Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
File:                     YvelRApaUxvswWNB8-4xM5YTfo0.mft (raw, json)
Hash identifier:          sTAunq97ewMTVtYxita+Ri8oIde6m+Ur/zyyMhH662I=
Subject key identifier:   83:69:97:45:39:88:F8:44:72:39:2A:F5:03:E9:EE:49:B8:1B:C2:7D
Authority key identifier: 62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
Certificate issuer:       /CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
Manifest number:          4C
Signing time:             Fri 11 Apr 2025 06:33:31 +0000
Manifest this update:     Fri 11 Apr 2025 06:33:30 +0000
Manifest next update:     Fri 18 Apr 2025 06:33:30 +0000
Files and hashes:         1: YvelRApaUxvswWNB8-4xM5YTfo0.crl (hash: e6A5gUQAMCBBSTnb7HGnisfRNFDvlMyrx76PbP7EDcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl
                          rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 06:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127514, serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
        Validity
            Not Before: Apr 11 06:33:30 2025 GMT
            Not After : Apr 18 06:33:30 2025 GMT
        Subject: CN=67f8b7bb-a344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:c7:ab:cf:8b:d9:f9:5f:ad:a8:39:e3:3e:
                    f4:c7:fc:70:f9:44:59:64:13:75:f4:da:bd:26:80:
                    c8:55:84:32:9f:e6:d1:85:e3:de:c4:3c:49:7e:72:
                    be:70:e0:8a:e9:1e:a1:06:29:bb:5a:e1:38:f1:30:
                    f8:ce:4a:be:f8:1d:3e:2a:5e:e1:04:dd:f0:75:6a:
                    80:ee:eb:6f:f7:3c:4e:80:f1:92:78:a1:e6:81:62:
                    59:67:a1:97:87:26:92:6d:ac:b2:09:3d:65:6c:cc:
                    c0:f4:26:dc:ad:56:bc:80:8c:79:7a:85:b6:e9:59:
                    b6:ab:fd:23:ca:fb:60:62:53:af:5f:62:3d:95:f2:
                    69:b4:6c:7d:1a:ff:3f:55:35:55:84:40:3b:65:2f:
                    f0:05:3c:e1:04:31:bb:0b:d9:35:f7:05:49:4f:7b:
                    43:40:65:ae:f0:ee:97:3d:c7:3a:f9:26:9b:5b:a1:
                    a8:ee:7f:fc:dc:be:3f:94:6d:7c:73:f4:8b:fb:eb:
                    57:c1:d2:a4:0f:64:17:54:68:33:d4:bd:74:f2:24:
                    55:64:14:3a:36:61:d1:4f:0f:66:29:e0:95:20:ed:
                    ae:62:91:82:db:07:09:b0:15:5b:ea:66:75:01:96:
                    35:71:4e:b2:15:aa:1c:58:e9:d3:cf:85:d5:0f:86:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:97:45:39:88:F8:44:72:39:2A:F5:03:E9:EE:49:B8:1B:C2:7D
            X509v3 Authority Key Identifier:
                keyid:62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:86:c9:a6:c1:ad:46:93:ee:73:be:94:28:24:f9:01:e2:b4:
         94:bf:e9:9f:12:62:f4:c3:a3:2c:b4:00:a1:2b:b1:ed:b0:2c:
         8d:12:6f:4f:bc:ad:31:c5:c3:11:39:6c:d4:ef:39:3f:76:c2:
         65:60:50:e1:ec:66:d6:d4:db:cf:85:6c:68:f8:82:22:5e:fb:
         ae:43:8f:49:cf:b7:05:f5:2f:34:72:2e:bd:8a:a4:7e:53:25:
         94:bd:5d:e8:9d:2a:0b:e5:9e:02:a8:c9:c2:b1:c1:80:d8:90:
         f5:b8:78:2e:d6:cf:0c:e4:fe:9a:ac:63:8a:93:33:11:d8:9b:
         26:e7:f6:14:11:0c:88:ab:3a:88:42:2c:ef:77:ac:47:a5:a8:
         ab:24:45:fc:aa:7a:56:3c:20:3d:aa:0d:40:90:60:42:6a:67:
         ba:3d:66:ef:b6:4c:7e:22:82:01:ec:4b:ee:c1:c8:aa:ca:98:
         0a:19:be:0f:0d:b1:94:02:f1:85:3a:48:ba:41:91:8c:c9:99:
         63:bb:fb:ce:a6:45:dc:df:00:80:92:03:0b:2a:20:64:cd:d9:
         5f:68:1b:ad:a8:29:e0:0b:7f:8e:49:17:b4:f9:da:6c:eb:13:
         dc:63:85:54:ae:9d:3e:1c:3b:ef:ae:fd:ec:5b:06:58:65:a4:
         d1:6f:c5:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzUxNDExMC8GA1UEBRMoNjJGN0E1NDQwQTVBNTMxQkVDQzE2MzQxRjNFRTMxMzM5
NjEzN0U4RDAeFw0yNTA0MTEwNjMzMzBaFw0yNTA0MTgwNjMzMzBaMBgxFjAUBgNV
BAMTDTY3ZjhiN2JiLWEzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCshMerz4vZ+V+tqDnjPvTH/HD5RFlkE3X02r0mgMhVhDKf5tGF497EPEl+cr5w
4IrpHqEGKbta4TjxMPjOSr74HT4qXuEE3fB1aoDu62/3PE6A8ZJ4oeaBYllnoZeH
JpJtrLIJPWVszMD0JtytVryAjHl6hbbpWbar/SPK+2BiU69fYj2V8mm0bH0a/z9V
NVWEQDtlL/AFPOEEMbsL2TX3BUlPe0NAZa7w7pc9xzr5Jptboajuf/zcvj+UbXxz
9Iv761fB0qQPZBdUaDPUvXTyJFVkFDo2YdFPD2Yp4JUg7a5ikYLbBwmwFVvqZnUB
ljVxTrIVqhxY6dPPhdUPhqzBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg2mXRTmI
+ERyOSr1A+nuSbgbwn0wHwYDVR0jBBgwFoAUYvelRApaUxvswWNB8+4xM5YTfo0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NTE0LzZBQ0E3MTJFQThD
ODExRUY5RUMyNzMzREM0RjlBRTAyL1l2ZWxSQXBhVXh2c3dXTkI4LTR4TTVZVGZv
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWXZlbFJBcGFVeHZzd1dOQjgtNHhNNVlUZm8wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
NTE0LzZBQ0E3MTJFQThDODExRUY5RUMyNzMzREM0RjlBRTAyL1l2ZWxSQXBhVXh2
c3dXTkI4LTR4TTVZVGZvMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACKGyabBrUaT7nO+lCgk+QHitJS/6Z8SYvTDoyy0AKErse2wLI0Sb0+8
rTHFwxE5bNTvOT92wmVgUOHsZtbU28+FbGj4giJe+65Dj0nPtwX1LzRyLr2KpH5T
JZS9XeidKgvlngKoycKxwYDYkPW4eC7Wzwzk/pqsY4qTMxHYmybn9hQRDIirOohC
LO93rEelqKskRfyqelY8ID2qDUCQYEJqZ7o9Zu+2TH4iggHsS+7ByKrKmAoZvg8N
sZQC8YU6SLpBkYzJmWO7+86mRdzfAICSAwsqIGTN2V9oG62oKeALf45JF7T52mzr
E9xjhVSunT4cO++u/exbBlhlpNFvxRs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:31:39 2025 by rpki-client