Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          vpspxY1QmwSlcDV5OwYDYJt4jLZFyMSjs4CrIxnWtlI=
Subject key identifier:   D2:AE:7B:D8:44:CD:74:AA:F3:05:FE:13:D7:C8:07:32:0D:1E:40:C8
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          B6
Signing time:             Fri 25 Apr 2025 05:04:59 +0000
Manifest this update:     Fri 25 Apr 2025 05:04:58 +0000
Manifest next update:     Fri 02 May 2025 05:04:58 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: ICItBWyXrWiV5f7UO3z8QU1tFCITzEeJjanCkowbcPw=)
                          2: CD802A9A1BE511EFBC630883C4F9AE02.roa (hash: de4vNWdwOETkj9mhz2ImDDVKUmbG+1KIQgOwEqbfGeE=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: 2ZvR8MHi7NyojTKS1eQiZr7s7ixPWXKlZzJWOILwSsE=)
                          4: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: wXFw1WCYOzN+C3+tE/wlw+YhUZwlxJ82iP5vfZ3R23g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Apr 25 05:04:58 2025 GMT
            Not After : May  2 05:04:58 2025 GMT
        Subject: CN=680b17fb-6a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:58:b0:1c:8c:3b:01:55:f9:e1:76:78:44:
                    39:53:27:c9:af:9b:1d:88:ff:88:cd:93:24:68:0f:
                    4d:ed:c9:bf:72:2c:b7:76:2c:70:b9:f0:7a:4e:d5:
                    87:ff:b4:d5:2a:2f:0c:14:54:37:a2:99:81:d9:a9:
                    7a:da:e5:8c:a5:c1:62:42:b0:c6:14:67:70:5f:71:
                    c4:a6:f5:66:85:47:8d:f3:f3:d3:12:28:b3:f8:23:
                    0d:e0:90:ab:5e:cd:bb:c0:ad:dd:87:4b:4d:59:be:
                    8e:76:9b:25:f1:d5:1c:90:0c:cd:51:14:1b:3c:a8:
                    5e:bb:d9:57:78:4a:a5:fd:d8:a0:f9:9a:76:a2:f6:
                    28:f2:49:e4:6d:2f:77:13:d2:1c:ee:17:be:6d:eb:
                    2b:01:f0:0c:e0:77:5a:04:f5:df:c0:bd:a8:d8:68:
                    fa:d3:41:84:62:df:ea:d2:d9:f7:1e:61:85:b5:39:
                    d3:0f:f6:5e:e4:f3:ec:4c:c9:42:7f:c8:19:71:4e:
                    68:aa:cb:fb:45:eb:04:7a:3c:d4:35:91:92:4f:eb:
                    0f:59:93:20:13:a6:65:14:f8:ee:31:25:31:ef:1d:
                    80:9d:7e:ce:2a:fd:dc:99:b3:39:9a:5b:c4:24:fc:
                    a9:2a:38:71:04:d6:76:d2:ea:71:a5:83:b8:1e:30:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:7B:D8:44:CD:74:AA:F3:05:FE:13:D7:C8:07:32:0D:1E:40:C8
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:23:c7:e1:dc:44:ff:15:e3:69:4b:01:bb:bc:72:92:8b:
         e6:86:46:8b:2e:7d:28:be:1e:9d:15:ed:8b:29:4a:b0:60:76:
         08:a6:39:a6:48:19:d2:f1:c5:98:76:51:5d:16:d1:38:cf:c1:
         4b:b7:19:2d:63:6d:cf:6e:e5:c2:f2:b3:04:52:5e:ed:ca:8e:
         01:a4:de:c6:a3:47:cc:57:df:da:93:03:db:a2:5d:6b:d0:c8:
         0a:79:04:61:37:9e:f2:46:2b:78:a9:eb:cd:7e:50:63:38:23:
         34:b1:ca:71:2d:c0:dd:73:a1:2b:25:34:d7:e4:3c:19:d6:b5:
         25:86:15:aa:69:e6:63:e3:b9:ea:19:b2:91:de:64:b9:9e:54:
         9d:1c:ca:93:23:38:9c:f7:6a:3a:68:da:a6:f3:f8:93:ad:8c:
         7e:ca:8f:e3:5a:14:e8:77:5f:78:a5:3c:41:6e:fd:e6:00:54:
         f7:17:7e:05:c6:21:32:60:d5:03:af:1e:59:06:7d:b3:d5:a6:
         69:70:e0:5e:9d:d9:8c:82:c8:a2:75:58:1c:bf:c9:aa:f9:9d:
         39:ea:16:c6:9c:52:ca:df:4e:b8:0e:aa:43:6f:7f:06:71:1b:
         0b:03:05:e1:11:a1:98:4d:60:e3:e6:94:f2:21:be:cb:ec:43:
         2c:d3:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:37 2025 by rpki-client