Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          5ootnnfb4Exx2uhVL6BlFKdTHOpgqRoftPVi7vIj79U=
Subject key identifier:   0B:9A:3C:DA:A2:BD:84:78:1D:33:8F:7C:FC:A5:74:5C:1A:99:CC:22
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          019A
Signing time:             Fri 13 Jun 2025 02:24:58 +0000
Manifest this update:     Fri 13 Jun 2025 02:24:58 +0000
Manifest next update:     Fri 20 Jun 2025 02:24:58 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: zu2VXQE0avuq+SzwOnxUSQmP8ujOfSFG8yKco+EQ6U4=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: Jun 13 02:24:58 2025 GMT
            Not After : Jun 20 02:24:58 2025 GMT
        Subject: CN=684b8bfa-2924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:bd:43:fc:fd:c2:d5:ce:75:e8:a6:9c:40:
                    b3:de:e6:f1:0d:91:0e:ba:af:8e:be:25:f2:2a:40:
                    d4:5d:00:bd:93:5f:b2:df:08:a7:c6:4e:90:6f:ab:
                    42:f6:9e:67:16:38:35:39:0a:e3:19:92:b8:bb:67:
                    88:0a:ab:79:71:01:ae:33:56:f4:19:51:88:5c:27:
                    8b:4a:ee:49:09:a1:e5:87:21:7f:07:c4:f8:9f:c3:
                    10:ea:06:52:ca:e8:fd:04:b4:0a:84:35:cb:a1:67:
                    2a:ca:0b:53:48:85:09:64:48:f0:f9:10:c2:16:c6:
                    6e:34:68:2f:48:6b:a2:4b:c9:9f:8b:17:1a:66:5d:
                    d0:64:61:84:39:13:d2:bf:a3:9e:a6:65:b1:35:ed:
                    bf:25:82:3b:5b:25:67:41:bb:8a:e8:5d:cf:4b:fa:
                    39:a3:17:cc:a0:01:13:e5:50:a1:95:f6:b4:4f:6f:
                    2b:95:72:8c:7b:79:65:d1:b3:c2:14:82:3a:d0:5d:
                    01:87:67:f8:e5:46:7e:33:4e:dc:c2:3f:e1:f2:41:
                    77:28:02:e2:fc:fe:cd:0f:e9:a0:1d:53:16:ff:96:
                    17:7c:94:0b:52:53:4c:64:18:fe:20:d3:9b:44:ff:
                    96:9e:2b:37:ca:e6:60:1e:7e:0c:9d:91:7d:61:79:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:3C:DA:A2:BD:84:78:1D:33:8F:7C:FC:A5:74:5C:1A:99:CC:22
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:7d:d7:df:61:3c:f2:1f:8a:4a:db:3e:2c:2c:96:2e:3f:ea:
         78:45:31:8a:c2:fb:bf:56:91:8e:38:c8:76:5f:f9:30:a6:97:
         08:44:ab:d4:0e:8b:92:f5:ef:5e:68:ee:af:22:1c:51:ab:2b:
         8c:91:5f:23:ea:16:8a:4e:6a:0e:d7:f0:27:82:01:d8:76:1c:
         58:41:0e:af:c7:f9:a8:23:a8:ce:9d:19:3e:79:55:ca:a5:71:
         75:e1:ec:3a:c9:86:60:d6:b1:cb:a8:78:55:2f:ac:1f:74:96:
         ae:ef:5b:a2:ff:cf:40:05:08:db:18:44:e2:dc:b5:e2:99:56:
         9b:07:4a:69:51:0c:1c:a5:4a:90:fb:71:db:04:b0:7d:f9:af:
         83:e4:31:2e:82:4f:9e:b3:67:42:df:1c:e6:be:78:1a:88:13:
         84:f7:49:9e:bf:bd:10:85:f0:2d:37:50:de:24:ff:44:4c:e9:
         e1:5b:4f:01:2d:8b:07:f3:5e:c0:ea:f0:0d:b7:56:7f:95:5c:
         0a:7d:63:4b:0b:f1:b9:69:f8:99:57:be:36:a1:d4:06:c8:19:
         d9:22:0a:4f:e2:af:6b:4d:5c:1a:73:34:3e:43:ec:d3:92:04:
         48:56:ae:93:1f:5f:2c:76:82:78:33:1c:e1:0e:49:7c:f9:44:
         a7:7e:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:14:15 2025 by rpki-client