Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
File:                     C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json)
Hash identifier:          b0W4wr8ty/A9HPKQ1p5aoR1yQw8YJT44/qo8y720W9E=
Subject key identifier:   8E:67:61:57:1C:79:D9:62:1D:D5:E7:1A:4A:3A:E9:4F:3F:66:45:F0
Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
Certificate issuer:       /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Certificate serial:       0713
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
Manifest number:          0708
Signing time:             Wed 02 Apr 2025 21:56:00 +0000
Manifest this update:     Wed 02 Apr 2025 21:55:59 +0000
Manifest next update:     Wed 09 Apr 2025 21:55:59 +0000
Files and hashes:         1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: WM42QYboE0C1CW5dQMKhc/dueByvevZVsK6uHYbreug=)
                          2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: 9esbbGrIEshCzgVAuh0Un9LyG8pst2lzVqe8bmApqT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl
                          rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123193
        Validity
            Not Before: Apr  2 21:55:59 2025 GMT
            Not After : Apr  9 21:55:59 2025 GMT
        Subject: CN=67edb26f-dc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:dc:71:c9:71:c3:9c:a2:f0:ff:fb:52:ab:
                    56:ae:f2:6f:d5:3b:6a:70:75:42:fd:22:fe:a3:20:
                    8e:5b:9e:84:ab:43:47:2a:f3:6e:37:14:df:a4:18:
                    19:c6:f4:7e:4b:18:c8:25:f9:e9:cb:c5:9f:68:a2:
                    81:89:d7:9f:52:b6:36:af:f9:6c:6d:44:d4:d1:e4:
                    4d:34:c0:64:82:54:c9:62:ba:8d:ae:80:37:88:9c:
                    f9:e3:22:1d:f2:bc:90:60:ad:8d:37:66:f5:09:4f:
                    d9:5b:67:65:46:e7:70:44:89:57:4a:b0:b6:22:71:
                    7d:14:0f:72:a7:82:46:05:c7:a4:5f:87:5d:42:7b:
                    b2:a7:ea:4f:ac:60:15:9d:05:b1:b9:63:21:6a:f2:
                    e1:53:ea:ae:9f:98:40:24:f8:f2:c8:53:ad:91:f3:
                    fb:fe:c8:12:36:58:f0:14:cf:9f:0a:58:cf:bc:ac:
                    d8:b3:ce:5f:c6:e4:e8:20:c5:d0:1e:83:f0:61:c3:
                    07:85:5d:68:50:79:e1:d8:87:e0:e9:6d:83:fc:f3:
                    06:9a:b5:4d:7c:f5:7b:e5:12:5b:a1:f3:f9:46:42:
                    c0:ed:48:97:92:84:22:51:8b:ae:6e:e5:00:a2:00:
                    fa:bb:3a:d0:a2:bb:5b:87:fe:04:53:96:fd:df:0c:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:67:61:57:1C:79:D9:62:1D:D5:E7:1A:4A:3A:E9:4F:3F:66:45:F0
            X509v3 Authority Key Identifier:
                keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:e0:5e:0a:24:8b:86:8a:49:59:fd:2c:dc:7f:b2:0c:bd:
         bc:d5:55:83:c9:fd:eb:9f:e5:55:49:67:15:cb:9b:2f:c1:e3:
         71:50:d9:ca:e2:e7:d4:51:6f:dd:13:ae:1a:ee:42:0e:1b:70:
         af:ee:47:ec:28:f3:87:10:e0:3b:24:ad:29:8e:fa:6d:84:0b:
         56:4d:85:a3:26:ce:d0:ec:ad:94:90:06:66:8d:ab:a1:80:15:
         61:6b:f6:69:0c:58:b1:0e:ec:a1:a1:db:59:e9:dd:f7:eb:6d:
         b0:13:fc:c3:a2:0c:f8:7c:88:bc:e7:b5:66:3f:cf:81:87:57:
         23:d2:75:e6:84:d7:63:c9:12:8f:93:78:6c:d8:ac:c4:79:16:
         59:c9:eb:b7:e2:f3:b6:27:9f:28:8d:f1:89:df:96:7a:70:92:
         8e:73:f6:3a:bb:f3:65:a4:9e:90:e9:6d:f4:77:65:61:83:93:
         d6:c0:38:3b:35:98:44:9c:22:cf:f3:aa:91:76:83:8e:5b:98:
         25:b7:05:de:32:28:87:7a:3e:78:3d:e2:20:cc:00:fa:06:aa:
         8c:aa:22:15:35:e8:91:8f:53:c5:3a:4e:80:39:79:25:76:20:
         ac:4a:c8:e8:9b:bc:da:44:42:91:f4:2a:fa:7a:23:c7:f7:89:
         48:d6:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:12 2025 by rpki-client