Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
File:                     3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json)
Hash identifier:          socUUHNDCJG8Z7GKylB2AwXS+fvvKCOa6TEg//Ic73k=
Subject key identifier:   18:DA:3B:77:37:C5:2D:29:63:64:CC:63:07:EA:AB:D4:98:8D:D6:8A
Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
Certificate issuer:       /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Certificate serial:       06A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
Manifest number:          069C
Signing time:             Fri 30 May 2025 22:26:34 +0000
Manifest this update:     Fri 30 May 2025 22:26:34 +0000
Manifest next update:     Fri 06 Jun 2025 22:26:34 +0000
Files and hashes:         1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: zKaEsqDykpOQR8qSHFItGSW7QxbwibnN7lmz5Cbeq/0=)
                          2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: CN//aPXI7Vd/gecvzpNyd6NzvBQ86Pd0fnZS1wzYkqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
                          rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
        Validity
            Not Before: May 30 22:26:34 2025 GMT
            Not After : Jun  6 22:26:34 2025 GMT
        Subject: CN=683a309a-079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:91:21:af:d9:1a:08:63:33:1a:f2:ad:da:
                    ef:70:5a:ec:8c:e5:4f:2f:c4:46:fd:ad:12:6d:ef:
                    9b:50:a3:2b:b7:df:0f:83:83:f1:4b:ab:cf:bd:aa:
                    ec:8b:e8:c6:e0:36:c7:55:d6:13:45:60:e8:85:ae:
                    70:d8:bb:f1:16:45:a2:e7:76:a2:16:4e:84:53:4b:
                    3f:1e:ef:59:a9:a6:61:da:19:90:5f:c7:e8:1a:40:
                    1c:9b:bb:00:c0:3a:07:d1:d5:47:a5:b6:f7:4a:b1:
                    b8:20:3c:b6:ac:98:51:87:73:96:47:0e:cf:8b:32:
                    dd:f7:6c:9b:f2:ad:ed:fa:40:d7:df:a6:9c:4a:1c:
                    11:0b:7a:71:03:c8:90:79:7a:bd:20:c1:4b:6f:b1:
                    b8:95:8b:88:b4:ca:84:28:c9:71:3e:4b:5c:49:53:
                    49:82:52:4b:21:69:a1:43:3f:e5:db:d4:71:5b:4b:
                    4b:d9:42:76:42:bc:21:39:60:d2:0c:52:e2:7a:e7:
                    7d:26:ae:ba:1b:fa:f0:03:29:e6:ef:fe:a0:32:42:
                    b3:ec:6a:a3:cc:49:d2:cb:35:a0:b4:dc:5f:dc:3b:
                    55:a7:59:8e:f3:17:dc:27:fe:df:a6:7c:30:84:dd:
                    50:f2:ad:99:8f:41:cf:8e:0d:b9:02:1b:39:84:09:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DA:3B:77:37:C5:2D:29:63:64:CC:63:07:EA:AB:D4:98:8D:D6:8A
            X509v3 Authority Key Identifier:
                keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:88:4b:de:82:14:7f:90:2e:b1:46:71:2a:da:0f:b4:22:70:
         a3:1b:ac:f4:07:22:a5:9c:6c:87:49:a5:f1:68:3a:e0:42:fa:
         57:4c:81:83:9a:3e:bc:b4:c2:bf:15:11:b1:c6:ec:d9:eb:38:
         65:ae:57:d8:45:e9:a1:6a:ba:5a:ff:0c:59:36:40:f0:73:8f:
         29:63:33:a2:c4:dc:69:1e:43:f7:6f:43:69:e1:2b:52:bb:48:
         bf:51:12:b3:2e:9a:dc:aa:cc:c7:c5:15:1c:b8:93:74:7e:28:
         70:27:2a:03:88:54:c0:55:ea:1c:ee:41:ee:fe:bb:a7:ba:17:
         e4:94:7f:35:be:e7:2d:60:67:92:f6:d6:cf:d8:0c:bf:42:5e:
         e5:b1:21:05:03:f3:53:43:ef:f4:ad:a8:0a:d2:f4:1f:5e:27:
         d6:d1:cc:e7:9b:a5:ca:74:53:a7:62:58:cb:cc:fd:51:84:2a:
         23:0b:3f:74:7e:f4:d6:a1:d3:ce:6b:33:da:d9:c4:7f:e9:04:
         10:8f:f6:65:9d:fc:7b:c7:e2:c5:81:fe:0e:96:fc:a8:62:00:
         4a:51:cb:a6:d3:94:6b:43:45:43:0a:c9:69:61:93:ed:3e:cc:
         25:65:12:d7:07:b8:40:a4:94:64:99:a3:83:44:e2:3f:65:58:
         d2:9f:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:22:13 2025 by rpki-client