Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File:                     sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier:          j4U4RoSnNzv5XifqmXn1LZK/3zrnm2/fT3Jr5lFe8ms=
Subject key identifier:   6C:7B:34:91:90:B4:6C:07:39:3A:E7:7D:9E:1C:AA:B6:55:74:00:31
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0AFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number:          0AF2
Signing time:             Thu 24 Apr 2025 19:16:57 +0000
Manifest this update:     Thu 24 Apr 2025 19:16:56 +0000
Manifest next update:     Thu 01 May 2025 19:16:56 +0000
Files and hashes:         1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: 0pdkFhUiHOH3dKXvfossr62XyGAFpekZ9yF+h0c0jSw=)
                          2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: rXbrZfof91yb/Hm6bgo20zlM+XGL7dx/BaljKZMiBHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2814 (0xafe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: Apr 24 19:16:56 2025 GMT
            Not After : May  1 19:16:56 2025 GMT
        Subject: CN=680a8e29-2a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:49:b4:ad:b0:93:09:49:77:9b:7f:be:03:
                    e2:a1:b0:93:ab:62:38:d8:47:4d:11:f4:42:e5:0e:
                    bc:9d:4e:08:02:c1:32:fe:af:f2:5f:45:0b:27:0f:
                    e2:74:af:3b:53:ee:ad:46:fb:32:8e:23:69:33:09:
                    70:bb:ec:0f:a7:b3:ee:45:22:ca:48:62:14:f8:e2:
                    f5:a7:b6:08:f1:fe:2b:69:16:b6:67:62:08:25:c8:
                    ca:f0:29:14:39:34:83:7a:bd:4e:f4:9b:24:21:8d:
                    ca:05:6a:6d:d2:5c:05:ee:29:83:38:db:6e:35:0e:
                    82:48:41:0d:89:04:09:d3:23:4f:6a:6d:13:e8:10:
                    fe:68:61:3e:73:a2:0a:25:a4:dc:db:fe:77:8d:7f:
                    77:cd:4e:38:80:57:36:53:b2:6f:6e:7e:76:51:27:
                    0e:d9:14:69:1a:ed:3a:c2:bd:ee:4e:17:59:15:03:
                    97:d7:d1:6b:8f:cf:e0:35:f2:f4:d3:5d:d7:e0:72:
                    7f:e0:e3:3f:a2:a1:02:2c:be:6c:95:34:02:d8:6d:
                    21:b2:1b:82:d4:b8:f9:ea:7e:12:14:d1:94:c4:b5:
                    ed:5e:0f:73:58:60:20:f1:7d:ef:9c:fa:1a:b1:f9:
                    e1:7e:3e:ab:39:f4:da:b9:36:e6:0a:43:7f:5f:73:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:34:91:90:B4:6C:07:39:3A:E7:7D:9E:1C:AA:B6:55:74:00:31
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:78:79:a0:f4:20:7e:fd:9f:a7:3d:8d:21:0c:fb:90:55:02:
         2f:ab:54:16:8f:46:02:a4:cd:68:93:20:7d:c1:3e:cb:b4:52:
         fe:93:27:9a:8f:1a:12:c4:5b:be:ea:b7:cc:66:15:1d:6f:59:
         86:eb:e1:c5:b9:14:2b:73:a4:ff:de:d0:27:ed:30:46:1d:eb:
         29:fa:33:c0:ba:5b:cb:d5:63:17:ee:fa:f1:85:bd:e8:f5:38:
         fa:70:24:50:cf:a9:02:cb:11:a2:cd:54:ff:95:2b:06:92:76:
         c9:b4:e8:b2:16:af:c2:5e:a9:21:c3:45:ed:35:29:b4:02:0b:
         eb:83:86:dc:51:c6:af:34:ed:2c:16:34:1c:a9:96:3a:06:be:
         21:26:4e:e2:ee:a8:b6:2d:47:45:a7:39:44:60:c9:12:37:c0:
         5a:6a:33:c2:e5:a6:8c:fc:36:5c:b9:59:87:0c:8e:c4:6e:91:
         20:88:61:83:06:d7:05:b6:6a:d7:73:c2:30:b6:05:87:94:5f:
         cd:54:4c:56:b4:10:c6:c6:b2:9e:6e:f5:0c:3c:4a:67:1c:f9:
         f0:23:0b:5d:5e:8f:22:b7:dd:64:c0:ac:1d:a6:ed:b3:dd:39:
         66:2a:07:fa:d2:97:a7:e3:92:8d:b3:a7:7b:f3:6a:df:9e:0d:
         5d:88:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:02 2025 by rpki-client