Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          fEfy3DzgYv4e/vW4AW9b4YJ89nb8Vh2iEoT2bPHkEn0=
Subject key identifier:   7F:F7:36:4B:79:FC:8B:4D:40:C1:B9:AD:37:05:91:BC:BF:98:04:FD
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          075E
Signing time:             Thu 24 Apr 2025 21:24:22 +0000
Manifest this update:     Thu 24 Apr 2025 21:24:21 +0000
Manifest next update:     Thu 01 May 2025 21:24:21 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: qDxJee3d/2QFw3o3T4BVSjL8MWlsE8hl6AX1IyRmoMs=)
                          2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: t6Ge3iMSSEepvK+Lc1zDSD/DIuC0nX4IWGHRYnQrK6k=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: nsBI5aAcb8LJy1OAbfgsAYYYF1PowIy7VZxwvaix1FI=)
                          4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: hVGpRvhX5Ju9BqJwvLilMW82myywekIMm4EdIHToKkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Apr 24 21:24:21 2025 GMT
            Not After : May  1 21:24:21 2025 GMT
        Subject: CN=680aac05-b943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:bb:6d:77:b9:cd:01:c3:5d:a4:60:7b:55:
                    30:1e:a0:db:0d:09:0b:e6:84:d7:61:ef:bf:17:5c:
                    52:4d:55:82:9e:92:00:1a:d6:80:18:6d:f0:11:31:
                    97:c7:41:75:4e:13:4b:a3:0b:7d:e8:51:91:22:68:
                    5a:69:94:a2:ee:c3:62:ff:dc:c7:e3:0d:e3:6c:75:
                    dc:86:73:98:ec:07:32:a2:a8:c6:cc:b2:13:93:3f:
                    9e:52:ba:8e:a8:7f:f4:60:f2:b4:a0:4d:b3:c0:6f:
                    ca:4c:95:9a:23:7f:96:11:65:c9:2b:3a:41:9b:5b:
                    e5:86:11:0d:41:b1:33:c9:fb:4f:ab:6a:c1:7e:28:
                    1b:3f:ab:6e:7f:08:a5:17:00:25:a1:af:6d:0c:2f:
                    b6:1b:e9:40:c1:24:b9:8f:d1:a0:a5:f0:4c:ac:0b:
                    2f:fe:c9:a8:19:3b:b5:17:b5:a6:c4:aa:f5:96:f6:
                    c2:67:83:08:ff:9e:d7:4f:be:a3:0c:a5:44:a7:61:
                    53:07:48:24:46:e9:32:57:73:2b:c1:52:67:90:e5:
                    be:b8:68:28:6b:d1:39:58:fc:1a:4e:ad:7b:52:61:
                    24:2c:18:3c:fd:ae:0f:3f:3a:01:42:58:99:26:13:
                    ac:26:fc:2a:a2:23:f7:53:44:d5:96:25:3b:eb:67:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:36:4B:79:FC:8B:4D:40:C1:B9:AD:37:05:91:BC:BF:98:04:FD
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:4a:4e:ad:db:ed:08:d6:52:60:b0:c4:a9:3d:53:ba:be:
         99:64:cd:bf:87:e1:05:51:89:da:c2:88:39:a9:b1:0f:e2:f6:
         31:bf:74:ce:15:6d:25:5f:66:19:a5:b2:eb:be:0e:64:4e:12:
         ba:46:ac:f6:67:75:c0:b5:0d:79:6e:c1:66:09:0c:37:5b:59:
         5d:55:b7:0e:25:f8:7e:cf:07:62:c5:bf:79:14:c1:25:50:fe:
         dc:2e:1e:a0:57:75:68:eb:d2:38:5e:e5:3e:1f:1e:e2:cc:9e:
         a7:1b:ec:89:f2:05:22:e6:9f:2a:ef:59:ad:aa:bf:b7:7d:fe:
         ac:6b:9d:50:88:1f:d4:a8:0c:df:27:6e:f6:85:5d:86:e3:08:
         7b:bc:c3:7a:e6:a1:1d:51:54:91:17:a4:b0:9d:a8:66:22:31:
         38:df:cd:ef:44:e5:45:28:ab:08:9a:6c:9a:f4:9a:1a:03:e4:
         2e:c6:9e:10:f3:0f:66:11:83:e8:f1:d4:26:c6:7c:3d:2e:e0:
         62:a8:1a:2e:d5:f7:e2:6a:aa:53:44:e8:c5:16:4f:52:8d:7b:
         42:33:a4:0f:d0:8b:16:dd:48:d4:32:70:fe:43:25:69:9f:1e:
         c3:f5:52:6e:6a:40:12:9d:54:45:9d:f4:3e:40:d3:20:cb:c0:
         2c:38:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:43:57 2025 by rpki-client