Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          H48JBagi7qqPv8mYohjHAIX9WFJXLVLWOpbs0Ho6s8c=
Subject key identifier:   67:A9:25:80:51:EE:2A:D3:F5:5A:CA:1C:DF:AC:BF:85:2A:D6:75:B9
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       25A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          258C
Signing time:             Thu 12 Jun 2025 15:42:30 +0000
Manifest this update:     Thu 12 Jun 2025 15:42:29 +0000
Manifest next update:     Thu 19 Jun 2025 15:42:29 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: XGixx7HC+vaKe41Jd9YCDQiViNOXp9o2vfkMOfC1lMI=)
                          2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=)
                          3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 15:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9633 (0x25a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Jun 12 15:42:29 2025 GMT
            Not After : Jun 19 15:42:29 2025 GMT
        Subject: CN=684af565-8c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:bc:7c:bc:f9:e6:c2:43:a7:e6:66:27:2b:
                    56:98:b7:69:9e:08:54:6f:bf:e0:45:08:7f:30:13:
                    26:18:a4:43:c3:18:75:59:5b:0b:de:61:2d:83:74:
                    0e:c6:d4:e7:26:60:8b:da:32:ff:0c:d2:50:5c:0c:
                    e2:28:9c:2e:5a:38:2f:06:1d:a9:da:6e:ca:9e:b0:
                    a0:88:a4:bb:81:e7:16:c5:86:9b:27:65:e6:57:e7:
                    4f:c9:a5:27:1c:bd:83:b0:89:c1:56:d7:89:87:e1:
                    df:e6:7e:b2:11:b5:00:bf:c7:17:fa:77:28:bb:9c:
                    f0:c0:ba:c4:27:93:cf:18:f2:e4:ba:30:1d:1d:ae:
                    fa:8c:77:90:c3:4a:a4:cf:bb:1c:24:c6:5c:b8:f4:
                    19:71:bf:05:31:16:ad:7f:d4:8a:cf:dd:58:d3:f8:
                    52:4f:37:f3:04:30:7f:d6:f1:e4:40:a4:87:e8:d7:
                    cc:01:3b:93:d0:fb:9b:5c:0d:8e:6a:f4:9f:76:c6:
                    62:56:42:76:3a:ae:a2:d8:6a:80:07:24:23:1e:8e:
                    73:27:b5:ac:5f:28:6a:76:62:d9:7c:49:b8:c3:3d:
                    5f:f1:24:bf:45:6d:62:12:8e:c1:01:c2:d0:1b:78:
                    25:8e:34:05:56:84:6d:92:cd:96:c2:1c:34:57:cc:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:25:80:51:EE:2A:D3:F5:5A:CA:1C:DF:AC:BF:85:2A:D6:75:B9
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:c4:1a:8c:4e:d9:2e:0c:2e:8b:86:f7:87:ec:d4:b7:ec:
         dd:4a:64:c1:85:f3:66:c3:89:6d:57:d9:1f:6c:5c:fc:9f:9f:
         86:19:c1:b2:23:07:f5:cf:b3:b2:f8:9e:28:00:39:f5:86:13:
         1e:2b:eb:fc:2f:f6:58:c2:9f:e0:ab:28:f6:58:51:ea:49:04:
         8d:14:6c:cc:ee:fd:2d:30:fa:80:a6:ef:52:b6:d4:a8:67:57:
         7a:98:bd:50:c4:64:01:23:81:2f:d8:4c:de:fe:1c:06:ce:e1:
         36:30:c8:b5:3b:8f:37:21:69:bc:9b:af:5a:90:95:07:74:74:
         e0:6d:49:2e:9b:c1:4e:00:b1:74:bb:e5:98:db:ec:d1:78:52:
         f3:bf:91:31:f1:30:5c:fc:5e:47:d6:cf:4f:12:ce:cf:2d:06:
         bf:09:ee:46:68:c5:e5:e3:79:0c:c0:a2:82:fb:62:b4:57:bc:
         b5:88:65:5d:28:ca:8e:ac:f9:de:1e:28:d1:26:7b:aa:70:57:
         5c:eb:cf:33:ee:59:42:78:80:6f:11:65:c5:d2:20:ee:a4:ef:
         9e:17:f3:dd:ac:d7:68:32:60:e3:58:6a:f4:5c:48:86:5c:bf:
         0c:52:98:cc:31:ba:a8:21:bc:4d:f8:a4:6e:3b:de:93:0b:dd:
         21:23:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:57:51 2025 by rpki-client