Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File:                     BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier:          L3FISL3Iq5y4a5aARHdhAEFbxYDD5wUjcm9vaPMJCU8=
Subject key identifier:   1C:F0:B4:2B:87:8B:1E:D9:AF:FF:1E:82:61:33:2E:14:12:BA:C6:5E
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer:       /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number:          0637
Signing time:             Fri 16 May 2025 22:54:08 +0000
Manifest this update:     Fri 16 May 2025 22:54:07 +0000
Manifest next update:     Fri 23 May 2025 22:54:07 +0000
Files and hashes:         1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: HaqqgCGOjTux0w9j0ziGXumE6Xt/r9nPWPmHN85GDf8=)
                          2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
                          rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
        Validity
            Not Before: May 16 22:54:07 2025 GMT
            Not After : May 23 22:54:07 2025 GMT
        Subject: CN=6827c210-9464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:9c:ef:a8:0b:46:a9:ae:93:c2:27:ef:95:
                    f3:9a:88:ab:9d:74:0e:48:47:8c:a5:b8:9f:e0:d2:
                    23:e4:b1:ad:1a:35:5f:6d:65:87:83:2d:d5:0d:dc:
                    f3:19:df:0d:f8:28:f7:17:fa:ff:5c:01:0c:0b:cb:
                    96:48:74:dd:57:1b:cb:f4:c7:23:08:05:d4:c7:de:
                    47:bc:0f:a8:40:9a:16:a5:b3:ad:26:d8:1f:7b:9d:
                    d2:33:d4:c5:69:26:cc:03:46:5c:ac:6d:96:5a:e1:
                    d5:e2:11:f9:ff:ee:8d:ae:9f:4c:af:ff:4b:e9:b7:
                    f4:b3:b6:0d:fa:1c:e0:06:30:7b:a5:b5:d9:73:28:
                    18:3e:f7:2d:43:1c:10:e5:81:66:16:a5:7f:95:95:
                    d1:eb:63:7a:b7:c0:84:dd:87:5b:12:6f:50:a6:35:
                    00:27:89:2b:91:13:8b:4e:91:c0:9e:21:f0:40:ef:
                    11:22:a5:74:cb:9c:82:3f:11:e0:cf:5d:c9:d4:62:
                    cd:b2:b2:76:07:03:09:f3:56:60:e2:d8:92:35:ae:
                    51:6e:b0:90:d2:6b:37:17:8b:b1:98:2b:43:24:35:
                    61:f5:bc:96:00:21:be:d7:e4:1a:37:e8:8b:77:b8:
                    10:88:2e:15:5e:3e:2b:6d:ca:3d:ee:8e:4b:4f:50:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:B4:2B:87:8B:1E:D9:AF:FF:1E:82:61:33:2E:14:12:BA:C6:5E
            X509v3 Authority Key Identifier:
                keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:71:ea:cb:8e:5d:d5:98:0f:75:9e:7b:2e:eb:33:a9:9d:
         97:bd:e4:7f:01:57:30:52:ae:5f:8f:c0:07:eb:4f:96:08:b7:
         69:f1:37:43:cf:b3:9a:1f:0d:76:6b:5b:4d:eb:88:c8:bb:6b:
         bb:ef:ec:ef:22:b3:c0:45:e6:bd:f7:70:0e:6d:b7:d1:db:55:
         a8:02:07:53:d9:79:1e:50:30:41:3e:20:2f:1c:14:c5:2d:10:
         e4:17:48:24:da:cf:4e:df:ee:4c:82:c5:cc:f4:b2:ac:cf:9c:
         e1:72:4a:93:b2:26:b9:e7:4c:fb:51:a2:f4:5a:3f:bd:d6:28:
         b8:4f:f0:cf:92:a9:3e:52:23:76:7c:91:c0:d7:c4:10:5a:c2:
         04:46:f4:90:20:f5:c1:a2:fa:34:46:dd:b9:ea:cb:7c:d3:b9:
         7b:f3:c6:64:00:c0:7f:d8:73:fb:53:eb:b0:a2:a9:6d:ab:7c:
         eb:0f:19:c5:16:35:34:14:53:69:89:1a:4b:db:e9:c6:b2:06:
         63:cf:b3:db:0c:9f:61:e5:12:e2:0a:75:8a:af:37:34:62:7c:
         da:4d:4e:9f:4c:87:8b:45:d0:49:20:26:d3:34:92:05:83:6e:
         48:18:0f:9f:cf:b2:ef:8b:e8:03:80:b6:3d:35:b8:7c:d3:97:
         97:41:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:01:52 2025 by rpki-client