Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          SMiiGCUW464dn8wYiQcVEXBYiAfiasPK8pGK4M75ajg=
Subject key identifier:   D6:DF:4D:95:C6:37:EA:66:34:43:87:AF:78:4C:4C:F1:57:2D:D3:EB
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          85
Signing time:             Fri 25 Apr 2025 05:36:07 +0000
Manifest this update:     Fri 25 Apr 2025 05:36:07 +0000
Manifest next update:     Fri 02 May 2025 05:36:07 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: TR6CZoO6ZjHxmGCBlT906iDnROd1cg8JDOIp0SC2WSA=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Apr 25 05:36:07 2025 GMT
            Not After : May  2 05:36:07 2025 GMT
        Subject: CN=680b1f47-774e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:6d:b2:88:78:ce:2c:25:93:8a:c4:03:ae:
                    a1:18:f7:7b:b4:69:41:71:59:4a:5b:69:14:a7:2b:
                    2d:42:c3:40:a7:61:3f:36:64:7b:d7:51:4e:41:de:
                    71:c0:ad:2a:27:1f:9d:c5:af:92:3d:4a:d7:62:8c:
                    42:71:dc:9c:1b:96:57:02:a4:ca:1b:5e:84:f0:97:
                    1d:78:4a:de:1a:cd:37:30:f2:2b:ee:48:04:51:59:
                    ee:15:82:57:73:25:f9:93:48:2f:30:1d:b5:c1:73:
                    24:c8:5e:5b:e8:a2:05:39:be:98:13:63:ba:8c:86:
                    2c:c2:a0:1d:6c:9f:56:e2:8f:31:b5:58:46:e4:44:
                    cb:9a:01:40:41:07:c3:f5:b6:91:0f:ea:c5:26:76:
                    66:6c:88:64:93:a5:6a:93:f2:3d:b2:92:56:70:39:
                    0c:73:76:28:73:a4:f5:65:01:3b:5d:67:b7:33:ae:
                    94:40:43:d2:3e:e3:ca:6b:eb:4d:89:00:a9:cf:22:
                    1c:41:00:e1:61:e1:3e:d8:35:c9:53:8f:d0:fa:57:
                    da:5f:70:49:a8:d7:6a:8c:f8:0e:c3:ee:4b:41:ea:
                    18:8d:60:cb:a6:d7:c9:4a:ff:c5:cb:f7:b5:c9:64:
                    92:c9:60:cb:d9:6d:2a:04:9b:41:a6:68:a1:7c:88:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:4D:95:C6:37:EA:66:34:43:87:AF:78:4C:4C:F1:57:2D:D3:EB
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:f7:c0:6e:9c:27:c0:0e:c5:31:60:19:b4:9b:3d:40:43:
         f9:a3:97:6b:fd:0e:c9:81:f7:ee:b6:a6:7f:52:3d:1a:08:5f:
         cc:a6:89:7b:19:1b:0a:69:d8:2b:0e:55:76:25:7d:75:af:60:
         12:d9:bf:91:59:22:9b:e7:88:0f:35:8c:d5:5b:a3:28:69:18:
         e7:24:bc:8d:5a:28:7e:67:4d:fa:88:1c:9f:fe:d7:da:c7:d4:
         b1:f2:6c:7a:d5:9e:52:5a:9a:eb:f4:00:78:f3:58:c4:e4:23:
         93:52:39:75:cf:29:6f:67:e3:7f:1c:90:4b:be:72:7e:7a:a0:
         f3:d5:ef:f5:a6:86:c7:64:fa:4b:f2:62:85:c3:29:20:1c:56:
         68:21:97:f5:5b:b1:a4:08:0c:40:a9:7f:9c:3e:90:f2:99:d1:
         76:96:c5:cb:9b:55:36:35:e4:12:23:b8:3c:cb:ad:62:41:4d:
         83:65:db:b5:6f:9f:96:18:7f:93:7b:59:09:d3:45:97:1d:48:
         1c:f2:14:74:75:fa:41:99:ff:1f:5e:8e:c9:4e:45:5f:16:8d:
         02:59:10:53:35:10:5e:29:b1:b1:b8:c9:f2:c8:c7:f8:c9:8d:
         4b:82:ff:19:a4:6e:d0:55:ec:1c:1a:d7:5a:c9:de:27:17:7d:
         9e:34:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:54 2025 by rpki-client