d2:98:
                    52:80:df:f9:e9:19:c1:a1:73:f1:a2:fc:24:da:c0:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:62:2B:21:05:7A:66:3F:78:40:B0:A6:70:E6:55:70:E0:59:9F
            X509v3 Authority Key Identifier:
                keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:4d:fa:9f:cd:64:5c:38:8e:2e:b3:55:05:b4:89:03:01:
         05:9c:1b:a2:dc:5d:04:cc:a7:88:30:bc:06:7f:70:3a:fe:43:
         b6:0a:e8:23:b8:d6:b3:f2:9b:94:b2:b7:a9:5c:61:c6:3a:50:
         a7:63:79:61:33:b6:4f:52:76:dd:7e:de:16:bc:41:ca:d4:bc:
         f3:be:3d:4e:eb:b1:5b:f1:d2:76:d5:92:02:1a:35:30:e0:3a:
         96:3d:8b:2b:7a:77:27:12:0c:2f:15:fc:d3:6c:b5:67:9c:4c:
         f8:cc:00:e5:4d:3e:2a:73:4b:e8:ed:36:b8:cc:e0:95:a2:6d:
         59:f0:a6:56:8c:3b:64:8c:70:af:06:fe:6f:8e:7e:5e:aa:4d:
         28:f9:ae:2a:1a:0d:bd:70:1c:b1:bd:19:41:bc:7b:7c:50:b1:
         c5:c6:2f:e6:68:7e:b4:ef:72:e7:32:e4:88:b4:82:b9:ae:44:
         04:82:3b:4c:86:84:12:4e:43:c4:5b:e7:1e:9a:67:7c:9d:09:
         d0:c8:8b:0f:bb:77:6a:5b:83:92:1f:25:ce:48:bc:41:80:a0:
         c9:24:61:a8:9c:4c:80:df:31:d7:02:1a:18:a9:2b:df:47:a3:
         54:98:26:af:1e:7e:d8:46:82:e8:c7:5e:c8:b9:10:2f:9e:62:
         33:df:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:12 2025 by rpki-client