Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          3POfJU7BChFRxHlML1bZlWUssmbp5kmETUzJTS8CBIM=
Subject key identifier:   E7:2D:AF:BA:60:D0:8F:C9:30:01:04:3F:04:E4:D5:81:A1:56:D9:B6
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          015F
Signing time:             Sun 13 Apr 2025 02:54:25 +0000
Manifest this update:     Sun 13 Apr 2025 02:54:25 +0000
Manifest next update:     Sun 20 Apr 2025 02:54:25 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: AQvpEaEH7StFZMmuA5zJcdbCrISYqS4MjvPE8CZflgc=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: 5chjhG+4S2xwB6V67WC6HZP171qygBdUyTwykp33M5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: Apr 13 02:54:25 2025 GMT
            Not After : Apr 20 02:54:25 2025 GMT
        Subject: CN=67fb2761-2e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:0b:ee:6e:35:ce:44:f9:1a:9a:30:b0:14:
                    a7:6c:4a:a4:59:3c:eb:7a:9a:23:49:80:f1:29:77:
                    07:1a:63:74:1c:13:c4:98:83:71:86:9d:91:7d:c4:
                    29:0f:e5:9b:c2:25:c0:4b:37:08:83:30:43:a2:9f:
                    95:36:f4:10:4a:62:1c:df:76:1f:7a:ee:78:71:79:
                    fc:d4:5a:94:1f:e5:f2:df:9b:6c:32:98:8e:38:b7:
                    e9:b7:86:32:da:59:b2:82:ae:2f:14:63:30:8b:d3:
                    c2:3b:b4:2a:12:d0:95:3c:af:51:9f:4d:b1:0c:d1:
                    52:28:48:c4:49:5f:35:11:a2:77:48:2b:67:97:33:
                    f4:4c:7e:60:61:4b:ea:c8:98:f4:18:4f:05:ca:04:
                    53:21:96:54:92:f8:55:b4:0d:b7:2e:c2:6f:63:61:
                    91:f8:25:23:81:be:39:cc:0e:bd:32:d6:d3:b3:dc:
                    fa:51:32:9e:d6:20:d2:b9:32:01:c0:41:60:d5:79:
                    b3:93:5e:56:18:51:38:58:69:9f:9a:a7:4d:63:67:
                    34:8e:0c:f6:ba:9b:3f:0b:54:f4:a4:91:d4:b4:14:
                    f9:25:ae:07:65:cd:cb:83:fc:85:b3:47:bc:41:f5:
                    47:5c:fa:6b:e5:3a:af:a1:21:f2:54:f7:68:91:32:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:AF:BA:60:D0:8F:C9:30:01:04:3F:04:E4:D5:81:A1:56:D9:B6
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:94:63:80:b7:11:0b:04:3f:99:64:de:3e:32:a7:06:79:83:
         8f:ae:a5:c7:37:c5:49:bb:b8:9b:90:3e:7e:dd:02:6a:92:b3:
         1f:52:86:73:f1:27:8d:97:19:fd:6e:7c:b0:bd:a0:96:f3:64:
         83:59:52:34:8f:8f:3f:ca:f8:2f:ae:bd:0c:35:7c:24:8c:2c:
         84:11:6e:4f:df:76:28:9c:68:c5:21:90:b8:44:08:e2:97:c2:
         ce:a7:8b:83:69:8d:cd:21:36:73:36:d8:9b:44:a3:9c:12:2b:
         31:da:2f:27:08:89:88:94:0b:89:4d:6b:94:30:5f:3b:53:6e:
         3e:96:31:ff:96:8e:39:ab:65:e7:60:4b:61:21:61:cd:cf:06:
         b7:d2:fc:cb:4a:74:74:3c:df:c8:15:9c:ae:18:cf:3c:7b:cc:
         e9:24:78:b3:81:05:b2:e8:79:32:4d:bb:ff:42:e7:4e:7b:d3:
         30:28:92:35:64:71:c6:56:68:60:13:d6:f6:7f:9d:e9:c7:b7:
         54:6d:b1:6a:c7:74:16:0a:06:dd:3c:22:03:10:86:ec:ff:81:
         ff:9b:eb:f9:12:74:4c:49:7c:b3:51:e5:0c:e6:2e:12:f9:16:
         4d:7d:71:02:97:c0:c5:5a:c5:0c:92:8d:43:a4:2f:4e:2d:c5:
         86:eb:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:45:18 2025 by rpki-client