Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File:                     jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier:          NTW3LnX8VHS8Gc6bNffJNFKZb9i/rHNTs1TYyfVICOI=
Subject key identifier:   71:5B:F0:C9:AC:89:27:2E:21:BA:F2:0C:03:9F:19:DD:CA:AB:82:00
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       0755
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number:          0750
Signing time:             Fri 28 Mar 2025 21:53:57 +0000
Manifest this update:     Fri 28 Mar 2025 21:53:57 +0000
Manifest next update:     Fri 04 Apr 2025 21:53:57 +0000
Files and hashes:         1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: vesSthSqqwRD5OJveswmJDqjEe4qUY8JBWEDKmPd2D0=)
                          2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: gqCE02CBOTTrdLIogzJpaYzWvwCHcIiO+EC46ysOtw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
                          rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 21:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C
        Validity
            Not Before: Mar 28 21:53:57 2025 GMT
            Not After : Apr  4 21:53:57 2025 GMT
        Subject: CN=67e71a75-8b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7a:b7:ce:2b:ff:31:0a:2d:f0:ac:27:de:4b:
                    1c:66:db:b3:f5:eb:f8:ba:13:bd:6e:fc:e1:ce:2f:
                    b1:4a:90:17:3e:32:5d:8e:0f:62:91:43:ea:f2:30:
                    01:b4:e4:4f:f8:b9:67:f4:34:6c:07:27:54:bb:ff:
                    ca:c0:11:20:06:2e:cb:51:72:70:4e:b3:2f:b8:44:
                    97:b3:11:51:c7:87:16:9c:b8:14:c8:05:82:74:1a:
                    0a:e4:29:5b:16:ca:b0:93:dc:91:73:b2:40:cf:9d:
                    30:bc:c7:1c:f6:bb:82:38:4c:91:ee:68:49:9b:3b:
                    80:31:85:27:17:fd:64:6a:d9:63:55:d6:c9:44:9b:
                    b4:2f:04:c7:72:9b:af:02:66:82:66:82:bb:1f:b1:
                    3f:cd:00:13:d6:09:1d:de:2a:b9:5a:96:4f:ae:6f:
                    a0:c7:9e:df:85:0a:6e:f0:62:1e:7b:5e:35:a8:33:
                    34:fe:23:49:65:bc:22:ce:32:0f:51:15:9b:c3:df:
                    a6:3a:6c:77:36:60:ff:ae:6f:fd:a4:80:1a:12:7a:
                    f8:b6:2b:82:23:89:8d:ac:b4:11:26:06:db:36:70:
                    1c:ec:a5:e3:9a:2d:7f:e1:1b:9c:e9:ab:87:69:26:
                    ca:13:ae:30:89:fe:33:8b:b5:ed:cc:73:7f:28:98:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:F0:C9:AC:89:27:2E:21:BA:F2:0C:03:9F:19:DD:CA:AB:82:00
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:86:ad:28:85:d3:77:c7:d1:57:d9:ab:ab:e9:a9:e6:0f:
         a9:13:38:c3:f5:89:78:87:11:f9:98:d0:a7:f9:65:e5:b7:4e:
         b6:a8:48:f1:b1:48:02:49:62:7c:18:56:30:4f:8e:0e:e7:34:
         f6:5c:14:69:46:03:15:55:0e:1a:6a:c2:ca:25:79:bf:35:a4:
         f2:40:48:2f:28:6b:ee:10:8e:c3:98:d2:7a:3b:74:59:1b:fb:
         07:f6:5d:80:b4:dd:99:f6:d2:f7:bc:9e:e2:6f:23:5b:d3:e9:
         d4:f8:2d:c2:3b:af:25:74:86:4c:31:f3:63:1c:1b:b4:88:4b:
         59:d0:4d:0d:a8:a0:8f:97:a6:3c:e3:13:6f:ea:12:ad:79:e3:
         81:58:0f:c5:42:c6:f7:89:40:b3:06:cf:9d:09:85:ca:48:49:
         ce:52:d8:b2:5f:8e:c8:b3:b7:0a:05:9e:32:2f:05:ee:1b:f4:
         f5:14:fd:fc:bd:b0:e2:81:5a:8c:ba:a6:3e:bc:38:eb:45:55:
         2a:b4:8c:dc:a5:a3:29:32:68:73:e0:8c:51:ac:00:18:f5:7e:
         ca:b8:03:90:ce:b3:49:3b:23:a3:ec:53:25:bc:50:67:7a:ed:
         ca:31:4a:86:a4:6f:66:21:a5:60:4e:1b:47:ef:71:2f:74:ac:
         d4:7c:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:11 2025 by rpki-client