Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File:                     yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier:          t5gYPyRpNvSdSFWVDHVaIPytuMW2JdcMhmxmTQWVa7s=
Subject key identifier:   7C:0A:21:83:89:8A:79:70:AF:C7:0F:A9:A5:D3:F4:1A:1E:2C:57:01
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       0808
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number:          07F9
Signing time:             Thu 24 Apr 2025 20:46:22 +0000
Manifest this update:     Thu 24 Apr 2025 20:46:22 +0000
Manifest next update:     Thu 01 May 2025 20:46:22 +0000
Files and hashes:         1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: NXoAYewKqoVdW1Rz/6IJQRVhw5U7huXbnYVV6jmR6Oc=)
                          2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: 5kUDYmJ4yH0CUdMpxOxfk0FcArn01dfqkN25Zg1CXyk=)
                          3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: t4Mlw7tJOEB0j00nJw/m4xLHs7JGJvrbxajz+Hi3W7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: Apr 24 20:46:22 2025 GMT
            Not After : May  1 20:46:22 2025 GMT
        Subject: CN=680aa31e-2d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:7a:50:24:87:f1:2d:da:39:4d:cf:cb:19:
                    61:88:43:d7:71:ad:5f:0c:ab:26:93:c9:1a:c1:ed:
                    69:27:a1:df:06:6d:3e:2b:1a:24:bd:e4:6f:58:5d:
                    64:6b:5b:16:16:fe:e7:16:5b:42:5c:e9:42:ba:03:
                    1c:41:f4:de:b5:d4:b6:9d:9c:65:e0:cd:d6:99:e0:
                    8c:f7:2d:85:2b:0a:25:59:54:fa:eb:25:57:a4:1e:
                    7d:ae:14:5f:b9:67:ff:50:b5:3d:f6:b7:37:44:ed:
                    e7:7c:32:fa:ef:dc:68:57:3c:cb:98:74:f6:e3:48:
                    5a:53:20:68:c6:68:e3:12:d4:07:35:25:37:2f:e8:
                    75:ab:84:be:24:9b:1c:ff:a1:b4:9a:5d:20:99:f1:
                    f6:93:c3:66:a2:57:e8:12:83:7c:f4:17:66:8c:22:
                    04:f2:82:f2:81:a7:87:1f:1b:5a:c9:ba:66:0e:a4:
                    ae:2d:5e:b5:be:af:dd:48:5c:f7:92:92:ad:f4:86:
                    d5:45:ce:0f:72:33:a1:5c:03:30:fa:31:09:b4:04:
                    b3:6b:ef:8d:4f:a5:d2:fa:33:8b:4a:84:5d:0d:53:
                    e3:7f:d7:29:24:a3:bd:2b:a4:e7:44:4f:55:e9:67:
                    09:2f:0d:19:3d:e2:1b:3b:6d:78:e1:28:da:07:34:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:21:83:89:8A:79:70:AF:C7:0F:A9:A5:D3:F4:1A:1E:2C:57:01
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:b8:b3:bd:66:4b:67:46:0d:a4:38:f5:0b:3d:4d:f0:36:
         ab:ab:3b:46:96:2a:7f:f9:fa:ae:93:2d:ab:85:00:9f:ab:e7:
         14:26:a2:77:35:b5:e8:d8:73:fc:f4:74:f4:c3:e2:8b:1c:fd:
         7d:d5:05:7f:78:c9:6b:fc:af:4f:b2:73:bf:9c:31:22:0d:1a:
         42:29:8f:21:b4:86:a5:8b:a4:f9:6a:b1:c0:5d:4c:71:af:fc:
         81:fb:62:fb:c4:55:57:03:64:d0:6f:7e:ae:f0:a8:87:ae:01:
         e7:d8:a4:b6:5f:60:2c:00:dd:72:b2:c3:a7:33:a1:b9:30:24:
         69:b1:10:16:03:ee:c5:e3:ee:f4:5f:d4:8b:4d:64:53:ab:f2:
         24:b6:b0:22:ae:24:41:7a:49:61:9a:44:dc:45:f7:09:16:32:
         b4:6b:d0:34:77:7e:99:18:22:0f:31:63:49:c5:36:e0:af:a7:
         6f:41:dc:56:9d:24:fb:40:77:44:15:2c:97:a7:f7:6b:8f:42:
         5d:a0:42:af:e0:f2:25:bd:ce:9d:07:4a:7e:6f:7b:b8:7e:c2:
         a7:07:40:9a:d4:34:47:fc:29:0b:b5:1c:89:df:cc:22:b5:13:
         0f:c0:fd:c6:84:1d:49:08:22:64:c8:58:61:9d:c4:5c:dd:b8:
         4b:00:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:31 2025 by rpki-client