Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          A7GI1hLVqql37DJ1jn5SIMNfbcFuIda6AGrGMfEgZrM=
Subject key identifier:   3F:C0:0E:03:9A:E2:99:17:CB:86:48:83:A4:5F:BF:29:D8:71:85:C3
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0463
Signing time:             Thu 24 Apr 2025 23:56:09 +0000
Manifest this update:     Thu 24 Apr 2025 23:56:08 +0000
Manifest next update:     Thu 01 May 2025 23:56:08 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: 49Y5alWWeenmKiyp2eaeIxBTNh1Ow+qNwr7eUt/vIxc=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Apr 24 23:56:08 2025 GMT
            Not After : May  1 23:56:08 2025 GMT
        Subject: CN=680acf98-8b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:4b:22:82:66:ca:4f:8f:4f:16:ad:93:eb:
                    fa:81:00:7c:e5:43:71:b1:31:4a:74:08:2e:24:d2:
                    82:63:ae:ba:24:b5:ab:ee:64:49:39:24:f0:73:c2:
                    6e:2b:75:84:58:86:25:ce:c4:ec:cf:48:2a:e5:91:
                    ec:38:a8:56:82:32:af:3f:ef:a2:ee:3e:ee:3f:71:
                    72:2e:c9:60:5b:27:91:ed:0c:32:5b:f9:b5:f2:a4:
                    1a:9f:a8:59:9c:ce:d6:16:92:0d:cf:c4:5d:de:c3:
                    13:e5:ee:f5:ca:b0:4c:7c:ba:cf:c6:ee:79:e7:d0:
                    88:9e:ad:47:eb:a1:8e:82:b2:79:1a:11:08:0e:e9:
                    a8:6a:5a:83:9d:6a:1b:68:8b:0f:bb:a1:1c:ff:7a:
                    0a:5b:be:5b:5d:57:9b:87:a2:7c:c1:bd:4a:8b:1d:
                    af:7f:fe:47:f3:8f:09:2e:8b:f4:2a:be:fb:bb:ac:
                    4a:22:63:f6:31:85:ed:ae:1f:22:ab:c6:5c:39:9c:
                    8a:ee:91:a2:ce:ef:da:f6:12:41:24:67:23:a9:c6:
                    64:f3:74:32:16:c8:8c:e0:0b:f7:3a:d8:15:47:f4:
                    f7:fb:8c:6e:6d:c9:ce:37:da:90:8f:a9:01:bf:53:
                    f3:6a:e6:4b:18:de:b2:e4:05:41:ff:20:f5:84:2c:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:0E:03:9A:E2:99:17:CB:86:48:83:A4:5F:BF:29:D8:71:85:C3
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:4a:ce:43:5b:1a:87:9d:6b:76:8a:11:a6:20:1a:d3:36:
         68:91:9d:3b:53:be:d2:35:88:73:05:02:2b:52:bc:4d:49:ce:
         50:42:60:7b:f7:6a:0b:33:12:8f:4a:6d:b2:40:25:8d:ae:50:
         57:db:1d:b3:f8:9a:df:b3:0f:75:df:c9:95:f4:26:95:06:56:
         36:bb:9f:53:e5:79:8b:7c:13:bd:91:c1:e5:d7:79:b3:46:b1:
         7b:f6:c5:48:f2:f7:dc:89:52:84:1a:22:df:54:d7:15:f1:ad:
         c6:6f:1d:f3:a1:b1:b1:fe:d4:65:17:9a:b3:e2:2e:27:1f:c8:
         25:b3:a4:6a:81:aa:3c:43:cb:58:eb:41:5d:83:74:4a:ba:81:
         f1:af:53:a3:6e:d3:10:b6:d0:81:46:ff:16:09:71:db:2e:32:
         64:56:74:d6:8e:a0:9d:8c:5a:5d:ce:cb:6d:e5:06:db:a2:2d:
         9a:46:73:d4:8c:09:a0:f0:e7:60:ad:02:d6:58:c9:3e:5e:9d:
         15:a7:9e:05:88:84:9a:86:08:cf:dc:6d:23:c7:0c:c1:29:bc:
         8b:0d:b0:b6:bc:62:6c:ce:cd:6b:6d:e1:13:ad:97:20:15:b2:
         cb:eb:1f:ab:8c:49:3f:36:b7:61:0a:fe:34:ba:d9:e9:42:79:
         11:07:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:45 2025 by rpki-client