Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          IA0fHu56160A4h/zOE7CRIlRU4yvqvXRwn24s51o628=
Subject key identifier:   D9:B0:46:B2:7A:89:27:66:82:6A:A9:DB:BE:97:8D:05:32:58:EF:00
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       196E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          193E
Signing time:             Mon 12 May 2025 16:22:40 +0000
Manifest this update:     Mon 12 May 2025 16:22:40 +0000
Manifest next update:     Mon 19 May 2025 16:22:40 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: 4JlSyg8D5UZ35gvEQ5cpz4SPF6q6NauPvuIIRy9BQfA=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6510 (0x196e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: May 12 16:22:40 2025 GMT
            Not After : May 19 16:22:40 2025 GMT
        Subject: CN=68222050-e716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:95:54:29:0f:4c:50:e5:c3:58:3d:37:8c:
                    fe:d2:36:65:f1:cd:78:e3:0f:99:87:ed:a7:ff:e9:
                    fb:d8:1c:dc:25:6c:24:bd:3f:e3:da:18:30:bd:3c:
                    f6:8d:93:00:90:c7:5e:f5:66:6d:6b:e3:69:b6:d8:
                    db:74:58:fb:38:83:d9:e0:c2:9c:82:46:5f:7b:30:
                    b7:7f:d1:81:73:cf:71:01:c2:13:29:c2:b2:65:11:
                    64:89:f2:34:25:ed:54:42:21:60:af:53:a1:9a:a8:
                    ff:0d:42:76:c9:2e:f6:8b:2a:e6:1d:c0:b7:81:86:
                    f9:e7:b6:28:9e:a9:4c:be:a9:0d:8b:12:2d:52:f5:
                    bd:e8:3b:67:4d:87:8a:68:78:32:4d:eb:43:48:4a:
                    c4:00:ac:50:c9:ba:ad:30:8b:b6:75:30:1b:df:01:
                    3f:b0:c9:89:0b:de:27:7d:e7:4b:40:2f:b2:8b:ce:
                    b8:13:0e:87:65:b0:d6:55:01:64:e6:7c:a7:e9:f7:
                    64:b4:97:ff:5d:38:fe:b8:9a:ab:cb:93:67:a8:21:
                    d4:e1:41:f3:75:b5:55:51:2f:41:00:fb:61:92:81:
                    3f:ca:f1:ec:db:b0:16:0a:92:c2:aa:5e:9e:bb:6f:
                    e9:2d:dc:90:65:dd:4a:5d:e5:32:73:31:a1:b3:44:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:46:B2:7A:89:27:66:82:6A:A9:DB:BE:97:8D:05:32:58:EF:00
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:98:38:18:e1:af:02:19:94:f4:56:e8:2d:58:84:d1:c9:f1:
         85:bf:a2:1f:cb:e7:7b:2d:8f:34:32:a7:17:56:4a:16:74:07:
         e0:a2:e3:a7:fb:fb:31:0d:0f:b0:14:0d:4d:b7:15:20:88:47:
         54:70:ec:b5:74:2d:0f:98:c3:80:b0:4d:4b:18:f6:76:4c:bc:
         87:58:8c:93:89:29:76:c3:63:f0:cd:8e:3f:30:a2:e6:39:ba:
         49:da:0b:ad:bb:dd:d9:0c:d8:6d:e3:9c:29:56:9e:e3:82:56:
         53:be:88:59:79:0a:ca:5d:63:b8:ef:73:5d:f2:79:cf:a2:64:
         3d:3f:b3:b4:3e:e2:0c:ce:c6:b7:fc:a2:5c:67:82:b1:b1:d3:
         9e:a2:6c:49:11:91:3b:b9:33:d1:24:77:36:59:64:15:f0:98:
         0e:24:51:8a:3a:a2:10:ca:ca:80:5d:1c:17:8f:fa:8e:b9:1a:
         45:8a:e6:9a:34:90:5a:ba:15:f5:82:88:ed:3e:a6:16:67:32:
         c2:ba:16:77:fa:51:46:33:b3:25:da:f3:43:a0:e7:7e:db:1d:
         6f:31:d7:5e:11:20:48:23:0e:e3:37:0d:26:bc:1b:b2:49:11:
         c2:10:13:ef:2c:82:50:8d:d3:ba:1f:d9:db:64:d6:a9:70:90:
         b8:aa:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:09:05 2025 by rpki-client