Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
File:                     gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json)
Hash identifier:          zEMfsI/tOzppmEvaG5V7TmNVhSEMHLdKaGvFqe0t+0o=
Subject key identifier:   DD:C7:1C:13:10:2E:19:EE:89:AA:DA:8A:A6:1C:A1:CD:F5:63:39:CD
Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
Certificate issuer:       /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
Certificate serial:       07C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
Manifest number:          07C2
Signing time:             Sun 08 Jun 2025 20:48:08 +0000
Manifest this update:     Sun 08 Jun 2025 20:48:08 +0000
Manifest next update:     Sun 15 Jun 2025 20:48:08 +0000
Files and hashes:         1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: Q2o9ywnO9hpo+Gzguug0q+PxDBmc0epyZbVs8EDJLn8=)
                          2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl
                          rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 20:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
        Validity
            Not Before: Jun  8 20:48:08 2025 GMT
            Not After : Jun 15 20:48:08 2025 GMT
        Subject: CN=6845f708-7164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:f0:66:7e:88:46:f7:fa:60:de:2e:7b:d5:
                    07:4a:ab:7c:49:55:ea:28:20:2d:5c:cd:2d:ee:d9:
                    e4:ed:4d:69:19:3b:5c:a4:5e:69:9b:3b:75:89:b6:
                    ec:6b:a8:a9:18:cd:eb:b1:ea:e7:e5:68:5a:a7:b2:
                    d3:c8:95:c3:4c:8c:c4:c4:cc:ec:24:94:1e:00:86:
                    45:68:5a:7e:32:ee:9a:21:5e:f4:e6:77:88:98:b6:
                    32:13:82:6d:32:2e:8e:fe:63:ec:10:5b:08:91:5f:
                    fe:1c:eb:9b:e7:31:f1:90:e0:7b:21:89:f8:08:f4:
                    86:96:c7:78:bb:20:a0:ea:24:21:73:09:82:ef:28:
                    70:54:d3:31:d8:ba:97:93:a9:14:77:2c:9e:99:43:
                    87:6a:5e:82:56:bd:38:f8:03:7e:43:d5:7d:4a:fa:
                    48:6e:8b:67:8b:4b:ae:c7:72:2e:40:f4:bb:88:d1:
                    d4:e4:2f:4d:52:21:13:f8:7e:5e:29:fb:0d:9f:42:
                    01:0b:f3:c6:a2:2d:e3:90:48:f0:e0:ac:2e:03:69:
                    2c:97:c8:c9:e1:09:ba:1d:0d:3a:bb:92:97:8a:07:
                    4c:a3:91:b3:20:ca:3f:aa:81:f3:0e:1f:a6:6e:5b:
                    72:08:dd:3a:5f:1f:9b:9d:0e:12:8c:21:0d:9c:78:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:1C:13:10:2E:19:EE:89:AA:DA:8A:A6:1C:A1:CD:F5:63:39:CD
            X509v3 Authority Key Identifier:
                keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:de:a2:9f:38:35:3a:75:0b:ff:6f:2b:51:bc:b6:41:92:
         5e:c0:1a:bd:ca:0c:07:a9:ab:21:97:05:07:9f:92:0b:95:d9:
         96:50:26:a5:0c:8a:cf:a5:8b:3c:49:58:36:ad:ef:c7:55:c8:
         49:1f:f6:62:83:bb:4d:58:b3:c4:86:56:0d:5a:c8:79:19:1f:
         5a:4d:82:de:66:1f:03:82:e8:2f:af:11:91:ab:10:39:8b:99:
         a2:f3:55:06:1b:a8:15:e4:0c:b6:b2:2f:7e:a5:f1:99:1a:c3:
         9e:e3:cc:b2:c7:59:e0:09:8a:7d:15:86:55:75:03:33:61:2d:
         74:ca:ba:dc:7f:12:87:03:eb:38:ab:39:49:7f:14:12:7d:90:
         ad:bf:e0:f5:d6:05:eb:b7:9f:8d:69:96:74:c1:4a:8e:0f:27:
         8b:14:43:0f:1e:7b:01:55:80:e1:98:be:82:2a:d3:55:53:86:
         73:a4:bd:69:36:c6:57:49:49:65:59:32:2f:b0:51:20:7a:3e:
         17:f7:e2:85:8d:40:7d:08:c9:68:53:37:8f:6d:df:ac:4c:df:
         0b:67:6e:25:e2:7e:87:dd:50:b6:e9:f3:35:1a:f0:f9:c2:98:
         3b:68:0f:af:ea:b2:53:6f:30:d5:8f:16:54:d4:37:fd:a4:19:
         b5:87:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:16:23 2025 by rpki-client