Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File:                     p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier:          /GLeocyX8PFmxCqITHK/v/141rDmUUgpf9PuCLuuEcM=
Subject key identifier:   85:3B:B9:58:80:FD:AE:F6:5C:80:B7:D2:32:99:53:1B:A6:DB:A8:3B
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer:       /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial:       0B24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number:          0B1C
Signing time:             Tue 10 Jun 2025 19:08:12 +0000
Manifest this update:     Tue 10 Jun 2025 19:08:12 +0000
Manifest next update:     Tue 17 Jun 2025 19:08:12 +0000
Files and hashes:         1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: ojoI4WiNi3CLsvw3l/qey4kUHPEhz9XzhA0BidbtaJY=)
                          2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
                          rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 19:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2852 (0xb24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
        Validity
            Not Before: Jun 10 19:08:12 2025 GMT
            Not After : Jun 17 19:08:12 2025 GMT
        Subject: CN=6848829c-455a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:31:f7:48:a0:98:12:28:60:c3:cb:ad:ff:
                    ec:2f:87:a7:87:42:32:7e:27:be:f6:07:77:3e:3c:
                    57:90:a3:67:f2:1b:5e:6f:9d:e9:72:52:9d:91:9f:
                    4a:85:11:0d:85:6b:42:6d:4d:da:97:c7:2b:05:aa:
                    6b:2d:c8:86:7e:a9:10:b9:64:d9:cf:98:43:52:65:
                    5c:17:2c:b4:f3:d6:b1:97:d1:48:ae:07:fd:29:89:
                    77:34:db:b0:f2:b9:97:d1:f7:cb:91:26:80:f9:bd:
                    56:65:90:9d:5a:41:19:e9:36:4e:f2:1f:16:21:a4:
                    68:68:94:ce:df:10:b2:b5:ab:c5:df:d1:d7:79:43:
                    98:51:8a:b3:95:74:72:bd:3c:80:b5:8a:14:c7:2a:
                    19:09:dd:30:a6:ac:9e:af:e2:aa:c5:ab:d8:a2:47:
                    8b:57:4a:c7:b2:8b:26:d2:0b:cd:3e:5a:74:cf:9c:
                    3d:63:b7:65:80:86:e7:65:32:61:2b:38:7d:72:9d:
                    a3:a0:4d:65:2a:07:37:5b:66:61:2f:ae:62:fa:e9:
                    fa:86:6b:a5:08:0f:72:2c:ad:48:68:81:9d:50:e2:
                    74:ed:b9:5a:da:bb:4c:23:48:38:03:2f:d5:a7:df:
                    bd:7a:bb:9c:f4:e1:95:5a:74:47:b4:ce:92:56:fe:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:B9:58:80:FD:AE:F6:5C:80:B7:D2:32:99:53:1B:A6:DB:A8:3B
            X509v3 Authority Key Identifier:
                keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:e8:a3:55:a1:f3:dd:00:86:a3:58:a2:de:bf:32:58:ad:
         63:ed:b5:00:d5:02:5f:c8:0e:19:3c:c3:cd:bf:ae:96:65:32:
         b0:6e:95:86:cf:e3:5d:dd:e0:79:49:f4:d3:1f:db:7f:4b:38:
         fe:3c:99:76:cd:3a:8f:b7:4e:81:a0:2d:38:9f:01:f5:8f:ac:
         7f:17:e4:fa:d0:f1:d3:08:33:c0:77:a5:9c:94:e9:0f:c5:c6:
         29:70:2e:29:6b:e6:40:2c:1d:e8:e0:ca:03:9c:93:b7:fd:f2:
         4e:1a:f8:d5:a9:74:70:84:5d:58:df:90:e5:48:9d:23:df:af:
         c9:08:9f:61:56:5a:7b:3c:18:e7:03:a4:5e:d2:ec:6a:ee:19:
         e9:d6:a0:55:84:3c:f5:f4:08:f8:1c:d3:96:be:95:74:70:9c:
         86:77:a3:66:40:45:56:f8:a8:a2:9b:7e:a6:6a:13:51:d8:e1:
         dc:54:45:fe:f5:af:4c:38:f3:20:de:5a:c9:ae:bc:91:22:7a:
         b0:1c:a9:25:22:34:32:57:c1:81:bb:2f:c3:9e:34:84:78:ce:
         34:4d:0d:da:75:d7:c4:ff:19:e2:64:33:81:4e:9a:a5:df:3f:
         1f:a4:62:0f:4a:6f:40:49:72:96:58:82:6f:f3:c4:f3:e4:5d:
         ba:b9:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:50:51 2025 by rpki-client