Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
File:                     fjarHARDIbdM9ngmPgUk_TQXm70.mft (raw, json)
Hash identifier:          xglc1eqiyJv1vFLEqdvxzcMxXv9hNmSx/+CULnjeIC4=
Subject key identifier:   C6:CC:1E:4A:2B:E8:2E:F0:89:00:C7:FE:E5:CF:3A:0D:D2:D9:1F:F5
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Certificate issuer:       /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
Manifest number:          0676
Signing time:             Wed 14 May 2025 23:12:15 +0000
Manifest this update:     Wed 14 May 2025 23:12:15 +0000
Manifest next update:     Wed 21 May 2025 23:12:15 +0000
Files and hashes:         1: fjarHARDIbdM9ngmPgUk_TQXm70.crl (hash: RFuBmLO0B6Ma8nFdIfcJe/DABla8UJZQufER4h94U6M=)
                          2: 4CBCEB321FBE11EF97E7974FC4F9AE02.roa (hash: OioKDe8sovBTK8N4PoWxTciTSnw1R28dZL2MSG1AP4E=)
                          3: 4EE2265C1FBE11EF97E7974FC4F9AE02.roa (hash: maGIPaBGuKI8Pe+xKu2uBbuZVEdP5iWr1JcTZBe3fTQ=)
                          4: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (hash: Y+VLDu2SxSlCmyYhdp6AoKcsXOlSBGjMVVqDa5ym82Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
                          rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
        Validity
            Not Before: May 14 23:12:15 2025 GMT
            Not After : May 21 23:12:15 2025 GMT
        Subject: CN=6825234f-8b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:e1:ba:3f:0d:f6:94:18:1a:11:7d:62:51:
                    0e:f0:3b:d2:9e:4a:ff:37:74:9e:3c:de:42:4b:9d:
                    05:52:02:9e:90:aa:aa:ef:f9:15:63:54:19:94:98:
                    da:a9:47:5a:f7:f2:c1:28:f9:9a:51:6d:0e:51:e6:
                    29:2c:46:42:a7:10:b8:16:2a:39:cf:3b:57:38:eb:
                    4b:07:64:6a:92:04:bd:10:e2:6d:b7:e6:9e:c7:00:
                    d6:ca:18:ba:16:45:1e:21:96:fc:3e:5d:af:ba:0c:
                    0e:27:1f:d8:14:ae:a4:7b:65:8a:18:90:e3:24:b2:
                    62:51:c5:42:a4:86:e5:dd:f8:70:f7:b5:f6:ac:62:
                    20:80:50:29:d0:c7:1a:dd:26:60:52:00:f6:eb:1a:
                    2d:a0:13:43:9e:16:e2:dd:a3:05:e6:e1:6d:7e:34:
                    8e:2d:7f:02:69:f8:c7:38:41:d2:16:36:7d:f1:51:
                    4e:1f:a9:8e:58:4a:2f:04:68:7d:8e:ef:67:2e:67:
                    a4:51:c8:18:c5:3a:10:6e:6c:c8:e3:08:c6:5c:78:
                    e0:31:e9:82:48:a3:45:3f:67:9d:93:32:a6:85:de:
                    19:f7:d5:ed:57:36:dd:ab:2e:d3:56:5c:04:e8:c9:
                    69:fa:61:2c:e6:8d:24:90:e5:cc:a7:d1:e7:fa:71:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:1E:4A:2B:E8:2E:F0:89:00:C7:FE:E5:CF:3A:0D:D2:D9:1F:F5
            X509v3 Authority Key Identifier:
                keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:1c:b2:02:67:f6:79:ad:cb:0c:e1:5f:24:af:47:ad:f1:
         f5:00:2d:9c:0f:a7:62:db:17:7b:cd:4b:c4:26:ca:5e:0c:19:
         78:23:32:f3:9c:6a:7f:13:fe:d5:03:b4:c2:9e:1a:3d:d0:aa:
         a7:77:32:3f:5f:f2:ef:88:ff:53:3d:1a:7d:3a:0a:c6:97:3e:
         43:71:63:1b:17:0b:a6:a7:06:25:ec:7e:0e:5c:9d:12:eb:f3:
         20:a0:e9:3a:18:3c:13:12:92:c3:74:df:90:60:13:1b:9c:d2:
         b7:d0:89:d6:3e:66:06:22:63:95:e4:fe:b8:c8:c9:a0:9c:25:
         f6:b4:79:90:67:22:46:ae:3c:a2:3a:33:7a:1c:49:1c:c9:b6:
         7c:a6:17:1a:2d:d3:c9:64:03:1e:b9:f8:37:ad:0d:8d:73:e0:
         6e:0d:0d:05:b7:bb:26:63:8a:68:0c:0f:71:76:c7:a2:85:13:
         40:62:78:d6:f1:70:53:70:68:cf:7d:7f:9e:8c:1e:bf:bb:9d:
         24:a9:30:5c:d0:a1:d5:eb:67:9a:d6:e6:0f:ca:c4:c5:b2:f2:
         4a:29:a0:1b:02:57:cb:01:80:e5:9d:ed:0d:eb:d1:70:e1:c6:
         8c:a4:d0:41:1d:d4:e2:22:2f:3a:fa:78:57:ec:ec:ad:eb:ac:
         c1:3c:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:48:24 2025 by rpki-client