Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File:                     tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier:          pVHqB9QtXcF+GHokVRzw+iyqCClFARLQ5c56GklTexY=
Subject key identifier:   B6:68:9E:10:39:DE:80:F4:02:4C:20:16:E9:6B:06:8B:86:D3:1C:B3
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number:          08F6
Signing time:             Tue 08 Apr 2025 20:14:52 +0000
Manifest this update:     Tue 08 Apr 2025 20:14:51 +0000
Manifest next update:     Tue 15 Apr 2025 20:14:51 +0000
Files and hashes:         1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: I+6qLB+ugnWfJVY7CYIAO+G7SfyzKytKbWA6JZQNhH4=)
                          2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: 4s1yJr2g52+DMFY429ohpA5bZaHqp1IUUCW4B4SaCTc=)
                          3: B350B67E964611EDA10D8777C4F9AE02.roa (hash: Q3J0B0gf8wzjDQC7Y6zzpOQiUzusEOubL6oTAO7DZBI=)
                          4: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: dHv+b9eqHvJpNCOa+cVeJt4WLtjB7VsmaWpat9hHq+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 20:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58
        Validity
            Not Before: Apr  8 20:14:51 2025 GMT
            Not After : Apr 15 20:14:51 2025 GMT
        Subject: CN=67f583bc-f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:0c:1b:42:b9:c5:25:e2:a3:34:01:35:79:
                    c6:d6:c0:09:e0:2f:ad:20:e1:70:97:0a:94:f4:28:
                    24:b6:a7:57:bf:24:d7:7b:97:6e:7a:eb:49:67:03:
                    8e:cc:cd:9f:cd:bb:42:53:b4:29:2a:13:8c:78:65:
                    10:fa:10:4a:c9:f7:10:c2:f0:44:56:75:64:b0:e9:
                    03:1f:c1:2c:52:bf:71:b3:18:e9:3a:03:fd:d5:0f:
                    95:d6:7b:0a:4b:69:4d:31:78:32:ba:32:4d:dc:89:
                    be:18:30:3a:2a:bd:eb:c7:fa:91:50:49:ff:23:b6:
                    e3:0d:78:89:9d:a9:11:aa:a2:bb:13:c8:58:c2:3d:
                    56:cf:49:8c:ce:f6:82:50:84:30:99:bd:37:09:d2:
                    68:50:1d:c5:ef:60:a2:29:ec:77:86:01:36:c7:bc:
                    3a:60:50:b4:17:12:92:76:4d:b8:c3:5b:f6:2e:77:
                    72:20:3d:ae:0c:ca:8e:5c:a3:c7:73:ca:e4:82:d5:
                    88:52:b1:44:d3:28:dd:25:95:0b:8c:62:88:50:86:
                    df:8a:4c:d6:e5:92:85:c9:f4:74:d5:52:db:92:82:
                    56:7d:44:b3:ee:de:8b:4a:46:63:49:6f:b7:94:14:
                    c4:ef:ea:90:f7:db:8f:c9:4d:e2:17:cf:6a:0d:cd:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:9E:10:39:DE:80:F4:02:4C:20:16:E9:6B:06:8B:86:D3:1C:B3
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:e4:28:dc:70:f2:2b:92:99:bf:45:58:7a:71:d8:09:d7:
         3b:2b:71:43:8b:dc:3f:ea:66:7d:f7:be:32:dc:9a:08:4f:d5:
         53:98:ac:98:16:10:22:06:07:3e:e7:1d:82:62:3e:df:59:4e:
         61:3b:ee:e5:b0:19:15:c9:58:27:a9:ad:09:81:d9:ab:d0:e3:
         7c:b9:3f:40:84:81:bb:47:31:b4:29:de:20:a0:47:93:22:f8:
         80:ac:96:34:30:04:d6:90:8c:e2:11:a8:8e:da:54:0f:06:b2:
         6c:3d:f7:f9:d3:1a:7f:0f:7a:00:6f:77:81:bf:25:ed:ca:ea:
         26:cb:82:8d:5c:aa:79:ae:2f:ac:62:d4:bc:b3:f1:79:55:db:
         20:c7:55:ff:75:6c:d0:36:09:6b:17:7b:36:87:cf:d0:91:9d:
         77:c0:69:49:94:91:14:bc:4f:fd:7e:41:66:25:b6:e2:9c:6f:
         46:c2:1f:97:0a:da:e3:df:1a:42:8b:db:1b:65:b1:2a:0d:b1:
         3e:e0:5e:e1:be:83:5f:6e:ee:31:00:f4:66:fc:12:e0:25:e6:
         9e:93:3d:3d:76:08:69:b1:7c:ce:b0:b9:86:8b:f6:36:01:cb:
         6f:f4:ed:4a:8a:40:20:53:17:12:77:98:c8:1c:3c:de:42:b2:
         1a:89:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:33 2025 by rpki-client