Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
File:                     mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft (raw, json)
Hash identifier:          GFdo4+xJspjqsbNujifIsuneMG4TGsoBWWT17MQuMS4=
Subject key identifier:   9C:25:05:36:0F:31:69:0B:4F:34:E3:A6:5D:66:BB:24:9D:1F:6E:8D
Authority key identifier: 9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24
Certificate issuer:       /CN=A916E675/serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
Manifest number:          02B6
Signing time:             Fri 25 Apr 2025 01:12:35 +0000
Manifest this update:     Fri 25 Apr 2025 01:12:34 +0000
Manifest next update:     Fri 02 May 2025 01:12:34 +0000
Files and hashes:         1: mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl (hash: 18tADWLJW0rQ55mLw07ccqSvn7dEagyt+HJaMRM93V8=)
                          2: B9FB709CED5C11EC8CD1DC69C4F9AE02.roa (hash: G6qIRkaMdDrjHylqcTcQT45f6+DVdeLTlIZ/GvsEFwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E675, serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24
        Validity
            Not Before: Apr 25 01:12:34 2025 GMT
            Not After : May  2 01:12:34 2025 GMT
        Subject: CN=680ae182-407e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:80:8d:87:58:c6:f1:61:79:6c:0e:cf:05:
                    c1:32:47:5b:4f:e5:95:42:5a:f8:eb:30:5b:bf:a3:
                    4e:aa:79:a5:07:3c:67:5d:7e:05:0b:f3:3d:c7:3f:
                    48:1d:8d:4e:dc:fa:41:bc:5c:a0:dc:25:b4:de:1b:
                    e5:46:63:f5:22:fe:7c:17:bc:21:d1:ae:fb:aa:df:
                    84:f1:a2:fb:13:39:5c:ce:96:97:a3:2c:5f:44:3a:
                    fb:85:88:2f:19:5f:72:be:eb:51:c2:2a:72:71:16:
                    e6:bf:96:60:52:f6:f9:c8:8f:b4:db:43:fa:cd:a2:
                    8b:85:ea:9e:37:50:eb:7b:a9:0a:db:f8:08:6d:b6:
                    70:24:22:38:7c:7b:13:b7:4a:70:c6:78:b4:f6:dc:
                    10:02:a5:90:62:96:05:df:6a:81:3d:2f:45:4c:5b:
                    12:7e:7f:70:f4:da:cf:b6:ce:29:fd:ed:8d:70:d7:
                    dc:e9:40:48:16:1e:a2:cd:9c:5f:a4:1f:52:a3:5f:
                    ac:ff:82:b0:9b:01:c6:3c:fd:62:20:aa:60:74:78:
                    f8:5e:ba:02:9a:80:e1:a5:cf:2e:bb:df:62:37:51:
                    64:8d:90:ee:1d:a0:b3:3c:9b:ab:c7:fd:1d:db:df:
                    7b:36:51:7d:d5:49:b8:fa:d8:a2:68:d8:6d:98:4f:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:05:36:0F:31:69:0B:4F:34:E3:A6:5D:66:BB:24:9D:1F:6E:8D
            X509v3 Authority Key Identifier:
                keyid:9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:09:1f:6a:63:d4:40:60:29:81:7b:99:45:c9:9e:4c:1e:42:
         eb:2d:82:5d:a5:ac:5d:46:5e:ad:24:ee:a1:b4:d8:b9:28:cb:
         9a:0a:52:0c:82:c7:f8:0c:75:0b:b2:08:fd:b1:f7:70:9c:39:
         1d:26:00:6b:71:e8:09:4f:da:4c:56:b7:c8:f7:e6:dd:e5:28:
         24:3a:81:0c:47:69:ea:03:a4:1a:6d:a6:3b:2b:68:4b:0c:c8:
         d0:ac:87:ee:26:5e:43:b5:42:8a:7c:ad:d7:14:94:3b:4e:7f:
         0f:3a:34:31:c9:22:24:14:21:a3:23:8b:eb:65:47:62:dc:f8:
         75:7e:0f:52:9f:be:e0:03:b5:d5:50:66:c4:d1:78:df:9f:9c:
         4e:68:8a:8b:2b:b4:33:7d:65:ee:d8:56:97:7c:e5:e1:92:a5:
         7e:ab:56:db:7b:07:fe:13:36:e7:b6:2e:14:ed:db:83:a4:6d:
         bc:b5:ca:74:77:c7:c4:82:8b:14:a3:c5:6b:2c:a2:a7:4c:f6:
         05:bf:3c:2b:89:3e:45:4b:4b:7f:13:3b:e4:63:f5:0b:69:dd:
         21:ee:3e:c0:a3:6d:09:8f:bf:28:17:9f:47:70:1f:73:a7:0d:
         72:bc:5e:cf:18:69:15:16:6c:2e:80:f0:36:5e:6e:b6:91:a1:
         03:74:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:48 2025 by rpki-client