Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File:                     9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier:          Ci2ts6kXB2ns35CCG2v/sypHKUb6ONtk8KlTjCHeqro=
Subject key identifier:   2E:3D:A2:29:54:F0:10:AF:33:75:ED:35:72:79:10:74:6B:5B:C4:9D
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number:          85
Signing time:             Fri 25 Apr 2025 05:33:56 +0000
Manifest this update:     Fri 25 Apr 2025 05:33:55 +0000
Manifest next update:     Fri 02 May 2025 05:33:55 +0000
Files and hashes:         1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: Siq4kmCxB5VpW1zu28dEZBzKZ6hGZJSgDZGujCKRZ1g=)
                          2: BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa (hash: Gqrui0OpB1CczHELSAaN90W0H5eLSv922/lG6tauLOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
        Validity
            Not Before: Apr 25 05:33:55 2025 GMT
            Not After : May  2 05:33:55 2025 GMT
        Subject: CN=680b1ec4-7214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:3c:b9:4f:c3:89:e5:d1:04:39:b9:fc:79:
                    1a:57:02:47:d6:80:d9:b0:aa:b2:c1:3a:b5:c6:fb:
                    3d:0d:54:dc:89:77:67:eb:29:6e:11:31:51:e9:0e:
                    1a:57:8b:f8:30:97:23:0a:fc:78:08:26:7e:37:db:
                    09:4d:40:c7:98:93:de:d9:41:f9:43:1b:5b:e0:5c:
                    f9:1d:bb:08:c6:b3:2f:d8:72:2b:41:9d:d0:9d:ed:
                    ba:65:5a:9e:f3:12:5e:cc:61:8d:d6:be:08:94:35:
                    30:75:38:2e:6f:f1:51:9d:8f:3b:44:03:81:27:77:
                    bc:67:61:73:0f:9e:5b:98:af:d0:65:50:f2:72:42:
                    b5:3d:31:5f:62:34:0a:67:69:6f:41:4c:be:89:1c:
                    a0:97:11:3a:9e:01:d3:06:fe:2d:eb:78:b7:00:e3:
                    13:fc:a8:09:d1:73:eb:69:29:15:c1:14:75:2a:36:
                    ed:28:fe:9a:2c:1c:9b:fe:c1:11:4f:2e:78:3b:6e:
                    55:0d:eb:fb:09:26:6a:a7:37:1b:dc:66:e6:f3:1e:
                    7e:45:fe:3d:ec:bf:1c:77:98:d2:66:59:07:5b:06:
                    07:ca:58:4f:63:4a:b0:ca:7f:27:1b:92:81:11:f8:
                    58:f4:5e:73:f6:45:0c:3e:c2:24:51:e2:cf:d1:42:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3D:A2:29:54:F0:10:AF:33:75:ED:35:72:79:10:74:6B:5B:C4:9D
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f4:7e:1a:e9:73:a5:db:92:18:ad:16:99:1c:4c:0a:1c:c9:
         3a:8e:39:b5:18:f2:bb:e0:b2:68:05:72:e5:87:4d:39:75:e0:
         b0:6e:5d:e1:93:2e:d0:f9:b9:31:9b:7c:64:2f:71:8e:27:aa:
         ae:8c:0e:17:06:c5:11:db:66:2f:25:d4:e8:c9:c1:40:6b:d8:
         4d:c9:7f:d2:36:f6:56:1c:95:93:d6:00:c1:24:0f:6d:90:9f:
         6f:f7:77:01:a6:4a:7e:49:3a:9f:5d:89:05:b5:a8:ae:30:f5:
         d0:68:f4:ca:6c:fd:62:4a:3a:27:57:d2:18:fe:d7:04:20:5a:
         fe:24:88:df:ea:01:3c:7e:be:60:c4:ca:b6:15:a2:7b:e9:ff:
         51:52:b3:70:c9:30:c5:9b:7f:22:bb:fc:0f:10:27:16:2b:b0:
         c4:b0:fe:f4:c1:c8:50:36:e8:a5:6e:7c:60:48:68:77:fe:2c:
         91:57:fe:8d:d0:b0:48:ad:d2:2b:87:4a:82:ea:56:90:95:a4:
         08:cd:eb:ac:c7:3f:f0:56:5c:0e:e6:39:2f:5b:39:39:50:df:
         c6:fb:4a:b7:c6:32:68:be:81:2c:1b:68:9c:09:17:e7:ff:0e:
         1f:68:b2:8d:d3:bb:77:c2:8d:df:98:40:04:86:61:04:eb:d8:
         32:4c:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:35 2025 by rpki-client