Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          y/drB6Pd0oqX0IkB04q8sDdpVwH3nz3GIaNiiE3Kjd0=
Subject key identifier:   52:2B:25:4F:95:E5:A3:62:4B:BC:2F:EA:6A:75:32:3E:CE:7C:FE:19
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          074D
Signing time:             Thu 24 Apr 2025 21:26:08 +0000
Manifest this update:     Thu 24 Apr 2025 21:26:08 +0000
Manifest next update:     Thu 01 May 2025 21:26:08 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: sVeLpnWonSvlkcQpujnsrWSh+MXs+AS29hGMx4e0p2k=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Apr 24 21:26:08 2025 GMT
            Not After : May  1 21:26:08 2025 GMT
        Subject: CN=680aac70-7baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:21:9f:ad:35:ab:35:63:24:0f:fa:ea:ac:
                    45:ae:7a:db:e4:af:76:9e:78:fa:a3:82:b9:64:10:
                    dd:be:55:2d:e8:64:38:a8:00:eb:55:74:a8:a2:91:
                    34:49:1f:4e:be:f4:f9:ea:39:6a:42:03:da:be:1d:
                    a4:35:5b:73:02:fa:b1:cb:c0:ae:82:d6:1a:fa:75:
                    2c:e5:17:bd:42:e1:56:43:30:d0:b7:11:a9:c9:4d:
                    3c:a6:6d:20:9f:80:5e:81:a0:b5:23:4c:3d:b3:5b:
                    89:40:f8:f2:20:1b:ba:59:a3:2a:f3:66:42:bd:74:
                    b4:3f:bd:9e:a6:78:71:7d:9d:93:ba:c4:fc:71:84:
                    ba:6c:33:09:79:6d:55:6a:fc:1a:13:30:08:21:0e:
                    c8:ea:b3:6c:ed:07:bf:ad:fa:a4:7f:5d:b3:8b:21:
                    f0:5d:eb:0f:06:71:7e:d1:eb:03:01:ce:09:76:6a:
                    03:03:38:9e:84:5d:82:f0:fb:57:2f:58:f2:40:33:
                    02:b9:55:2a:cf:0e:19:fa:d4:c1:19:90:86:3a:90:
                    a1:83:23:8e:dc:c4:d7:ba:0e:48:33:84:14:fa:16:
                    31:05:a9:6b:e4:aa:b6:51:54:bf:8c:1f:a7:42:f6:
                    2a:c7:25:f2:2e:ca:eb:8b:67:dd:3a:f2:9e:7c:fe:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2B:25:4F:95:E5:A3:62:4B:BC:2F:EA:6A:75:32:3E:CE:7C:FE:19
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:ee:3c:9e:f0:2f:ad:38:4f:44:87:dd:b8:7c:9b:5e:71:
         3a:3c:bc:93:c3:5c:be:76:63:28:a1:dd:24:03:dc:26:10:e9:
         8e:9f:63:a7:27:cc:26:a4:85:92:5f:34:49:e0:d2:fe:10:a8:
         53:0d:8a:24:5b:f9:82:91:c1:fa:4a:1e:aa:17:7d:b2:6b:64:
         98:a8:7c:22:bb:08:67:94:0c:6a:54:8c:bf:73:9b:e9:18:18:
         db:ab:a7:88:f6:c8:de:d4:39:63:1a:cf:b9:2e:79:90:1a:19:
         97:1f:10:81:62:96:84:6c:d8:a7:c8:1d:6d:c9:bb:10:9b:37:
         08:ca:15:ab:37:ed:76:fd:8c:f4:09:38:a1:5c:14:52:7f:99:
         ba:cf:b0:37:33:c0:1b:69:58:45:4c:3c:66:05:59:ad:c7:e3:
         97:e5:2e:fd:c1:82:72:0a:a1:67:5a:d9:c2:92:da:04:67:0b:
         3f:3b:cf:cc:d2:a4:fa:90:b8:fa:37:d0:8a:32:91:91:c3:cb:
         01:29:5e:c7:bf:ee:59:eb:aa:ce:78:87:b1:d1:ef:77:2b:de:
         7f:2c:e6:7d:17:12:24:6f:b7:9b:fe:4d:1f:93:f3:f0:43:a1:
         71:f4:d9:55:a8:88:62:81:1e:b7:df:52:e2:92:aa:a7:34:b7:
         99:d9:37:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF
MEJCRkJBMEYwHhcNMjUwNDI0MjEyNjA4WhcNMjUwNTAxMjEyNjA4WjAYMRYwFAYD
VQQDEw02ODBhYWM3MC03YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoEhn601qzVjJA/66qxFrnrb5K92nnj6o4K5ZBDdvlUt6GQ4qADrVXSoopE0
SR9OvvT56jlqQgPavh2kNVtzAvqxy8CugtYa+nUs5Re9QuFWQzDQtxGpyU08pm0g
n4BegaC1I0w9s1uJQPjyIBu6WaMq82ZCvXS0P72epnhxfZ2TusT8cYS6bDMJeW1V
avwaEzAIIQ7I6rNs7Qe/rfqkf12ziyHwXesPBnF+0esDAc4JdmoDAziehF2C8PtX
L1jyQDMCuVUqzw4Z+tTBGZCGOpChgyOO3MTXug5IM4QU+hYxBalr5Kq2UVS/jB+n
QvYqxyXyLsrri2fdOvKefP7jgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIrJU+V
5aNiS7wv6mp1Mj7OfP4ZMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD
RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14
WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZsO48nvAvrThPRIfduHybXnE6PLyTw1y+dmMood0kA9wmEOmOn2On
J8wmpIWSXzRJ4NL+EKhTDYokW/mCkcH6Sh6qF32ya2SYqHwiuwhnlAxqVIy/c5vp
GBjbq6eI9sje1DljGs+5LnmQGhmXHxCBYpaEbNinyB1tybsQmzcIyhWrN+12/Yz0
CTihXBRSf5m6z7A3M8AbaVhFTDxmBVmtx+OX5S79wYJyCqFnWtnCktoEZws/O8/M
0qT6kLj6N9CKMpGRw8sBKV7Hv+5Z66rOeIex0e93K95/LOZ9FxIkb7eb/k0fk/Pw
Q6Fx9NlVqIhigR6331LikqqnNLeZ2Tde
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:18 2025 by rpki-client