Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          HWWRKsSqXFNdHs5bQjnfuhn2a8KJNbArQmDM4uk4tNA=
Subject key identifier:   B3:13:AC:D4:5E:18:40:15:A9:A9:7A:C2:17:6E:DF:79:FB:93:2A:39
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          0119
Signing time:             Tue 13 May 2025 04:06:01 +0000
Manifest this update:     Tue 13 May 2025 04:06:00 +0000
Manifest next update:     Tue 20 May 2025 04:06:00 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: bJfD62cSJ9L4sznKUaeKKyBfFHUUxh/Lem/MZe5GL00=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: May 13 04:06:00 2025 GMT
            Not After : May 20 04:06:00 2025 GMT
        Subject: CN=6822c529-33c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:25:e5:b0:8a:e6:3a:66:2c:eb:66:95:73:
                    e5:bf:49:ca:09:de:7a:4c:64:a6:19:19:ac:0a:e0:
                    5a:22:51:c0:65:e7:72:15:ec:9a:30:e8:04:73:31:
                    df:34:18:68:9d:b0:a7:af:15:69:74:2a:51:f5:f3:
                    de:fe:8f:c8:cc:27:4e:72:91:b0:85:3b:37:71:68:
                    ac:5b:d5:7c:fd:15:d5:40:d3:d8:13:9a:19:20:2f:
                    16:93:5f:0e:c4:9f:7a:24:df:01:a7:1e:e3:5f:7c:
                    63:b0:48:89:6d:0f:d0:51:31:df:c2:63:d3:88:12:
                    7a:bb:64:00:18:71:2a:cf:8b:88:a1:0f:0e:78:3c:
                    58:0b:70:bc:b1:fb:23:30:b0:a5:37:d9:cf:30:61:
                    46:d9:73:07:95:7e:0a:aa:8d:ce:c2:cd:96:a0:b6:
                    8b:59:bf:ad:96:ed:66:3f:08:43:95:af:41:cc:e6:
                    c1:27:9c:01:0e:5b:21:3f:22:e4:00:19:65:5a:d4:
                    cc:06:a1:ff:a9:77:17:22:53:86:4c:59:8b:ba:05:
                    35:96:a3:85:7b:41:75:7c:67:2c:5d:fe:0c:e9:78:
                    8f:2b:90:a7:e6:63:3b:91:f6:15:ae:fb:ce:55:bb:
                    0c:e4:1b:f8:22:7a:84:fd:6f:6b:9e:93:5f:c2:bc:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:13:AC:D4:5E:18:40:15:A9:A9:7A:C2:17:6E:DF:79:FB:93:2A:39
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:10:18:89:ab:51:d2:3f:8d:21:00:93:21:91:52:1d:68:
         64:bc:9e:5d:8c:86:84:be:03:01:72:4c:5d:9d:01:a1:73:de:
         2b:c4:71:5c:fd:4d:36:53:4b:26:fa:cd:e6:b0:56:2f:d6:5e:
         9f:0a:d0:74:e8:d8:6b:27:fe:fc:0d:8e:c5:0e:ab:71:43:f5:
         6f:69:17:c2:4e:e7:d0:f3:72:94:3e:02:43:00:19:14:e2:2b:
         85:84:04:9e:63:f9:a3:e5:cd:95:36:2f:af:47:25:9d:63:56:
         e7:e0:ba:04:76:8f:c0:87:3b:37:84:22:d6:80:3e:e5:6f:5a:
         90:73:7f:83:cf:15:bd:d0:e7:12:ce:47:05:18:7b:4f:8b:69:
         07:51:e8:87:f1:ea:2f:1e:f3:6d:13:31:00:e8:0d:c5:12:7d:
         03:2f:8a:93:b7:62:88:5b:2a:6f:73:5a:07:cf:06:39:40:3c:
         43:9f:03:20:96:dc:ab:65:da:b0:7a:2d:ba:36:65:57:91:91:
         38:41:41:9f:74:17:6a:08:82:09:4b:1f:c9:ad:9c:bb:34:65:
         84:a9:7d:92:3f:bf:71:8c:85:c0:3e:a0:5f:36:24:08:b9:26:
         d5:05:99:0e:e8:07:c5:24:54:43:77:36:ea:4b:1c:16:3b:f9:
         10:16:85:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx
M0Y4MEZCQkIwHhcNMjUwNTEzMDQwNjAwWhcNMjUwNTIwMDQwNjAwWjAYMRYwFAYD
VQQDEw02ODIyYzUyOS0zM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmMMl5bCK5jpmLOtmlXPlv0nKCd56TGSmGRmsCuBaIlHAZedyFeyaMOgEczHf
NBhonbCnrxVpdCpR9fPe/o/IzCdOcpGwhTs3cWisW9V8/RXVQNPYE5oZIC8Wk18O
xJ96JN8Bpx7jX3xjsEiJbQ/QUTHfwmPTiBJ6u2QAGHEqz4uIoQ8OeDxYC3C8sfsj
MLClN9nPMGFG2XMHlX4Kqo3Ows2WoLaLWb+tlu1mPwhDla9BzObBJ5wBDlshPyLk
ABllWtTMBqH/qXcXIlOGTFmLugU1lqOFe0F1fGcsXf4M6XiPK5Cn5mM7kfYVrvvO
VbsM5Bv4InqE/W9rnpNfwryFIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMTrNRe
GEAVqal6whdu33n7kyo5MB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUYyMi9DRjlCRjVGRThGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1
V3JGTVltZFJYTjhULUEtN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3phAYiatR0j+NIQCTIZFSHWhkvJ5djIaEvgMBckxdnQGhc94rxHFc
/U02U0sm+s3msFYv1l6fCtB06NhrJ/78DY7FDqtxQ/VvaRfCTufQ83KUPgJDABkU
4iuFhASeY/mj5c2VNi+vRyWdY1bn4LoEdo/Ahzs3hCLWgD7lb1qQc3+DzxW90OcS
zkcFGHtPi2kHUeiH8eovHvNtEzEA6A3FEn0DL4qTt2KIWypvc1oHzwY5QDxDnwMg
ltyrZdqwei26NmVXkZE4QUGfdBdqCIIJSx/JrZy7NGWEqX2SP79xjIXAPqBfNiQI
uSbVBZkO6AfFJFRDdzbqSxwWO/kQFoXK
-----END CERTIFICATE-----
Generated at Wed May 14 11:37:14 2025 by rpki-client