Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
File:                     ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json)
Hash identifier:          riVAnTQwmwhvGggo+HJq+IP4vADdib1TWgf/pkRCy5k=
Subject key identifier:   E3:C6:ED:DE:37:7D:03:B9:E0:F7:9A:5C:01:6A:1D:FE:C7:56:93:AB
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Certificate issuer:       /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
Manifest number:          72
Signing time:             Fri 25 Apr 2025 05:53:28 +0000
Manifest this update:     Fri 25 Apr 2025 05:53:27 +0000
Manifest next update:     Fri 02 May 2025 05:53:27 +0000
Files and hashes:         1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: WpSRrFDSjTGvKRvcJTqTc7zLYJo16Fby9ikAqJb3tIQ=)
                          2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
        Validity
            Not Before: Apr 25 05:53:27 2025 GMT
            Not After : May  2 05:53:27 2025 GMT
        Subject: CN=680b2358-1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:fe:92:9c:62:ce:e5:38:6c:db:c0:61:dd:
                    0a:b0:c2:39:a6:78:c6:97:dd:bb:55:30:8d:1f:c9:
                    4f:8a:e2:af:c5:53:52:2e:49:0b:ca:f2:36:3a:6b:
                    ed:eb:6b:d1:31:85:e9:07:c5:89:ac:a2:0d:df:86:
                    78:90:6b:36:7a:1d:97:d5:84:8c:75:23:ec:af:5a:
                    bb:67:c2:c2:95:b1:34:56:1b:9b:c0:b2:a5:f3:88:
                    88:eb:0e:95:2d:01:42:5e:14:20:5c:84:e6:d7:57:
                    03:80:44:90:06:08:2e:6e:f2:b9:f3:f4:86:be:7a:
                    bc:35:03:19:47:c0:04:96:e1:96:15:dd:54:04:b8:
                    6e:92:32:9a:7a:50:2d:f7:8c:1c:23:1f:c0:89:54:
                    46:f6:18:05:f6:53:88:52:3f:07:1a:fe:17:b1:45:
                    3a:5e:c7:2c:e4:6b:ca:7d:2e:81:f2:a8:ba:de:7e:
                    da:8d:e9:75:fe:7c:10:79:92:e3:82:f5:e0:36:d9:
                    4c:42:79:62:0b:ea:bc:ea:89:15:0e:8e:e2:a4:44:
                    ac:03:da:75:71:8b:2b:ab:35:e5:69:80:7c:4c:24:
                    28:84:f3:05:b8:d6:9f:28:d4:55:d6:89:0f:80:07:
                    25:fb:51:3e:16:91:f0:99:f5:d5:e1:b2:8b:20:db:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:ED:DE:37:7D:03:B9:E0:F7:9A:5C:01:6A:1D:FE:C7:56:93:AB
            X509v3 Authority Key Identifier:
                keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a4:a8:bf:04:dd:07:44:63:b1:8f:6e:e8:e1:15:05:78:26:
         21:4f:1e:83:a9:ff:fd:3d:da:0b:03:7b:19:d2:48:c6:14:67:
         4b:46:47:f2:2b:26:f7:ae:52:e9:3d:0f:26:b7:16:e4:20:5a:
         57:8a:71:ea:e1:a6:be:f8:96:3a:ea:54:6d:bb:5b:bb:6f:20:
         51:d4:17:66:e8:32:cc:c3:fe:a0:26:73:09:d9:53:73:ce:e4:
         97:d4:3e:10:15:4c:6a:50:5b:a3:d8:5a:6d:64:eb:72:03:f2:
         84:3c:19:dc:cd:2e:ac:59:fe:6d:c6:b9:68:5a:62:73:f3:14:
         35:87:6d:88:aa:b0:59:bf:eb:66:e5:81:11:86:70:e5:db:ea:
         a5:53:b1:49:a7:9e:d3:f2:82:df:c6:87:c8:03:fb:b5:42:e7:
         ff:91:eb:59:53:c7:fc:6e:11:9a:35:be:7e:cd:f0:58:c8:a5:
         20:ca:90:0b:83:49:97:ca:13:fa:f9:db:5b:f1:82:20:46:24:
         ca:e8:9d:8a:fe:60:3b:48:53:02:ce:49:a3:52:da:77:81:4b:
         4b:bb:f3:f9:72:c1:a2:61:54:fa:64:43:63:9f:95:0d:52:ea:
         14:7d:a7:f8:8c:eb:84:eb:f0:62:76:66:66:eb:d0:04:39:0a:
         60:e8:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:51 2025 by rpki-client