Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          nPkOLpSmVSGRPlZyGY4CF9WsXeyMgbOSj5F1z+rxpWI=
Subject key identifier:   4A:F5:FC:79:ED:94:FF:A4:19:FE:37:BD:12:3C:25:39:A6:EE:AB:86
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       34A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          349C
Signing time:             Mon 30 Jun 2025 15:11:47 +0000
Manifest this update:     Mon 30 Jun 2025 15:11:47 +0000
Manifest next update:     Mon 07 Jul 2025 15:11:47 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: DpWuqo1rlwkHoLHqFu1t5Vzv1/civ4Y6gnuU+12CJc4=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 15:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Jun 30 15:11:47 2025 GMT
            Not After : Jul  7 15:11:47 2025 GMT
        Subject: CN=6862a933-37d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:fd:41:c5:77:69:04:2c:cc:e0:39:b0:de:
                    8e:40:ed:31:c8:57:eb:38:a0:f4:a1:d8:b1:d7:38:
                    2d:1a:b1:4d:73:d2:12:14:2a:c6:70:1e:c3:45:26:
                    c2:84:e3:e7:8e:7f:92:8d:f5:54:51:11:15:8f:41:
                    9f:43:43:5c:b4:78:e0:5e:13:66:e9:1d:ff:52:ca:
                    6e:91:dc:0d:e6:ef:38:e5:d9:12:e0:7c:62:7e:01:
                    71:f4:57:56:ad:b5:0f:8b:ba:58:55:64:c5:ba:d5:
                    25:4e:5c:16:2f:bf:61:5b:51:1c:ee:b7:71:61:7a:
                    ce:76:2e:47:06:06:d7:7f:c2:8b:a6:4a:65:81:f2:
                    10:64:3f:dc:d8:72:84:46:33:b2:54:b8:c2:99:10:
                    47:eb:44:22:74:42:80:dd:8d:ed:61:41:ad:7b:fb:
                    42:af:99:3e:3c:46:ba:b1:54:63:2b:42:c7:1d:d9:
                    1b:e0:14:86:b5:af:7e:e3:b8:c4:7e:b9:ba:9f:1b:
                    6a:88:21:16:7c:46:5c:fe:a1:84:3f:67:cb:c5:26:
                    86:c1:50:59:28:fa:9d:9a:a4:c5:11:32:e4:29:60:
                    5b:b9:f6:c9:c5:c3:04:25:a4:35:9d:82:b7:44:93:
                    87:d9:75:21:64:86:52:fd:ae:58:c9:c4:bc:e7:ea:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:FC:79:ED:94:FF:A4:19:FE:37:BD:12:3C:25:39:A6:EE:AB:86
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8b:a9:ff:02:43:82:d0:36:be:e1:fb:9d:1f:4f:eb:c1:f1:
         e1:cb:42:9f:a4:19:0a:c7:d9:31:c9:65:aa:f0:f4:ca:bc:2c:
         8a:47:56:31:8a:e5:12:de:85:1e:ba:70:b3:7a:76:ba:bf:1d:
         47:df:a3:50:51:14:f6:6c:d1:3b:ce:4a:3a:00:c6:36:07:c2:
         13:f4:52:07:2f:11:de:de:ae:5b:4e:99:06:2b:5b:3a:bc:5b:
         75:ff:6e:92:c1:7f:d5:0d:1f:70:26:a2:1b:4c:91:da:6e:60:
         24:07:88:39:6a:32:af:39:36:f8:b5:9a:61:0b:8b:01:59:93:
         ea:1f:18:65:d2:94:c6:0d:e1:d8:cd:c2:c9:a6:bc:f3:7e:d7:
         0e:a9:93:f5:94:8f:9e:d8:ad:f1:a5:7e:4a:f3:0e:c1:0e:22:
         69:37:dd:da:e2:c1:23:ee:ca:8c:d9:02:56:2a:46:62:cf:20:
         09:a5:af:d4:30:c0:b5:61:59:aa:71:5f:71:8f:74:94:68:11:
         0f:39:d4:1a:92:c9:16:18:00:d3:0f:73:a2:e0:f0:80:37:30:
         db:6c:a8:5c:93:56:7a:3e:70:f7:55:0f:40:67:86:84:10:2f:
         35:c9:f0:91:ed:7a:ce:f0:61:cb:73:3a:ab:3b:03:fb:37:ce:
         c3:1b:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:40:25 2025 by rpki-client