Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File:                     f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier:          ofZ2JId1yx2s2Ur4XU0diFrbSp2lhzbZXNp0gAd4+64=
Subject key identifier:   53:BD:F9:5B:65:88:77:19:7F:75:2E:88:9C:31:CF:A3:AE:CC:F4:5D
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number:          58
Signing time:             Sat 31 May 2025 06:48:51 +0000
Manifest this update:     Sat 31 May 2025 06:48:50 +0000
Manifest next update:     Sat 07 Jun 2025 06:48:50 +0000
Files and hashes:         1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: e8BzKEBL9s5kZQlpHbua5X28B9dwNV8W36IEY+wnoWM=)
                          2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
                          3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
                          4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
        Validity
            Not Before: May 31 06:48:50 2025 GMT
            Not After : Jun  7 06:48:50 2025 GMT
        Subject: CN=683aa653-ca41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:48:61:d9:e7:86:89:2d:b6:1b:c5:48:7b:
                    7b:ef:01:fe:09:bc:11:3c:d5:63:39:37:e4:0c:be:
                    07:d5:e3:bd:b2:88:5b:17:8b:3d:ef:c7:af:b4:c3:
                    6c:d3:f4:ee:34:94:25:64:47:6e:42:00:f1:d9:4c:
                    41:ae:c3:0b:55:19:7f:82:4b:78:20:ff:e0:c1:cb:
                    3f:0d:da:a8:24:38:8e:61:e0:1b:6d:d0:74:77:fc:
                    5c:86:ef:07:a1:71:5e:4b:b3:3b:d2:29:2c:ca:14:
                    42:9c:fe:6b:9b:02:73:91:05:6f:f0:dc:d5:aa:8d:
                    5b:ac:d2:1a:d9:fa:ab:6b:7a:cb:a7:11:99:ee:75:
                    a5:5e:77:88:69:ee:e8:37:25:89:0f:05:e6:01:08:
                    16:dc:55:72:fa:b4:5b:69:fd:15:98:59:22:84:66:
                    e5:9a:d3:b6:4c:32:30:71:30:7c:8c:ae:1e:59:4b:
                    77:f0:8d:2e:db:1f:4e:21:e3:00:42:5e:bb:6b:6d:
                    d1:3a:68:fb:19:f0:5d:11:0b:d3:b8:29:3b:1f:f1:
                    f4:55:3d:4a:72:e3:56:e9:af:04:4d:17:07:f8:ff:
                    98:cb:c3:57:dd:ad:3f:7b:7e:dc:86:1f:cd:19:3e:
                    6f:5e:91:b6:ce:bc:9d:1f:ae:31:30:a5:df:e2:06:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:F9:5B:65:88:77:19:7F:75:2E:88:9C:31:CF:A3:AE:CC:F4:5D
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:90:af:d1:db:b3:66:78:77:b7:2d:32:91:28:7a:d5:3f:
         5f:1c:7d:2e:5b:6f:cb:55:89:0d:2e:74:a3:88:5c:f4:81:ca:
         f0:4c:9f:bb:4e:97:5d:46:6f:6a:06:6e:d9:e2:d7:b0:4b:0e:
         38:a2:e0:3a:e5:e0:0d:73:20:b5:c7:ff:5c:08:e2:e9:f3:7f:
         ca:fa:00:2c:98:0b:2b:1b:6b:df:f2:b8:28:ae:64:76:77:a8:
         0e:73:71:7a:6d:76:ab:74:99:c9:15:db:88:b6:6a:81:eb:ff:
         4c:85:c7:00:60:3a:5c:3b:09:c2:4a:ef:a8:b7:03:8c:bc:58:
         9e:82:11:93:99:9b:c4:0f:1c:06:4d:8b:01:ba:52:7c:47:2f:
         53:5a:e1:7d:c7:35:4a:2d:1f:58:8e:32:42:ac:a5:54:6b:8a:
         24:04:89:0d:a0:31:b0:2c:56:7a:19:32:09:51:cd:21:3d:99:
         58:d8:5f:83:b1:05:b8:e6:af:e5:9b:9e:01:fe:b4:5e:04:94:
         f1:9d:3e:62:88:5f:da:23:12:df:d0:82:47:76:7c:e6:53:81:
         ab:82:64:a1:9a:01:c1:fe:ce:6c:57:b0:81:8a:7b:72:7f:46:
         6e:50:86:f8:cc:b7:6c:55:64:9e:44:7d:ff:c2:7e:e1:18:ca:
         a8:06:53:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MzM1ODExMC8GA1UEBRMoN0ZCRkNGMTk2QkZEMkVGMDcwNjI1QkVFQzQyNkU4NjA2
ODhBQzJGMTAeFw0yNTA1MzEwNjQ4NTBaFw0yNTA2MDcwNjQ4NTBaMBgxFjAUBgNV
BAMTDTY4M2FhNjUzLWNhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCt0hh2eeGiS22G8VIe3vvAf4JvBE81WM5N+QMvgfV472yiFsXiz3vx6+0w2zT
9O40lCVkR25CAPHZTEGuwwtVGX+CS3gg/+DByz8N2qgkOI5h4Btt0HR3/FyG7weh
cV5LszvSKSzKFEKc/mubAnORBW/w3NWqjVus0hrZ+qtresunEZnudaVed4hp7ug3
JYkPBeYBCBbcVXL6tFtp/RWYWSKEZuWa07ZMMjBxMHyMrh5ZS3fwjS7bH04h4wBC
XrtrbdE6aPsZ8F0RC9O4KTsf8fRVPUpy41bprwRNFwf4/5jLw1fdrT97ftyGH80Z
Pm9ekbbOvJ0frjEwpd/iBnHlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU735W2WI
dxl/dS6InDHPo67M9F0wHwYDVR0jBBgwFoAUf7/PGWv9LvBwYlvuxCboYGiKwvEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzMzU4LzdENDA2NDdFQzFD
QTExRUZBM0YyNEE4N0M0RjlBRTAyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZjdfUEdXdjlMdkJ3WWx2dXhDYm9ZR2lLd3ZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz
MzU4LzdENDA2NDdFQzFDQTExRUZBM0YyNEE4N0M0RjlBRTAyL2Y3X1BHV3Y5THZC
d1lsdnV4Q2JvWUdpS3d2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKVUkK/R27NmeHe3LTKRKHrVP18cfS5bb8tViQ0udKOIXPSByvBMn7tO
l11Gb2oGbtni17BLDjii4Drl4A1zILXH/1wI4unzf8r6ACyYCysba9/yuCiuZHZ3
qA5zcXptdqt0mckV24i2aoHr/0yFxwBgOlw7CcJK76i3A4y8WJ6CEZOZm8QPHAZN
iwG6UnxHL1Na4X3HNUotH1iOMkKspVRriiQEiQ2gMbAsVnoZMglRzSE9mVjYX4Ox
Bbjmr+WbngH+tF4ElPGdPmKIX9ojEt/Qgkd2fOZTgauCZKGaAcH+zmxXsIGKe3J/
Rm5QhvjMt2xVZJ5Eff/CfuEYyqgGU1s=
-----END CERTIFICATE-----
Generated at Sat May 31 17:46:30 2025 by rpki-client