Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          8PsPozBuqlzUW9nQbVqkGC/zG5nSEGiJo1us7h469RU=
Subject key identifier:   31:20:65:6B:7C:51:A9:C5:11:73:8C:2F:AF:AA:E2:A3:BF:87:CD:8B
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       233A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          2325
Signing time:             Thu 24 Apr 2025 15:51:48 +0000
Manifest this update:     Thu 24 Apr 2025 15:51:47 +0000
Manifest next update:     Thu 01 May 2025 15:51:47 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: Bx8BLYg2fkOXckdomXUMGhabkDYRrcDOok11kWW82PA=)
                          2: 384962A2709511EFB3C2992DC4F9AE02.roa (hash: 2qRtl+2vbaSdK6Wey0VbloBnqojKQ9B99jR5Bas2V80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9018 (0x233a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Apr 24 15:51:47 2025 GMT
            Not After : May  1 15:51:47 2025 GMT
        Subject: CN=680a5e14-ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:a3:8e:86:80:a1:1f:31:e7:f4:17:e3:1a:
                    ca:57:97:c2:1f:b5:24:f1:b4:0b:4e:62:1f:8b:1f:
                    5a:77:9d:47:7e:77:1f:f6:1a:48:a1:43:47:95:3a:
                    e1:93:d2:88:00:4c:8c:df:31:4a:74:74:cf:10:33:
                    e7:57:65:4f:35:15:fe:78:23:f4:77:dc:02:2e:e4:
                    29:6c:90:cc:bb:dc:3b:0f:9b:8c:2f:da:1c:fb:16:
                    d5:dd:fd:b5:e3:c1:65:08:7a:a9:d3:e6:b3:eb:7c:
                    de:e8:2a:95:ce:7a:e5:94:12:56:cd:18:82:cf:61:
                    e3:64:d4:46:69:39:d4:b3:cf:8d:48:ae:25:60:3d:
                    b9:bc:60:8f:3f:e9:79:97:78:dd:01:87:4d:1f:f2:
                    42:fd:e6:b8:d9:59:f5:67:36:6f:5c:1b:04:1b:ef:
                    88:0f:29:eb:0c:b3:04:31:b2:aa:6a:ba:94:89:73:
                    cc:cf:9c:46:9f:47:50:42:4b:14:cf:0f:52:0e:e7:
                    07:22:a2:ef:3e:d6:05:c6:db:2a:67:97:ac:1e:d2:
                    3e:ce:51:71:ef:45:05:36:55:fa:cf:df:16:85:c0:
                    0f:6d:b0:25:5c:05:f1:3f:d5:51:50:22:85:6a:36:
                    f5:2f:20:33:73:8d:8e:f3:e7:df:0f:b0:de:c8:2c:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:65:6B:7C:51:A9:C5:11:73:8C:2F:AF:AA:E2:A3:BF:87:CD:8B
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:97:cd:ac:4d:3e:d7:4a:ec:68:9b:f2:af:26:ee:c4:75:
         f7:6c:ee:d9:88:84:0b:1d:06:0e:c2:ad:ad:4b:52:eb:55:db:
         15:5a:59:eb:17:08:2a:d3:30:b6:e9:70:4a:c6:75:71:13:6e:
         88:70:36:a6:d8:72:68:07:08:4a:5e:78:14:11:0b:39:31:9d:
         33:24:23:00:4a:bb:8c:7b:89:5e:2d:57:b1:af:cb:b3:47:01:
         ee:4a:40:b3:53:ec:17:f2:59:56:0a:9c:e6:9d:ee:95:ff:2f:
         f3:51:b7:20:e5:f5:a0:5c:69:f5:d6:17:04:fd:2a:7f:70:7d:
         5c:bf:1c:24:51:13:ed:bc:13:a5:fc:eb:a5:c3:0e:61:7f:c6:
         2d:05:f5:79:37:65:0e:7b:21:02:e9:ca:cc:b9:47:dd:ec:9c:
         56:6d:2a:a8:31:9b:dd:33:48:7c:5e:98:0b:d6:38:cb:89:cd:
         0d:1a:3e:69:0f:5a:13:c9:54:a3:67:a1:0a:c9:82:f9:0b:74:
         5e:a2:71:7b:02:6c:15:67:87:82:ea:0e:ee:06:14:78:8d:ea:
         58:db:99:81:61:c4:c1:97:99:1b:d8:19:fa:19:56:c4:5d:a6:
         1e:6b:63:01:86:b3:33:17:b5:1d:15:73:bf:e7:10:fd:01:37:
         83:0e:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:39 2025 by rpki-client