Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
File:                     p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json)
Hash identifier:          CpNrIwRQxRka0V/lWbS9lMs+l5rcehs1nDsBP4S8JRo=
Subject key identifier:   68:04:B0:0C:CF:93:31:35:A3:39:93:EE:3E:5E:3A:BF:90:D8:A3:80
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
Manifest number:          0206
Signing time:             Fri 25 Apr 2025 01:49:29 +0000
Manifest this update:     Fri 25 Apr 2025 01:49:28 +0000
Manifest next update:     Fri 02 May 2025 01:49:28 +0000
Files and hashes:         1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: O+Uzpl0JuSSdqs4NwV3ejjToa3UE+L4S3XRD003rlE8=)
                          2: 3366A64616EE11F092BB8D27C4F9AE02.roa (hash: BqVy/ukdl/6/b56EtxQ8tAIR6Cjii/d5BEoVe0J+mjI=)
                          3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 1g2p3b2YKG05onOBUGFQwxLWWfgUtvMtLCVSZMC3Z1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Apr 25 01:49:28 2025 GMT
            Not After : May  2 01:49:28 2025 GMT
        Subject: CN=680aea29-da3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:2f:c5:f1:55:e0:f0:59:59:ed:12:0b:10:
                    ed:09:92:60:3f:a6:39:7e:89:b2:fe:69:00:74:8b:
                    50:2f:54:31:7c:26:f0:1b:6e:a3:e0:16:1d:dc:e4:
                    7c:a3:b5:2e:5b:55:45:13:e5:37:40:6b:37:ad:d6:
                    b5:95:fc:73:6d:99:06:5e:71:f7:f3:6a:a1:80:6b:
                    47:3e:c0:25:8e:a2:a0:25:c6:e2:9b:52:fd:41:89:
                    ed:4b:c0:1b:4e:3b:c0:4d:87:55:78:a0:38:ec:9f:
                    4a:05:20:85:4c:f5:ea:bc:57:6a:f4:fe:41:52:12:
                    92:58:34:08:3b:e3:48:fb:14:aa:7d:dd:1e:83:65:
                    40:41:9b:9c:ea:3a:12:a5:43:f0:d5:d3:36:2b:3e:
                    1d:c7:93:19:a6:3e:e5:ac:75:24:fa:8f:65:91:e6:
                    fd:2b:51:5b:bf:10:d0:58:56:7e:bb:2c:c2:ec:0c:
                    56:62:54:3a:4a:f5:de:e1:b0:2b:e7:93:ba:cf:ce:
                    4c:22:1d:c1:f7:ee:59:ad:61:dc:ed:70:00:ef:8f:
                    a7:c1:b2:8d:8d:ed:52:f1:f9:90:4f:5d:00:6d:cd:
                    15:ec:30:c4:6c:de:34:ce:04:78:c8:ce:92:44:21:
                    bc:c1:7c:cf:66:6c:30:b3:72:0d:3d:26:6e:c7:77:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:B0:0C:CF:93:31:35:A3:39:93:EE:3E:5E:3A:BF:90:D8:A3:80
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:1c:b0:e7:2c:d6:90:ee:bc:53:b4:0f:3a:78:e7:6d:86:
         63:2b:41:39:b9:40:e9:c2:c7:6c:f1:11:ae:26:54:fa:c2:c8:
         50:b4:28:d4:c1:af:07:29:c2:4f:d8:e1:96:d3:f0:96:67:44:
         55:c8:cd:88:3e:6d:cc:c6:90:36:fb:88:0a:b6:87:63:6c:4f:
         35:b5:31:7d:67:5c:97:41:53:7b:f1:37:a3:6e:4c:d0:fa:b8:
         ce:b4:b6:b6:24:75:ca:ed:e1:ca:ec:d6:93:34:bb:1b:a3:60:
         f4:de:16:1d:18:7c:16:5c:02:93:65:6e:49:e7:d5:0c:f7:0b:
         17:a2:6c:41:ce:db:bb:2c:8b:59:f7:b5:aa:bb:34:28:2c:51:
         bd:99:98:8d:0f:9c:a9:2b:12:86:1e:47:9a:8d:bc:1a:74:59:
         38:71:d8:dd:77:36:ab:59:ea:8f:e8:5a:59:dc:f0:d0:3a:2a:
         7a:df:64:c4:8f:ae:da:8c:55:37:9e:1a:3f:82:25:09:7d:56:
         50:3e:c8:45:2a:ff:80:96:f1:06:48:64:c3:c7:b1:02:63:93:
         27:0d:de:43:08:85:85:7b:20:cd:92:53:5e:d7:26:34:6a:78:
         fc:7a:3f:15:03:22:7a:87:d6:67:ca:d3:0c:da:57:cf:ba:26:
         73:9e:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:06:55 2025 by rpki-client