Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
File:                     pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json)
Hash identifier:          lin+C5y7WE4G/xO4t7CAlUimIRaYoiFtt0smkF6S3d8=
Subject key identifier:   D8:75:6C:A0:AE:4C:44:F3:FD:A2:B8:7B:6F:2F:E3:8A:D5:C2:F6:F8
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
Manifest number:          0209
Signing time:             Sat 23 Aug 2025 02:19:42 +0000
Manifest this update:     Sat 23 Aug 2025 02:19:41 +0000
Manifest next update:     Sat 30 Aug 2025 02:19:41 +0000
Files and hashes:         1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: jWlEHwTYrKpeWAUXkRC1YoZrvydddzqbpxy+CvhksJ4=)
                          2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: ToaemIh9fPDcUkU4p3/lQzqtbYeK8WosReKWFwgAYY8=)
                          3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: fEBKFBy173sPjDX2RWBsnGsgGGHYxBJfdinF6AmOKOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Aug 23 02:19:41 2025 GMT
            Not After : Aug 30 02:19:41 2025 GMT
        Subject: CN=68a9253e-61d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:62:88:95:39:72:63:4b:ac:6d:74:f4:21:
                    3e:c2:ca:88:51:86:7f:e5:4d:44:07:63:a7:b8:b8:
                    e3:a7:fc:d8:02:1a:f5:55:b6:a4:38:31:19:a5:f0:
                    fc:d7:c5:18:53:39:1f:35:08:c7:2d:ff:f2:71:53:
                    f7:ca:df:98:68:bf:6a:fd:a8:19:94:28:c5:37:da:
                    5a:3b:ae:96:7e:30:d6:84:8b:0e:bd:1f:eb:c1:48:
                    c7:16:0f:c9:ce:00:01:91:11:89:92:45:5c:eb:f5:
                    3f:dd:8f:48:4c:61:ab:04:29:7a:72:8c:9a:0f:a4:
                    1f:d9:38:23:e5:ad:7b:e1:40:b4:7e:15:8b:fd:7a:
                    e5:75:21:0c:63:15:bb:2a:cf:d3:b7:99:24:34:21:
                    fa:43:ee:1c:fb:79:04:9b:21:29:45:80:11:52:b8:
                    7d:8c:ed:37:11:df:e7:ae:ff:ba:4c:ce:4a:f2:be:
                    c9:25:bd:cf:77:7e:97:aa:07:24:5e:40:6c:da:90:
                    9d:cf:5b:b0:c2:55:2c:66:2b:ce:ba:72:90:cd:38:
                    90:b3:cd:e8:19:30:3a:60:d0:47:64:c1:a8:a2:94:
                    03:e9:91:53:71:04:96:f7:2e:b7:7a:04:9c:3e:c2:
                    5c:82:4a:dd:ce:2c:a0:cd:d2:5a:af:b2:13:36:af:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:6C:A0:AE:4C:44:F3:FD:A2:B8:7B:6F:2F:E3:8A:D5:C2:F6:F8
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:d0:a7:18:2b:08:e5:51:5a:6c:d3:86:05:fa:b6:90:32:
         d2:de:d1:f2:06:95:4b:ed:33:09:dc:b8:27:34:c2:12:8f:de:
         ea:2e:cd:dc:21:30:10:14:14:b8:7b:2d:82:e9:30:ef:15:e6:
         11:25:34:7d:12:af:34:db:ca:75:98:da:a4:8b:80:fd:47:97:
         aa:65:5b:5e:2a:0c:1c:2a:54:52:ae:89:4c:31:91:5e:36:5c:
         9e:27:c4:93:af:9c:f6:55:a6:3e:fc:cd:6e:62:91:d5:c5:a9:
         8b:a2:97:e4:48:23:00:4e:1b:80:c6:07:a2:80:6a:6f:c6:a4:
         6d:f3:e8:75:1b:0d:ba:52:02:f4:99:aa:e9:0a:48:64:c3:5b:
         a6:ab:8f:98:46:40:c0:20:ed:f4:ff:7f:ce:81:25:6e:59:27:
         a5:c8:4d:f5:3d:02:8a:d9:8c:f9:7f:d0:67:6c:fb:66:e8:ea:
         b9:97:b5:f5:ad:9f:93:df:ae:75:d3:5b:7d:70:53:95:9d:80:
         0a:9f:7e:86:79:b2:dc:bf:41:95:52:3f:70:5f:25:ed:31:93:
         55:51:cb:49:6c:e4:07:21:6c:8d:64:49:55:c5:69:1d:50:5b:
         ce:42:3e:77:7a:7f:13:de:80:cc:5e:fd:d5:d6:f3:41:fc:92:
         75:af:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:12:43 2025 by rpki-client