Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File:                     P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier:          ytMsaskKSJF/hLWpwv3QrGZXd59HMIG6COkHTkevHPY=
Subject key identifier:   F4:1F:78:09:2E:58:2B:32:34:98:09:84:17:E7:93:D4:27:DC:1F:84
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number:          02C1
Signing time:             Sat 31 May 2025 01:38:19 +0000
Manifest this update:     Sat 31 May 2025 01:38:19 +0000
Manifest next update:     Sat 07 Jun 2025 01:38:19 +0000
Files and hashes:         1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: PnfI5atbUyy9X2RfuobSex9EJpHtyL1YKgchyT0TYsk=)
                          2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: kddDiY1SaBXbZLYfj0lZgL5nuCOTpHEBUPrzkMRd/3M=)
                          3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: VaWJ6J0IlQoYXLmwhQtNPeXFzSE+FlLg3wqm3Amu1U8=)
                          4: 8FAF120C25C211F09DF3175DC4F9AE02.roa (hash: gTU10zgFHanpQ1KWq4hJnCtv3CAB1reU+uvXNGAdKp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: May 31 01:38:19 2025 GMT
            Not After : Jun  7 01:38:19 2025 GMT
        Subject: CN=683a5d8b-40bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:6b:2f:81:11:fc:0c:a8:ab:56:23:c8:10:
                    0b:4a:68:19:6e:46:ea:8c:bf:79:21:3d:8b:80:fd:
                    2f:21:ec:4e:52:ad:3c:3a:96:56:15:21:bf:9e:fd:
                    4b:16:3b:e3:7f:4f:2d:9a:8f:1e:fe:08:09:5d:e3:
                    54:c9:97:c8:0b:82:2d:ff:54:9b:49:c7:31:91:82:
                    92:95:a0:33:9b:ed:c8:1a:eb:90:24:7f:0d:56:63:
                    c8:dc:93:8a:7b:ae:f0:e4:02:01:0b:cd:e4:ea:f7:
                    e2:61:6f:8a:68:65:74:01:f4:89:cf:1a:f9:d6:8e:
                    d2:8d:e4:32:d9:78:8a:98:7b:00:d8:29:e6:b9:13:
                    d6:d8:79:08:fe:e2:6a:40:0f:30:b1:1d:cb:7f:e0:
                    23:e1:6a:25:f0:bf:96:80:e9:98:4f:ba:0d:f4:6c:
                    a4:e1:08:c1:de:2c:eb:cd:83:5e:04:ca:75:65:85:
                    2f:b4:85:5a:b2:15:08:c9:4e:d6:66:80:ff:51:f1:
                    83:54:92:74:df:a9:fc:ec:be:54:4e:3f:da:c5:27:
                    4f:c1:2f:d2:ea:5d:7f:da:27:d0:31:b4:15:57:02:
                    06:b6:0b:73:d0:d6:0b:1e:71:d8:3e:5f:3d:34:0f:
                    57:8e:6c:bc:71:62:c2:93:70:e6:a9:b8:f3:84:ce:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1F:78:09:2E:58:2B:32:34:98:09:84:17:E7:93:D4:27:DC:1F:84
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:e2:f7:43:f1:6e:56:0e:d5:1b:b6:7c:dd:03:69:7c:b5:
         62:1b:ed:b4:40:8b:7e:ea:a2:80:6d:2b:51:e7:d9:44:f8:82:
         4b:d7:2b:b3:80:a3:65:9e:77:77:e5:23:e5:bf:22:e4:11:58:
         ea:11:cc:02:68:12:26:f5:aa:f1:b3:76:42:74:d4:d6:19:49:
         7b:fc:c3:c0:06:87:73:a4:7f:21:3b:10:04:30:66:15:ff:14:
         1c:a9:f0:2e:9f:0d:a2:57:14:1a:02:bb:44:01:e5:b3:5b:7e:
         c9:d4:65:b0:ea:ba:18:9c:fe:fc:8e:c3:2d:f1:d3:e3:3b:26:
         ba:a1:98:8e:1c:7e:36:77:01:9a:08:07:eb:14:cf:ee:16:9f:
         c9:37:49:af:15:60:d2:b7:56:c5:2c:b2:5b:f2:86:85:9b:8f:
         f9:a1:78:d1:dc:0b:3b:7a:a6:2e:fa:46:46:3a:d4:df:8a:cf:
         7c:48:c5:cc:3b:74:cb:48:e4:b2:fb:20:82:1b:ed:e4:be:93:
         1a:19:6d:d2:91:68:93:2d:a1:dc:cb:d8:03:43:e8:5b:e4:72:
         f7:f2:46:02:30:7f:48:3d:08:cd:4b:bd:af:5c:d0:b6:f6:2f:
         9f:ca:3d:c8:38:02:e6:1b:77:d1:b0:c4:5b:d1:84:94:10:e5:
         68:da:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:56:21 2025 by rpki-client