Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File:                     5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier:          H48oRApQtXF3mUB4a88mUNBCenMLkdN0EyFWDIH8nI4=
Subject key identifier:   7E:6B:9A:AF:E3:5F:D8:5A:9F:07:29:9C:86:AA:F8:85:7C:AD:88:2A
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       086C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number:          0850
Signing time:             Wed 12 Mar 2025 20:27:00 +0000
Manifest this update:     Wed 12 Mar 2025 20:26:59 +0000
Manifest next update:     Wed 19 Mar 2025 20:26:59 +0000
Files and hashes:         1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: 3sKHNSuMTpb+KchkgQr0RT/ATVo84wRz1okNL/M5K/Y=)
                          2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: AFaeu2oL4cNNHYlnGZfZQpi+3m9ltpqYBL3jC9MdwyA=)
                          3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: 0po2YnmF7LUsQv1OhpceWfM4UKdi7rr2HPXL/pTpDy0=)
                          4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: hEtTiUQOvKMaXnGzhNc1AksaZZBPn4CMUgbwNqIqaYM=)
                          5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: t8BmeMehn227H8dOJrIEHLoPLZBtqxvvD/eMG/7UDR8=)
                          6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: VaYW5XVqy5zl5lpqnEYWS9FtMV51Bf/m8xOkw2cjG0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207
        Validity
            Not Before: Mar 12 20:26:59 2025 GMT
            Not After : Mar 19 20:26:59 2025 GMT
        Subject: CN=67d1ee13-8119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:f5:b4:4d:67:51:bc:4a:aa:29:c0:7c:81:
                    1e:03:d7:4c:84:c6:0c:65:73:24:db:b0:e7:c5:af:
                    fd:83:24:53:80:69:a7:c0:7c:17:0e:0e:90:1a:2b:
                    7e:3e:e2:9e:0f:8f:20:3d:6d:fa:66:73:d1:ec:6b:
                    ec:f2:32:55:86:ef:e8:d3:ba:61:fd:cc:5d:6e:7d:
                    f4:2f:e7:4f:b9:ed:48:02:11:8a:11:ff:b4:38:09:
                    5c:b0:98:00:25:35:d0:19:a2:39:2f:8c:a8:b7:fa:
                    95:1a:13:57:21:02:e4:80:6b:cc:4d:11:b0:d5:80:
                    73:05:b4:28:ef:7d:5b:1d:b2:9d:1f:8f:7e:74:8c:
                    e2:27:7e:a1:33:fa:a4:3e:02:5d:9d:30:ca:33:d0:
                    ad:be:6d:f1:6e:1a:da:05:88:c5:9a:07:4e:26:c1:
                    f9:6a:51:11:f6:ed:72:c3:8d:02:13:48:ee:33:01:
                    41:96:cf:6a:89:ab:94:7c:18:97:19:68:18:82:a1:
                    20:85:11:5a:1d:d2:ba:4f:82:66:33:41:6a:92:4b:
                    ab:3e:62:b6:6c:75:7e:bd:eb:c0:a6:4a:75:62:2d:
                    7f:b7:9b:00:f6:b5:49:29:8f:e3:3b:d6:cb:95:8d:
                    7c:74:bd:b2:1f:05:4e:3d:f8:84:2a:d8:35:e8:31:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:9A:AF:E3:5F:D8:5A:9F:07:29:9C:86:AA:F8:85:7C:AD:88:2A
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:08:0b:7f:37:2b:bd:3c:1f:e2:5d:65:1d:fb:23:27:a9:
         e4:ea:79:33:fa:c0:a5:23:06:02:1f:04:a8:27:90:1b:36:54:
         95:47:d3:48:36:ac:cd:8f:7f:ce:e9:0e:b1:e1:04:94:bb:18:
         17:99:28:0d:56:70:f0:13:92:50:d2:ca:2a:c1:70:4d:91:83:
         18:d3:f8:1a:ba:fa:e9:f4:48:8e:b5:33:e7:13:3b:f5:2f:73:
         96:68:50:23:b4:32:9d:ee:18:5a:7f:84:05:36:ae:93:29:cb:
         90:8f:e0:43:09:a7:4e:27:94:0a:45:07:cc:12:75:52:6e:06:
         ef:e1:a7:05:4e:12:11:79:aa:2d:89:9e:07:03:eb:9e:45:9c:
         a2:04:f7:e8:bc:2b:8c:28:00:e0:60:7c:30:f3:e3:e1:c1:bc:
         df:9e:cc:5a:79:85:04:9d:bc:36:a2:93:01:81:d6:b3:9e:42:
         d5:96:3b:5b:f9:2f:67:a1:d0:75:41:c6:e8:de:9c:b7:3f:b9:
         15:6e:d0:f5:af:39:64:9a:27:18:cc:ca:ca:4c:9e:98:f1:0d:
         25:18:4c:b5:52:ac:cc:e9:3c:ca:3a:dc:89:ea:d0:4c:41:42:
         1b:5e:54:47:ec:a4:dc:0c:28:aa:27:47:ab:73:e9:c8:2f:46:
         b6:93:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:08 2025 by rpki-client