Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
File:                     RhpvMegu0A9M7nmnAkijjj-Sb34.mft (raw, json)
Hash identifier:          LJcRK8xHapaM6ZRYLMKFY27nesJmjhMfpJODLxr7pdA=
Subject key identifier:   88:71:55:14:DB:62:5D:4F:70:B8:79:13:9C:AF:E2:F7:D9:48:0F:32
Authority key identifier: 46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E
Certificate issuer:       /CN=A9132086/serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
Manifest number:          072B
Signing time:             Thu 24 Apr 2025 21:38:01 +0000
Manifest this update:     Thu 24 Apr 2025 21:38:00 +0000
Manifest next update:     Thu 01 May 2025 21:38:00 +0000
Files and hashes:         1: RhpvMegu0A9M7nmnAkijjj-Sb34.crl (hash: HcVuqDG6LsodYZOOEA0/WT/9UmjqLANb4KuZ7SNkINA=)
                          2: D0D950CC880C11ED9353737BC4F9AE02.roa (hash: p8Ywjcalp4llJZXyd3rfdyTwErPnhBsr/ho/EK1O++o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl
                          rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132086, serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E
        Validity
            Not Before: Apr 24 21:38:00 2025 GMT
            Not After : May  1 21:38:00 2025 GMT
        Subject: CN=680aaf38-7ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:78:f7:28:68:e6:1f:a0:e2:91:c9:62:73:
                    a8:be:3c:7d:8c:27:d8:aa:ca:25:a1:af:25:5d:62:
                    cc:20:7d:1b:07:d1:40:ab:93:43:f3:eb:00:0e:b5:
                    0a:35:eb:30:e6:48:d7:cd:bc:a8:70:53:67:0f:1f:
                    28:8a:12:7b:61:17:40:99:17:84:02:9b:53:19:71:
                    6c:af:7d:fa:38:ba:d5:f7:02:2f:94:c9:d6:5d:32:
                    ac:14:b6:76:50:78:e8:01:12:53:f7:36:75:4b:70:
                    0e:7f:f2:df:a7:c7:be:01:7f:93:50:75:ed:cb:9d:
                    f4:4e:12:fc:99:e1:3c:e1:cc:9b:cc:5e:7c:57:84:
                    79:77:01:0a:26:78:b9:82:5e:73:fa:7b:b3:d5:e9:
                    bb:35:85:3e:cb:e7:a2:2d:f9:99:65:ab:d3:fc:bc:
                    cf:e4:a9:46:dd:99:18:d5:89:85:71:c5:9a:a9:cb:
                    ce:7a:30:94:76:64:23:3b:b0:5e:32:e3:71:db:ee:
                    97:42:af:3a:88:e3:63:b5:ad:25:9f:5b:02:81:a8:
                    73:f4:dd:df:df:07:62:19:11:4c:a9:d1:65:0e:db:
                    35:4e:d2:6a:1c:7b:6d:9d:ba:da:18:f5:a1:b2:9e:
                    23:c6:d8:5b:09:b0:75:5c:43:42:35:fb:18:e7:5d:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:71:55:14:DB:62:5D:4F:70:B8:79:13:9C:AF:E2:F7:D9:48:0F:32
            X509v3 Authority Key Identifier:
                keyid:46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:6c:38:d0:01:2c:c6:e5:32:4e:05:2c:48:38:e1:55:40:
         e2:c6:da:18:27:9d:f9:cb:65:a8:bd:9a:ee:7f:69:a9:8d:45:
         20:96:75:d6:d2:76:e8:ed:ea:b4:fb:bb:99:ba:95:d5:d7:15:
         c8:3d:95:93:5b:47:bd:cf:b6:2c:4d:a3:88:c1:b6:30:e4:15:
         b6:ce:3f:9f:0f:c0:22:66:b8:b9:be:13:3f:33:c2:a5:66:56:
         3e:c7:85:de:c7:2d:43:f6:54:91:ac:e3:a3:6e:bf:27:74:a2:
         62:33:37:ca:bd:0e:b9:b3:16:7f:3d:e1:8c:1e:da:35:19:3c:
         f6:76:c5:a3:14:bc:5a:3e:22:47:66:5d:d1:d3:cc:f9:fd:42:
         4e:a4:db:fa:fb:a2:73:30:d0:59:02:a1:41:a2:00:11:c0:e7:
         2d:37:83:12:f5:81:59:40:0a:af:42:63:28:06:57:af:c2:4b:
         f9:43:cd:eb:93:0d:c2:56:a5:d6:e2:8d:4b:05:07:25:e3:d0:
         4e:53:df:59:8f:e7:59:ab:c2:32:07:b1:d4:82:57:51:f3:ba:
         f5:9c:d3:15:7d:3d:c2:a4:2f:0f:6f:f5:9a:4a:85:3b:37:bb:
         6c:75:fe:01:0c:c2:5d:e9:d8:ee:ef:9a:99:78:15:fa:37:bf:
         e7:37:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:42 2025 by rpki-client