Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          F5ls9JizQlv+8lCP2+xNsJwJIifjUGehIaWmQyWeEzI=
Subject key identifier:   A3:25:24:F8:97:AA:88:F4:6F:E8:A1:98:76:35:4D:4A:18:62:2E:19
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          0180
Signing time:             Sat 31 May 2025 03:30:07 +0000
Manifest this update:     Sat 31 May 2025 03:30:06 +0000
Manifest next update:     Sat 07 Jun 2025 03:30:06 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: yHMDgb1puoIEB2ZajFfWYd3SwJXeA7eHuy9pi6d1iMU=)
                          2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=)
                          3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=)
                          4: 3DA6569E383A11EF8998A252C4F9AE02.roa (hash: PvqaT2m26VjtkGuTElfQIOHqKDs1V4TPHM7KOHfBUSM=)
                          5: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: tRYBFCSWAI2oPFDeC9daVeSpDp6YmZ+Sk1ZTN1x1rQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: May 31 03:30:06 2025 GMT
            Not After : Jun  7 03:30:06 2025 GMT
        Subject: CN=683a77bf-3234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:1c:48:b9:f2:2e:e7:df:0d:85:9c:0f:fc:
                    65:14:a4:a3:5a:04:8b:59:f8:a7:a5:b0:97:0c:86:
                    51:9c:f3:2a:20:e6:d8:ef:ed:43:99:37:08:cd:de:
                    39:3b:24:3c:9f:a9:91:c5:f5:2e:56:56:10:5c:b5:
                    cb:ad:82:90:4f:00:41:19:15:ab:4d:8e:e5:0f:b9:
                    8c:df:94:26:70:93:89:ae:9d:76:02:65:41:5a:3f:
                    4c:03:dd:62:53:5f:d0:d6:43:71:08:44:ee:64:a2:
                    2b:b2:f1:5d:fb:79:75:51:75:77:f4:da:41:54:9e:
                    94:2f:5b:c5:09:92:d2:b1:70:98:3c:3c:75:1f:60:
                    ad:b6:9c:ed:fa:4a:85:75:d1:bc:62:b4:b5:0e:14:
                    c8:a1:eb:de:ae:e5:df:db:db:1b:65:49:4c:05:aa:
                    3b:5c:9a:bc:fc:e2:87:02:1d:44:79:90:14:c3:6a:
                    cd:4e:9e:e2:9b:42:b3:9e:d7:45:1d:c2:36:da:34:
                    1a:7b:5c:6c:53:84:45:72:f2:7b:61:67:f1:7a:7f:
                    ee:ca:15:68:a3:24:41:f3:9f:7b:d8:17:ef:af:f0:
                    1e:87:e4:ec:1b:bc:9c:bc:fa:de:c5:cb:73:ba:35:
                    e5:f2:07:b0:22:cd:97:68:d8:18:27:e5:bc:d6:ae:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:24:F8:97:AA:88:F4:6F:E8:A1:98:76:35:4D:4A:18:62:2E:19
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:8e:77:5e:03:bf:1d:86:aa:e2:95:ab:e7:f0:dc:b9:6d:
         9a:c6:64:64:ec:b8:39:13:fc:a9:f2:62:5b:f1:6c:31:91:6e:
         64:24:c8:8e:ed:be:ce:63:3b:08:49:af:8c:a5:63:d5:39:df:
         20:05:05:e1:a5:66:9f:ee:0d:2d:0c:20:04:8f:a6:35:05:8f:
         a2:10:ac:cb:70:19:bb:aa:be:0b:5a:b9:83:1f:2e:b0:64:f3:
         da:d7:0d:61:f2:9a:50:af:ac:80:d9:6a:69:49:d4:0a:f1:87:
         16:22:08:2b:13:7c:68:eb:6b:db:ce:bd:66:aa:89:2d:8d:7f:
         1d:7d:55:2e:24:78:14:4b:bb:fe:93:07:19:ac:31:f7:3a:f1:
         32:20:7e:d8:4d:6a:12:66:7a:1a:dd:16:85:28:02:ff:fd:7b:
         99:17:2a:0c:46:bf:62:1d:7e:74:55:c3:4d:99:ef:4e:a2:30:
         b2:52:bd:a2:5e:f8:33:86:f4:9a:88:30:3b:ae:b8:ad:1f:cd:
         8c:8d:78:ba:60:d5:8e:54:70:93:39:72:0a:66:14:0c:8c:c8:
         4a:a1:20:c2:43:3f:15:7a:0e:f3:60:98:33:41:6d:59:f9:49:
         89:d5:38:f0:de:85:68:e0:22:4f:5d:7a:16:f2:21:b1:6c:37:
         4c:e4:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:56:18 2025 by rpki-client