Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          JC6qIuyqxlkqBHTh1oMTsVSlwyRYzigF+gsFsFmYlLU=
Subject key identifier:   2F:8D:B5:E5:44:02:CA:AE:50:E5:BA:65:8A:9A:23:AE:74:B5:B8:56
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          ED
Signing time:             Fri 25 Apr 2025 04:23:41 +0000
Manifest this update:     Fri 25 Apr 2025 04:23:40 +0000
Manifest next update:     Fri 02 May 2025 04:23:40 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: zNxdNZSoD8Uk9S5lrz1QRe+2lWLjBt0jU8/mtI6YIWc=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: x9GRsqT1r4p+1r+DiQJUITI9RcFAyXCGhnRIsXkFNWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: Apr 25 04:23:40 2025 GMT
            Not After : May  2 04:23:40 2025 GMT
        Subject: CN=680b0e4c-ff34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:7e:5c:83:20:0f:4a:eb:9c:8c:4e:84:b9:
                    8c:cb:a3:34:ad:a8:68:f6:6c:09:c1:6d:9b:71:0f:
                    cd:cd:cc:31:55:0a:11:d3:b2:d3:bc:cc:25:e5:ff:
                    65:81:8d:b5:ca:aa:c4:d0:cc:3e:9f:44:29:4e:65:
                    85:a0:3c:25:ae:03:cd:df:1f:61:14:0d:fc:43:b5:
                    d0:ff:21:b6:8f:67:d3:ea:22:26:c3:02:de:1c:46:
                    a1:19:c2:d5:39:23:82:85:ee:5a:cd:67:42:a1:9d:
                    89:0d:a7:0a:85:d2:a2:41:ae:d1:5a:66:10:b8:4e:
                    4e:27:f7:88:f7:1d:e9:03:b9:7d:2c:cd:c1:a6:08:
                    13:2b:ec:71:6a:90:aa:02:53:fa:60:39:d2:5b:e2:
                    ae:fc:5c:cc:5c:35:06:a9:bf:80:74:2b:1e:0d:e7:
                    e2:5e:21:2d:de:ac:50:46:06:1b:25:55:cc:c7:21:
                    b6:18:c2:8f:e5:2c:e9:9b:08:0f:5d:47:93:fb:65:
                    dc:53:52:94:7a:d0:3f:7d:1a:37:0a:4e:0a:46:e3:
                    84:d3:9a:5c:10:ee:58:53:d8:58:e3:21:26:59:6b:
                    00:65:dc:b8:9a:90:2a:1e:74:40:59:fe:8b:c3:f3:
                    e9:01:d0:78:79:e1:d2:4d:49:41:30:4a:ef:12:26:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:B5:E5:44:02:CA:AE:50:E5:BA:65:8A:9A:23:AE:74:B5:B8:56
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:2e:70:dc:2d:bf:ac:89:8e:25:8b:ac:2e:a8:6a:57:10:
         94:8a:f3:e3:d3:f5:ca:c3:51:25:a6:db:28:e7:b5:8b:a5:5c:
         d9:c0:04:b7:b7:83:a1:c1:d1:e8:ff:19:e2:6e:db:27:b3:4f:
         81:68:5e:85:a9:4f:3b:4f:9a:93:95:7b:1f:8f:b0:05:bd:ee:
         c0:17:16:95:0c:9a:2d:79:6c:f8:9f:ed:8b:a0:26:af:a7:3a:
         86:30:3e:49:bb:58:ad:00:a4:3b:36:8f:ef:d3:39:04:75:14:
         7b:d3:92:70:89:c9:8e:8b:e1:e9:ba:c8:46:69:4c:3b:72:24:
         e5:7c:54:29:d6:20:91:88:03:1e:2b:fe:8c:e5:95:d4:4b:c2:
         25:59:6a:34:08:05:ed:26:9b:52:44:f7:03:29:d3:fd:12:65:
         14:17:5f:5c:77:20:0f:6e:8d:e3:b7:94:1a:d8:52:8a:17:b7:
         a3:6b:5f:d2:ed:20:11:1e:16:8b:c8:09:5c:a2:17:c5:df:ce:
         4d:d1:b7:89:4a:3b:ad:3f:4c:eb:2d:9e:8a:0f:11:73:49:bb:
         20:4e:4a:dd:ec:e6:ea:33:7b:78:d5:1b:62:98:9e:1b:5b:09:
         ba:de:d5:f1:a9:78:b4:24:26:c2:55:d1:8b:a4:b3:85:73:5b:
         39:da:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:49 2025 by rpki-client