Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
File:                     vW8yJwkswpQOGkXy4_RJHw3c26I.mft (raw, json)
Hash identifier:          4T8b5KTjMWvr6+Abkr+MLOsd8GHL/ySVfOULhVrd4VI=
Subject key identifier:   84:19:83:30:7C:7F:61:3F:DA:C2:97:B5:3D:EE:73:88:DA:DC:BB:33
Authority key identifier: BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
Certificate issuer:       /CN=A9130D77/serialNumber=BD6F3227092CC2940E1A45F2E3F4491F0DDCDBA2
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
Manifest number:          06E8
Signing time:             Fri 18 Apr 2025 22:02:46 +0000
Manifest this update:     Fri 18 Apr 2025 22:02:46 +0000
Manifest next update:     Fri 25 Apr 2025 22:02:46 +0000
Files and hashes:         1: vW8yJwkswpQOGkXy4_RJHw3c26I.crl (hash: TXvt1x022uhwENRWk7wbRlmN6uHkrkObST0SbsGjRHo=)
                          2: BE9EDA80454211EBAE62CF6BC4F9AE02.roa (hash: 4cQizV64zEfxikBzL4enMsj96t+ih4OlZFmlauHAA7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.crl
                          rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 22:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130D77, serialNumber=BD6F3227092CC2940E1A45F2E3F4491F0DDCDBA2
        Validity
            Not Before: Apr 18 22:02:46 2025 GMT
            Not After : Apr 25 22:02:46 2025 GMT
        Subject: CN=6802cc06-fceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:0b:b0:d2:70:83:5d:88:c7:15:93:d5:8e:
                    ff:3c:43:49:6a:d4:22:03:04:aa:df:d7:96:2c:70:
                    9a:86:ef:1b:85:1b:67:07:88:10:e2:7d:90:27:78:
                    55:bf:28:ab:2e:2b:c6:c3:5c:d7:36:93:e8:f0:fd:
                    62:ab:5a:ab:81:d2:77:e5:5c:3b:b7:d2:95:5d:7f:
                    92:81:d9:9d:48:07:c3:3b:ea:10:a3:9c:80:76:95:
                    9c:c1:ec:50:62:8c:d4:42:e2:ce:af:41:4a:7f:d8:
                    b9:84:eb:c0:79:84:a6:c0:a9:24:cb:09:a4:de:9b:
                    9b:4a:f7:c7:49:f4:45:dc:dc:51:a3:0f:58:8e:5f:
                    0d:0c:67:2c:ce:25:1a:ce:ec:3e:62:6e:dc:8c:72:
                    ae:4b:66:28:89:2e:f1:2f:95:cc:25:7e:9f:e3:e2:
                    31:5e:c2:17:55:84:79:c5:0c:8b:74:9a:3a:b1:3b:
                    c4:03:27:c9:2b:42:80:11:20:4c:af:93:c3:30:21:
                    3d:5b:e2:7e:32:88:2b:fd:ef:70:7f:0d:1a:58:3c:
                    15:bd:6b:60:a7:83:42:91:55:f7:48:cc:71:d2:b5:
                    27:88:e6:d9:4f:9a:ce:ab:fd:e8:7e:5a:ab:e8:a5:
                    18:a0:4c:58:e0:67:a8:27:0a:2b:97:13:d8:df:28:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:83:30:7C:7F:61:3F:DA:C2:97:B5:3D:EE:73:88:DA:DC:BB:33
            X509v3 Authority Key Identifier:
                keyid:BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:a7:1e:67:6a:7a:71:8b:cb:44:1d:d1:7b:df:9a:9b:cc:
         2a:86:2b:45:54:49:63:b5:d8:5c:3c:91:0d:c0:b0:fd:41:f8:
         a4:31:2e:1a:4f:3d:54:b2:51:e1:34:ff:fe:33:bb:ad:13:66:
         fa:53:05:cd:7d:6f:57:b9:6e:b3:d5:41:e8:d4:9e:3f:ad:57:
         46:6b:32:7f:9e:83:d2:cf:84:c0:ed:78:ce:eb:0f:cd:7e:bc:
         20:d9:3f:9e:4c:3d:bf:95:7f:ba:4f:8f:bd:58:c7:36:92:aa:
         a7:d7:9d:57:df:d8:f3:26:78:72:a7:35:fa:ed:7c:1b:4a:bd:
         2a:e8:f8:34:62:82:e5:fc:8f:7d:24:60:29:17:fa:8e:90:78:
         27:a9:fc:fd:67:6a:74:8d:12:29:33:d8:b4:e9:84:89:9a:f1:
         14:2a:0f:8a:ed:6d:3f:50:f1:5b:05:ed:40:c3:dd:20:d6:ea:
         30:ba:a7:8a:b7:ca:8c:15:1f:1e:f4:64:e5:69:d7:84:bd:0d:
         53:63:22:1b:86:3e:9e:ff:35:a9:f7:f2:a8:db:73:15:c4:c8:
         e7:42:5b:a1:76:04:cc:29:54:7a:a5:9c:2d:5c:b4:ca:84:92:
         84:4a:ff:54:56:3e:7f:dd:eb:3a:d4:e3:5d:86:cc:8d:89:59:
         be:d2:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:17:45 2025 by rpki-client