Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
File:                     gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json)
Hash identifier:          DmJrsInDiB8ecOmNUPKhMMlY24fKAGmYD/SPqY2g2uI=
Subject key identifier:   26:29:EC:84:48:47:85:49:12:57:BA:EB:28:9A:8D:7B:99:11:84:9E
Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35
Certificate issuer:       /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
Manifest number:          0124
Signing time:             Sat 19 Apr 2025 03:51:58 +0000
Manifest this update:     Sat 19 Apr 2025 03:51:57 +0000
Manifest next update:     Sat 26 Apr 2025 03:51:57 +0000
Files and hashes:         1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: VAGAAUKAUegEfr7DdfrqmnSQs3jEuSoSM+67lW0ORvk=)
                          2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=)
                          3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: wGDmOTIVSrDQKDKCEK7gF/ecDvEsfL3U/Gc/OshH53U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl
                          rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
        Validity
            Not Before: Apr 19 03:51:57 2025 GMT
            Not After : Apr 26 03:51:57 2025 GMT
        Subject: CN=68031ddd-7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:d1:06:0a:5d:ee:e5:90:94:be:c5:97:5b:
                    a7:06:be:6e:0a:a2:33:e9:ff:6b:fb:4c:37:f5:29:
                    94:d5:1c:52:7a:09:a8:b3:46:36:b2:61:d0:be:67:
                    0e:c5:b9:fb:77:73:93:dc:03:92:95:99:51:79:26:
                    69:93:35:32:84:5f:38:fd:09:e5:41:41:69:b3:62:
                    38:09:1a:10:4a:5f:27:f0:a7:af:99:64:d8:38:bf:
                    f1:ce:50:03:d5:a2:6c:0f:9b:0b:d3:d9:4e:28:c7:
                    f5:d6:be:1f:60:17:80:85:ba:7b:93:98:43:60:c5:
                    30:ae:f7:80:b5:3a:c2:11:e7:de:3c:3f:63:6a:4a:
                    21:2f:6d:45:ee:2f:77:cf:49:b4:9f:86:b2:10:e5:
                    6a:3f:05:53:82:11:7b:11:fe:54:d3:74:a4:3b:75:
                    91:2b:b5:50:0c:6f:be:96:92:42:dd:2a:9c:a7:43:
                    21:41:44:b6:27:d0:a6:7a:86:00:5d:0d:bb:43:8a:
                    33:26:e4:d5:63:0b:30:7f:ed:92:45:df:a1:17:d7:
                    6d:df:3e:34:2e:6b:ee:92:90:c7:3d:ef:ef:f4:81:
                    cf:f7:b8:41:34:d9:3d:60:dd:94:6b:3a:85:61:dd:
                    62:c6:58:37:26:e8:8f:a5:7a:fb:aa:e6:aa:71:d6:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:EC:84:48:47:85:49:12:57:BA:EB:28:9A:8D:7B:99:11:84:9E
            X509v3 Authority Key Identifier:
                keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:65:c0:9b:3f:69:38:93:04:57:c0:0d:17:e7:fc:84:2e:91:
         e2:74:a6:30:9c:d9:fb:43:03:83:0b:8a:91:9d:f2:27:6a:49:
         e2:f6:ad:74:7e:5b:ae:11:4c:d6:83:be:bb:7f:ae:2e:c7:4f:
         99:e5:6a:8e:03:b8:4e:fe:b1:53:2b:65:6a:03:16:6c:31:61:
         d8:b7:31:7d:6c:28:c9:fe:40:6c:4b:b4:97:ea:ce:1f:b5:9b:
         ca:ed:88:51:04:24:c1:51:c4:9c:8b:9a:c1:54:7e:ad:f7:a8:
         65:21:15:e5:e9:9e:91:a8:2e:71:62:ee:d2:a4:07:fe:5c:76:
         c9:9b:17:cd:ca:c6:7d:01:7d:5b:92:b2:08:16:b2:44:d0:9f:
         4c:34:6c:10:5f:0b:f7:70:15:65:7a:a1:13:b6:86:e9:7d:0b:
         84:65:78:d9:cc:a4:0a:b0:c5:eb:31:12:52:14:7a:d0:ab:4c:
         5b:d4:5e:81:35:26:bb:a1:d4:cc:e9:a5:3f:52:a5:ff:31:45:
         08:6a:2c:7b:50:9e:16:8f:a4:4f:e2:55:b3:4d:10:a9:42:53:
         be:17:09:11:79:c6:65:04:46:2d:65:61:49:d1:43:16:fa:e7:
         1b:27:e1:32:9a:cd:91:09:5e:57:97:16:2f:2f:b6:d1:e5:26:
         ed:2e:3b:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0
MzIxQkIwMzUwHhcNMjUwNDE5MDM1MTU3WhcNMjUwNDI2MDM1MTU3WjAYMRYwFAYD
VQQDEw02ODAzMWRkZC03NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KbRBgpd7uWQlL7Fl1unBr5uCqIz6f9r+0w39SmU1RxSegmos0Y2smHQvmcO
xbn7d3OT3AOSlZlReSZpkzUyhF84/QnlQUFps2I4CRoQSl8n8KevmWTYOL/xzlAD
1aJsD5sL09lOKMf11r4fYBeAhbp7k5hDYMUwrveAtTrCEefePD9jakohL21F7i93
z0m0n4ayEOVqPwVTghF7Ef5U03SkO3WRK7VQDG++lpJC3Sqcp0MhQUS2J9CmeoYA
XQ27Q4ozJuTVYwswf+2SRd+hF9dt3z40LmvukpDHPe/v9IHP97hBNNk9YN2UazqF
Yd1ixlg3JuiPpXr7quaqcdbKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYp7IRI
R4VJEle66yiajXuZEYSeMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx
QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa
Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLZcCbP2k4kwRXwA0X5/yELpHidKYwnNn7QwODC4qRnfInakni9q10
fluuEUzWg767f64ux0+Z5WqOA7hO/rFTK2VqAxZsMWHYtzF9bCjJ/kBsS7SX6s4f
tZvK7YhRBCTBUcSci5rBVH6t96hlIRXl6Z6RqC5xYu7SpAf+XHbJmxfNysZ9AX1b
krIIFrJE0J9MNGwQXwv3cBVleqETtobpfQuEZXjZzKQKsMXrMRJSFHrQq0xb1F6B
NSa7odTM6aU/UqX/MUUIaix7UJ4Wj6RP4lWzTRCpQlO+FwkRecZlBEYtZWFJ0UMW
+ucbJ+Eyms2RCV5XlxYvL7bR5SbtLjsY
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:05:24 2025 by rpki-client