Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          b6fpl3uBVy9Znu7zWjcFRI7ndIqhabWSz68ZbDMzUNk=
Subject key identifier:   22:B4:F5:1E:56:2D:57:C2:99:B1:1C:98:B1:A9:8A:6A:DF:C3:3F:69
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0C3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0C32
Signing time:             Thu 24 Apr 2025 18:25:49 +0000
Manifest this update:     Thu 24 Apr 2025 18:25:48 +0000
Manifest next update:     Thu 01 May 2025 18:25:48 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: uFzfk5Mdavz8p0t1heQb9QV4UpEsHb5TqTopC7ccA/M=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3132 (0xc3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Apr 24 18:25:48 2025 GMT
            Not After : May  1 18:25:48 2025 GMT
        Subject: CN=680a822d-5293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:d8:b6:ca:90:75:15:4d:ea:07:06:c5:72:
                    64:bc:8f:04:f1:8c:00:6e:3d:27:db:1d:60:6c:f4:
                    75:24:da:85:ae:f8:4b:29:a8:63:41:9c:fd:38:44:
                    28:8d:bb:d4:0a:88:da:ea:7d:99:fb:72:08:29:65:
                    08:d9:ce:d4:81:5b:16:5d:be:26:d4:46:f8:25:bc:
                    ef:09:7c:b1:f2:c0:d1:17:05:06:01:5f:98:e2:ac:
                    cc:84:06:3d:74:d6:21:d2:79:3a:78:79:4f:fc:82:
                    1b:08:7c:11:0e:ab:77:ed:60:de:18:9f:df:c9:4e:
                    16:24:96:67:61:90:48:81:b4:9d:4b:29:2b:79:d7:
                    0e:92:68:0c:2f:ac:2a:1e:5a:fe:38:9f:26:6a:e4:
                    75:b7:df:77:4a:8d:d0:07:3f:f8:33:ed:3d:c4:8c:
                    03:f6:58:31:83:39:91:2f:cc:dd:4f:23:d5:c3:15:
                    4e:71:94:91:62:6a:9d:c2:6c:ff:2c:dd:bc:8f:79:
                    fe:35:a6:df:ae:6c:d4:d4:19:2a:ba:0e:50:c7:a9:
                    43:d9:c9:8c:58:ed:0c:97:56:9e:72:4d:a9:48:90:
                    85:03:7d:84:71:ce:bd:23:51:bb:c8:73:94:4c:e7:
                    54:57:b2:86:41:07:aa:ee:5b:74:10:7a:2d:cf:bc:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:F5:1E:56:2D:57:C2:99:B1:1C:98:B1:A9:8A:6A:DF:C3:3F:69
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:b6:3e:18:1a:a9:22:9a:03:2b:bd:90:99:9c:93:bc:a2:
         83:c2:29:de:ed:02:9a:98:49:19:3e:a5:46:6b:64:41:d1:59:
         a7:07:e4:02:88:42:4f:06:42:48:07:01:00:a3:7f:6b:ed:60:
         18:b0:09:95:0f:ec:b3:27:21:32:85:34:1f:64:75:8b:c4:bb:
         97:3b:17:08:67:d8:27:e8:85:8f:c6:3b:8c:67:2f:71:18:69:
         f8:30:ce:69:b4:4d:88:7b:cb:dc:f1:e0:65:3a:06:10:74:a8:
         c9:70:e4:3f:de:8f:f7:17:73:8b:e0:2b:de:f6:26:c1:44:0f:
         26:cc:b5:fa:87:7a:a1:46:45:6c:5f:9f:9b:c1:e9:66:90:ac:
         17:0e:2f:e3:d0:ec:59:04:cc:95:38:8b:94:88:09:c7:3b:48:
         78:a6:f5:77:06:8a:ff:f2:dd:12:9a:ce:36:9b:05:e1:ea:67:
         ac:f4:c9:0c:31:a1:b2:54:5d:f5:ca:2a:59:89:d2:cb:2b:3f:
         81:06:38:c1:5f:cc:d5:8c:81:a4:3f:76:95:90:7d:cd:2d:0e:
         e6:cf:7a:f1:37:b8:2f:23:c4:38:89:33:b2:ed:9d:7c:41:ae:
         22:2e:cd:15:58:59:a7:d4:60:4f:b8:f4:2e:4f:a3:41:83:e2:
         31:4c:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:00 2025 by rpki-client