Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File:                     1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier:          bz9HwzZ2P1maPbvN/C3mPrAFzdF53KwQ/hXiSRmZEpY=
Subject key identifier:   A7:EC:F2:9A:99:B2:94:01:8A:3C:33:F2:C1:3E:34:18:B4:D8:94:77
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer:       /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial:       1BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number:          1BC8
Signing time:             Mon 12 May 2025 16:11:38 +0000
Manifest this update:     Mon 12 May 2025 16:11:37 +0000
Manifest next update:     Mon 19 May 2025 16:11:37 +0000
Files and hashes:         1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: CGVKCYArg9EUfwBQDK8u2GZV0zg6qKVweIAejYg4jkU=)
                          2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=)
                          3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
                          rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7143 (0x1be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
        Validity
            Not Before: May 12 16:11:37 2025 GMT
            Not After : May 19 16:11:37 2025 GMT
        Subject: CN=68221dba-29ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:23:ee:1f:15:a7:97:4b:27:2d:6f:71:7f:
                    d6:0d:64:3a:8a:a1:e7:05:c3:04:70:6c:a8:8d:a1:
                    41:47:e0:f5:c5:e5:3c:c5:54:30:cd:e5:5e:8b:84:
                    6d:f5:32:71:3b:a9:4c:45:a1:2e:c2:1a:b4:9d:6c:
                    dd:d4:8c:5e:51:3c:86:28:cc:1c:8e:88:57:1e:bd:
                    e3:c4:e7:61:64:27:df:a7:27:68:80:d8:99:da:09:
                    57:8f:ae:7d:15:15:31:08:30:42:e8:a8:da:ec:48:
                    2e:94:94:7d:d0:49:bc:fa:9b:ab:5b:49:24:28:fc:
                    ad:44:6b:f0:e9:c3:bc:0f:6c:b7:11:d8:64:0b:e9:
                    48:34:93:4b:4d:63:9a:b3:f8:14:4b:aa:0e:44:a2:
                    52:28:e8:62:f0:68:f1:4b:8b:ba:44:b5:68:c4:40:
                    94:9a:b2:db:6e:b8:36:e2:92:bf:99:e2:cd:96:9c:
                    5b:5c:5b:72:b9:f8:c5:36:91:b1:84:db:65:37:27:
                    4f:19:c8:16:25:17:62:aa:84:54:70:52:7c:a6:18:
                    f7:ed:79:92:40:04:ed:41:d2:93:d1:56:d0:a4:70:
                    ee:2d:e8:4e:b3:4c:b4:84:fe:32:1b:94:4f:f0:76:
                    de:70:b7:d9:94:cd:59:9b:71:b0:78:97:bc:be:0f:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EC:F2:9A:99:B2:94:01:8A:3C:33:F2:C1:3E:34:18:B4:D8:94:77
            X509v3 Authority Key Identifier:
                keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:83:bb:21:7b:ca:10:11:b3:ae:d0:ef:51:ed:9f:93:be:
         8e:43:bd:4a:eb:20:3d:59:24:e2:c3:cc:69:d4:50:c0:5b:9f:
         23:a9:25:f7:4d:0a:5e:14:ea:c7:b6:3b:ab:86:0a:07:e1:87:
         6b:f9:14:2f:a7:4f:d4:47:05:01:bd:38:3f:a5:e7:6a:27:69:
         fb:f0:81:fe:7f:32:c7:98:e2:3a:5c:a8:88:bf:bc:78:1f:a4:
         a8:7c:3b:85:b0:f0:1e:b8:b2:bd:03:15:4a:bf:57:55:af:00:
         f7:ef:5b:7c:77:bc:7e:23:55:25:da:be:a8:7e:20:bd:e8:b7:
         2a:82:bc:0c:80:7e:55:db:12:79:2e:95:01:30:3b:3b:26:be:
         85:d5:18:d5:9f:6c:96:89:58:8d:0f:ab:04:d9:bd:07:14:b4:
         e5:95:62:90:aa:c6:7a:1c:15:65:89:43:55:5f:82:0c:00:8e:
         5f:23:c9:4b:bf:eb:d0:f1:75:aa:5a:cd:55:79:d8:35:db:bf:
         b3:3b:76:1d:13:42:08:a6:4f:1c:62:2b:eb:2a:f0:9e:01:5e:
         d2:70:13:b7:c9:c1:36:61:19:aa:6d:f8:71:23:a9:c0:9a:c5:
         04:6d:b5:f2:57:cb:b7:c3:32:d7:c0:d6:0a:32:ee:37:bf:22:
         f5:ab:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:05:53 2025 by rpki-client