Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          PlRCkh6AlIKRm0AfRwVmi20oqY3G/iyJpMy2xx66dCs=
Subject key identifier:   41:CD:3B:DB:DC:DA:26:6D:CA:FB:8D:21:BF:61:5C:B3:8E:71:A2:06
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          0419
Signing time:             Wed 09 Apr 2025 00:07:34 +0000
Manifest this update:     Wed 09 Apr 2025 00:07:34 +0000
Manifest next update:     Wed 16 Apr 2025 00:07:34 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: t/Lz2SrPChkieYi0/vCPL0PcwgWhxORdjnFkoQgR1bM=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 00:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17
        Validity
            Not Before: Apr  9 00:07:34 2025 GMT
            Not After : Apr 16 00:07:34 2025 GMT
        Subject: CN=67f5ba46-33bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:40:53:2e:ca:3f:8e:a9:ed:39:e9:d9:95:
                    97:40:ed:36:83:53:21:81:93:68:1c:17:3d:4c:30:
                    d4:6e:2f:57:f4:98:a1:e5:99:99:4d:34:67:7e:03:
                    06:92:25:92:67:e0:55:16:0f:e9:f8:65:b3:83:ad:
                    d4:e3:46:9b:3a:86:88:74:72:01:33:cb:95:09:45:
                    21:dd:10:e5:4c:b0:bb:21:a2:ca:59:26:78:24:de:
                    92:dd:19:d5:31:b4:17:24:4c:65:39:0c:49:92:14:
                    35:9c:25:6d:ff:20:35:36:cb:bc:d5:0f:cc:c6:c5:
                    81:d2:ca:49:d4:36:8c:25:11:02:f0:9b:2a:63:a4:
                    e7:76:6b:8e:5d:2c:4f:9f:be:ed:f8:e8:d3:a5:7b:
                    4d:73:e6:9a:e6:17:b1:b7:d7:ab:88:1a:83:5c:b7:
                    62:d9:93:67:1a:fa:cc:3f:69:a1:ed:5a:15:1b:61:
                    54:b3:b8:28:53:b0:7e:51:86:06:15:4f:20:34:b4:
                    85:e2:2a:f0:f5:09:c6:23:48:00:3f:f5:46:06:f2:
                    fc:de:96:a9:ac:e1:67:dd:e1:d8:05:4d:58:96:09:
                    5e:88:93:ac:c8:fd:92:69:6c:81:e3:60:f3:fd:0a:
                    2b:0c:ac:2f:66:26:3e:ff:ea:d3:6a:18:1d:b2:28:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:3B:DB:DC:DA:26:6D:CA:FB:8D:21:BF:61:5C:B3:8E:71:A2:06
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:10:19:c9:f4:0f:0c:24:33:e7:24:9e:5c:2b:91:b7:14:2f:
         19:86:57:87:c1:0a:d8:fb:5a:c2:73:f9:5a:ca:cc:d5:c0:1d:
         3c:e1:35:10:e1:8e:72:31:60:45:17:b8:14:7d:cb:f0:cb:a9:
         10:90:e2:f9:8f:c3:0b:39:83:5b:b9:ef:cd:fd:c9:fb:b5:5b:
         44:63:0e:6c:85:a9:f1:d0:aa:a8:a9:af:e6:73:bc:20:a6:bc:
         8f:cb:81:e5:92:cd:8c:9a:0e:16:c5:ff:66:6b:e7:42:2e:e4:
         c0:61:2a:78:08:3b:0e:d5:0d:8c:40:70:4c:88:e0:8f:be:41:
         cd:66:34:6a:1d:53:5e:60:10:cf:58:5a:be:37:12:b6:d6:1d:
         e6:22:ff:73:f3:0b:2f:cf:a9:c2:c4:50:42:77:4e:81:19:19:
         84:fd:1e:8f:c1:4b:49:ea:8b:b6:60:a8:f0:26:16:28:83:3f:
         d8:85:12:c9:44:a1:5c:7e:05:e3:3b:31:6e:90:ab:38:51:06:
         b2:c3:09:ae:c3:e9:a5:91:d6:75:e2:0e:60:55:e1:39:81:db:
         9d:10:df:ea:2d:12:40:36:c2:61:e6:f2:b9:8c:7f:dd:15:05:
         53:68:4e:60:1b:1d:f6:6f:d8:13:71:41:36:7d:40:54:c0:81:
         56:39:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:27:43 2025 by rpki-client