Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft
File:                     bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json)
Hash identifier:          78oH3ggyfs4+5OffDORLeK9sNAeKfOaLJ4vgGDS6BP0=
Subject key identifier:   C7:98:E5:5A:54:32:56:FF:69:19:06:1F:54:91:EA:93:A4:99:CB:BC
Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37
Certificate issuer:       /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft
Manifest number:          01F2
Signing time:             Tue 13 May 2025 01:52:04 +0000
Manifest this update:     Tue 13 May 2025 01:52:04 +0000
Manifest next update:     Tue 20 May 2025 01:52:04 +0000
Files and hashes:         1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: An12IJYLGrpHOVPFsSBZlTOw8bq+tWwUHaXA30YwRKY=)
                          2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl
                          rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37
        Validity
            Not Before: May 13 01:52:04 2025 GMT
            Not After : May 20 01:52:04 2025 GMT
        Subject: CN=6822a5c4-4fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:68:53:bb:7c:f0:28:e7:df:26:7d:1d:25:
                    85:ff:b7:5d:2e:e1:ef:74:b5:69:76:8d:25:cc:ca:
                    d8:c4:f0:19:9f:41:c2:dc:02:75:02:72:e1:f8:59:
                    cf:88:b9:fe:a7:34:8b:b4:1d:5f:cf:52:c7:58:7b:
                    05:b7:7d:d8:c9:f9:2e:a3:28:38:bc:32:40:a9:78:
                    c5:b8:0a:a1:73:dd:1d:43:68:1d:1e:88:5b:8f:69:
                    91:53:b7:3a:23:3f:25:fa:07:46:17:e6:f6:36:09:
                    a3:60:78:6c:40:84:49:ae:66:a4:cf:4d:b0:6b:72:
                    27:73:be:94:f7:ce:94:81:9b:89:03:f0:c5:dc:f1:
                    be:22:39:7a:83:86:e0:a7:47:cf:2c:71:16:58:50:
                    ad:26:68:ca:19:27:9f:e4:f8:e0:f4:03:23:07:bd:
                    fb:96:06:84:ce:cf:b3:d8:71:85:5d:0c:02:ae:ea:
                    01:02:f6:b9:9a:c0:c4:9a:9c:07:a6:24:11:d7:cd:
                    bc:f2:e8:c3:dd:53:fd:e9:61:97:26:4f:84:a2:3b:
                    4a:6b:00:f8:e4:8e:6e:eb:bc:22:be:97:d0:db:db:
                    69:b8:84:1c:dd:ff:fc:01:1b:53:f2:e6:f4:63:62:
                    42:ea:b2:66:0f:e7:6a:6b:e3:99:94:25:d8:68:98:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:E5:5A:54:32:56:FF:69:19:06:1F:54:91:EA:93:A4:99:CB:BC
            X509v3 Authority Key Identifier:
                keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:9f:04:cb:38:a2:42:a2:ea:fd:85:8c:84:d5:61:d0:53:
         50:3f:07:35:cc:ad:fd:05:98:d7:36:58:e9:dd:25:e5:46:d7:
         0a:a5:2b:32:65:f2:8e:50:42:6a:61:45:d4:e6:a9:01:20:8d:
         aa:c6:33:ef:30:a5:6c:c2:16:57:7c:a8:2a:b7:7c:72:0a:5c:
         0d:69:3e:71:0b:75:fc:71:80:02:74:86:31:0f:db:c9:05:5f:
         12:93:34:1e:dd:34:df:e0:cd:ac:4d:ad:6c:cc:be:61:81:3e:
         cb:34:a3:7d:49:e0:58:ea:ba:67:1a:69:cf:d6:16:4e:6a:ff:
         7e:91:8a:8d:e3:25:7c:c7:28:90:e8:06:0d:9c:bc:3e:7a:f6:
         15:4f:39:51:03:08:9e:2d:3b:c0:44:9d:23:d1:d8:92:0a:37:
         67:14:ed:a4:c6:c0:04:7a:d2:a9:fb:fc:d5:d2:85:c0:85:a7:
         29:1b:21:d5:25:7d:9d:3f:e3:b1:44:a4:4d:16:46:18:f9:ac:
         9c:6c:0e:05:67:f2:1e:6b:9e:6b:d9:f2:fc:0f:d6:02:24:af:
         87:34:6d:f3:c8:8a:c5:37:aa:10:8d:81:ab:40:ae:83:e3:cd:
         e9:0e:a8:07:8f:a7:e8:ce:f0:16:fb:7b:96:26:22:63:f4:4c:
         39:79:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:59:26 2025 by rpki-client