Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          I7mY/nveiC+kg4fbwVE5jJBvepLhJvA1uDe73lIyNiA=
Subject key identifier:   D6:9D:0D:BE:9C:8D:E6:22:40:2B:F7:A2:EE:FC:AE:3C:9A:DD:06:9A
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0A83
Signing time:             Thu 24 Apr 2025 19:27:55 +0000
Manifest this update:     Thu 24 Apr 2025 19:27:54 +0000
Manifest next update:     Thu 01 May 2025 19:27:54 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 4WM77HDFwZh9AmDmoHX7FAbVaMXfW4xgsQ+7vwbt0+s=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Apr 24 19:27:54 2025 GMT
            Not After : May  1 19:27:54 2025 GMT
        Subject: CN=680a90ba-7a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:2e:65:86:a0:b3:3d:d6:36:a2:3d:7c:96:
                    3e:ef:cc:b9:ab:87:93:d1:35:33:14:2a:fd:c5:63:
                    c5:82:16:ae:5a:99:23:10:97:88:9f:1e:de:ed:f9:
                    bb:a0:d8:d0:65:cd:75:85:8a:9a:14:e5:ab:4b:eb:
                    19:e1:a6:ce:7d:a6:33:27:91:b7:ce:b3:6b:e9:da:
                    bb:46:4b:bc:bc:1e:c0:50:1f:e0:48:f4:f7:3e:24:
                    e9:28:07:f7:b8:7f:63:9c:3b:ca:3d:0c:aa:1c:d8:
                    ca:c5:fc:dd:55:26:98:ec:4d:12:9e:fd:63:21:b9:
                    d0:f4:44:83:1e:c0:44:9b:ca:23:25:c8:91:20:f1:
                    67:97:de:a5:98:dd:3e:7c:86:4b:8e:e6:98:9a:46:
                    36:a2:ca:e6:e5:41:e0:4b:f0:bf:8e:a0:9b:b8:30:
                    76:4c:cc:fe:dd:c6:9d:c8:65:e9:67:b0:cc:9d:b2:
                    17:d2:e0:04:d3:3b:69:b4:75:8b:15:23:11:09:e3:
                    e5:67:04:65:ee:ee:24:8e:7d:a2:ea:fc:33:44:7d:
                    1b:7a:9a:30:e0:33:63:ce:47:33:d7:61:9a:d7:21:
                    37:53:1e:b0:70:c6:c6:c5:a4:53:f0:6e:e4:98:f0:
                    18:37:0a:6c:e3:95:92:36:41:b8:c5:13:b4:7c:23:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9D:0D:BE:9C:8D:E6:22:40:2B:F7:A2:EE:FC:AE:3C:9A:DD:06:9A
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:cb:fa:9d:a7:47:81:3c:7b:43:30:c2:8d:ac:6f:04:a8:
         95:51:ce:d4:ea:8c:aa:37:c6:7e:8e:13:36:94:f9:ee:dc:a1:
         b6:05:8f:d6:8d:ae:5a:5b:cf:58:6e:52:1c:9f:c5:d9:c4:0a:
         3c:73:cd:90:3e:4f:53:17:e6:e7:f5:57:5b:b8:b2:c9:d7:a5:
         4d:17:b6:cc:9b:72:d9:f8:96:22:4d:c2:ea:72:71:9c:72:2f:
         9f:da:3b:bc:51:59:eb:63:de:c2:f4:4e:94:c4:61:7b:0c:9d:
         d5:e1:02:6b:33:f6:f3:83:fc:e9:a3:be:ba:3c:0b:7d:cf:fc:
         73:b7:09:8a:72:56:6a:3f:b8:05:9d:a6:0b:92:85:a9:8b:ed:
         11:99:0b:13:ec:85:cc:e6:32:d0:4f:e5:1d:63:90:80:3b:5b:
         4e:f8:a2:bf:27:c0:91:d3:ca:e4:41:6d:5e:4d:d6:d8:12:c6:
         61:e3:b3:78:42:70:26:03:a2:30:e3:7d:14:f9:47:89:6d:43:
         a6:7a:c0:c1:91:5a:5c:99:27:75:93:11:5e:ee:2b:45:2c:ae:
         16:f7:70:12:f0:d7:f1:db:b5:e1:27:2f:a6:0c:01:63:1e:ed:
         98:f5:43:19:47:6e:a7:39:92:2a:a7:d7:c4:0a:78:bb:39:cf:
         f5:e2:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:50 2025 by rpki-client