Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File:                     PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier:          S6qB7OuhP1cRdmy5dVGClzm5MoGBT80Bx/NrNr1aZe8=
Subject key identifier:   5B:31:97:48:17:21:35:2C:6F:63:61:F6:CE:C0:0B:79:B2:80:D0:4E
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       0945
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number:          091C
Signing time:             Wed 02 Jul 2025 20:37:47 +0000
Manifest this update:     Wed 02 Jul 2025 20:37:47 +0000
Manifest next update:     Wed 09 Jul 2025 20:37:47 +0000
Files and hashes:         1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: GA3a1t5gV/huCjVn9pXr8A3iXJhPO9c6TgXxJ/C0igk=)
                          2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: WXRoqSuJ7ylbw7K72AAOsaJLTW5zfW38lPIwxiTLRCE=)
                          3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
                          rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373 (0x945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Jul  2 20:37:47 2025 GMT
            Not After : Jul  9 20:37:47 2025 GMT
        Subject: CN=6865989b-1c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:c5:50:6e:e9:bc:28:e9:ca:36:42:1b:25:
                    ed:5b:05:ee:37:49:d2:65:ab:02:08:19:8a:96:a3:
                    70:c7:ae:a9:34:a2:3d:45:9c:f4:93:1c:15:52:56:
                    d1:95:70:a3:a7:f3:6d:a1:73:28:39:34:00:6a:4d:
                    f2:6d:01:4b:1b:cc:88:47:07:42:be:65:42:c4:6a:
                    22:c7:94:60:32:3d:4a:09:ce:0a:95:02:5a:1d:e9:
                    1c:d2:d3:34:60:7f:b2:2b:8a:28:77:5d:4e:da:99:
                    ee:29:f8:10:1b:bf:14:59:97:29:fd:25:5d:1c:5e:
                    83:63:4f:26:fa:52:11:5d:01:cf:48:fd:43:35:43:
                    80:92:7c:da:68:ca:dc:30:8f:ed:44:9a:e1:17:d4:
                    f5:4d:0e:8e:e7:cd:27:b3:c4:0c:10:94:0f:7a:99:
                    02:1d:10:95:cf:f4:1e:81:2a:51:52:f9:cc:a5:0b:
                    15:db:9a:ea:31:74:06:f9:cb:ca:bc:60:92:50:4a:
                    b2:bc:86:d8:04:b2:b2:56:a4:a5:0a:42:e3:fd:c9:
                    f3:b9:2b:52:60:3c:6b:bd:ab:95:be:13:58:dd:d9:
                    9b:50:af:3f:5e:a9:50:d5:74:a5:50:5a:53:5a:51:
                    60:5e:05:6b:ba:86:54:26:e2:d0:e5:97:d5:09:b2:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:31:97:48:17:21:35:2C:6F:63:61:F6:CE:C0:0B:79:B2:80:D0:4E
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:fa:99:08:7c:c8:3b:68:a2:d7:fb:f4:5e:42:3d:48:34:
         6e:65:b3:72:6e:1e:79:43:57:fc:28:4e:86:65:0c:a1:68:f7:
         9f:60:9b:e9:f6:85:70:57:48:71:45:24:32:79:e2:44:f4:5b:
         41:43:cf:f6:26:44:60:13:d1:68:aa:42:78:23:5e:18:d3:a6:
         37:22:af:de:fd:34:dd:05:5f:e1:9e:ec:7a:0f:bf:b6:26:18:
         06:3d:01:97:66:47:1f:87:8c:39:bc:e6:aa:e1:ae:14:4f:7b:
         72:0d:00:c7:dc:21:cd:0b:e0:43:52:4e:08:20:84:b2:a7:d4:
         91:64:46:3b:68:f0:b8:59:51:69:23:d9:21:25:df:64:3a:08:
         73:2b:c9:46:cd:e0:a5:cd:66:40:e7:0a:48:0b:65:25:34:7d:
         a5:d2:e4:ac:fd:20:04:0c:bb:67:80:b5:ee:c4:b6:f5:61:8b:
         52:a6:f8:9f:8e:d0:71:b3:44:89:df:4e:70:08:d4:c1:e6:99:
         2d:c1:ae:fe:41:79:02:9d:b8:a1:e1:56:f8:3e:91:68:e7:52:
         c5:e8:6f:5e:8f:b1:ae:dd:a7:57:7b:90:4d:e5:e7:fc:83:34:
         a8:dd:6e:ff:d3:65:c2:df:b6:69:14:74:06:2c:a4:8e:63:8b:
         ef:38:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:03 2025 by rpki-client