Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          aHDCBXofIPw1Lz0w3pG6DKThiauAaKqiexeUiaJjVYk=
Subject key identifier:   02:87:04:AD:0F:3E:12:35:B0:C0:A3:28:50:A1:D7:57:E9:57:42:32
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       076E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          0764
Signing time:             Thu 24 Apr 2025 21:22:28 +0000
Manifest this update:     Thu 24 Apr 2025 21:22:27 +0000
Manifest next update:     Thu 01 May 2025 21:22:27 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: wtb7QfXV8I4XpjUP5XxGk80y9CjMSAMbWJXtntBim/c=)
                          2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: wBzKpGMt55FaGaSx04uSE6kMe0UA6A3OvBAA2044T84=)
                          3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: TqzDGovwhtTAPmIXBsAGxjfJ3nw0cxE3m4Rbi1VLpSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Apr 24 21:22:27 2025 GMT
            Not After : May  1 21:22:27 2025 GMT
        Subject: CN=680aab93-ca51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:a5:da:45:41:6f:23:91:25:c7:fb:83:c1:
                    c7:93:a4:5f:8e:e5:0a:da:95:a4:7f:e1:1d:b3:c8:
                    f7:b6:1b:32:ff:ae:1c:9e:4e:00:d2:a2:bc:f0:7e:
                    43:58:b1:ed:9c:79:e5:ec:78:44:0f:14:8c:51:b6:
                    c2:65:48:03:85:5a:18:88:dc:35:d3:25:b1:07:17:
                    4e:c2:7d:99:bc:58:a7:71:a6:f1:f4:f0:61:3c:b9:
                    ad:c5:ca:8e:3b:7d:3e:d5:3f:29:fc:91:29:38:c0:
                    ca:25:a8:61:37:a2:de:9e:8f:1c:dd:24:e7:ff:66:
                    38:67:65:ed:22:cd:53:79:3b:3c:a0:88:6c:e4:d7:
                    28:af:4f:e4:bc:4f:38:bb:29:0f:0e:e7:6a:b7:99:
                    ef:8c:b0:b8:64:5d:f2:f1:ea:cb:fd:7a:ce:9d:57:
                    8c:12:b6:83:33:e5:ca:ba:15:c8:23:d2:c4:0c:02:
                    b6:c1:12:07:24:0c:65:f5:7f:0e:26:38:9c:7e:45:
                    46:bb:0d:b3:64:77:21:5c:9c:b6:0c:1e:15:30:32:
                    1c:fc:db:71:19:06:0a:8e:38:3f:a8:69:88:ee:b1:
                    99:c2:91:d7:a4:5e:08:81:35:92:68:a8:96:bb:cc:
                    f1:9c:12:5a:fe:9e:86:e8:bd:71:a4:33:bb:01:4b:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:87:04:AD:0F:3E:12:35:B0:C0:A3:28:50:A1:D7:57:E9:57:42:32
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:c8:16:17:1a:b4:6f:16:29:4f:13:ff:f8:d5:c2:ad:52:
         51:1b:cb:e7:d3:83:1d:10:df:f4:3f:59:24:1f:60:2a:51:15:
         21:e7:c7:5b:b1:4f:3f:fb:53:fe:5e:33:af:27:03:15:67:90:
         f3:c0:77:f9:30:a1:d1:92:b3:4b:36:c3:e7:85:7c:1e:9f:a2:
         0e:7c:db:89:cb:d1:79:8b:02:21:5f:bd:09:4d:f2:2b:76:4b:
         20:44:59:bc:55:53:ae:0a:32:45:7e:89:7d:3e:27:bc:f2:56:
         e6:1c:da:eb:f5:ed:df:ee:c1:24:87:b9:38:c5:97:2e:51:fe:
         f1:6a:04:9f:8d:b0:91:26:f0:05:a9:fa:03:b9:be:e8:8a:8f:
         b3:8e:ab:53:ba:6e:30:70:6d:e7:93:b6:9a:56:05:f3:bb:5c:
         40:54:11:8e:2b:b4:c2:a6:ca:d3:f4:5f:54:9d:f9:1b:27:f5:
         1a:4d:85:2b:9d:6d:8b:87:ae:61:e3:b4:bf:93:9d:b8:0b:18:
         90:81:8d:3d:07:b0:bb:ae:67:f0:f1:14:e1:9a:04:e2:c4:9b:
         db:aa:83:28:e4:6a:cf:2f:29:a3:e7:42:09:6b:0e:d7:f0:ae:
         79:d6:40:22:93:73:56:ca:29:16:4f:03:a9:b4:ff:5c:a8:2a:
         ab:11:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:04:49 2025 by rpki-client