Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
File:                     sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json)
Hash identifier:          LMSO7wIFSDzgsUrXz9tErhVIOOc/GPFSyUzHOb6ZJIQ=
Subject key identifier:   9C:8F:17:36:89:31:07:35:77:E6:E6:B2:B4:3F:29:B8:8D:3A:AB:40
Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD
Certificate issuer:       /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
Manifest number:          F0
Signing time:             Thu 03 Apr 2025 04:31:37 +0000
Manifest this update:     Thu 03 Apr 2025 04:31:37 +0000
Manifest next update:     Thu 10 Apr 2025 04:31:36 +0000
Files and hashes:         1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: s7ofzuaqoXNFKSoqd3AZmKUNJAvBjquTYzIGoMwyHvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl
                          rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB5A
        Validity
            Not Before: Apr  3 04:31:37 2025 GMT
            Not After : Apr 10 04:31:36 2025 GMT
        Subject: CN=67ee0f29-21fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:35:8f:52:f0:e2:e8:3e:80:7c:e5:e4:29:
                    d8:93:fb:e7:d8:e5:16:64:aa:bb:f4:a9:18:d8:a6:
                    3d:86:ea:8c:b7:ab:a8:d7:d4:6a:75:19:5c:57:b0:
                    d0:c2:6e:56:60:1c:7f:ba:82:4a:d6:fd:3f:a8:9b:
                    66:67:42:d5:b1:a4:52:f4:c0:50:27:3d:16:49:55:
                    b3:69:be:77:11:66:aa:57:b5:9a:97:72:be:36:d1:
                    70:ab:db:4b:11:b5:69:78:18:9e:e5:2c:d7:67:22:
                    a0:00:dd:0e:d0:60:bc:29:b2:6c:97:2c:ca:3e:20:
                    be:74:42:be:1f:22:7a:6d:24:19:c9:99:f6:70:05:
                    64:66:84:08:51:8d:2d:ff:d9:47:e0:9e:b5:24:0d:
                    1f:20:f8:04:cc:88:51:31:7f:3a:50:fc:88:ee:dc:
                    54:10:f1:ec:cf:84:73:5e:d3:91:5e:c9:82:a7:70:
                    85:23:10:ff:ad:22:52:0d:da:f9:79:e4:bf:b8:60:
                    34:f4:a1:db:b0:9e:40:cf:0b:cf:22:c7:a9:86:8c:
                    9e:00:92:31:3d:7d:22:83:df:7d:86:34:bf:75:8d:
                    be:73:5d:7b:fe:4c:87:3f:13:2d:c6:b1:3e:4a:a7:
                    f8:83:06:60:1f:33:08:48:85:ea:4b:cb:54:d6:0c:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:17:36:89:31:07:35:77:E6:E6:B2:B4:3F:29:B8:8D:3A:AB:40
            X509v3 Authority Key Identifier:
                keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:82:fb:39:27:0d:b8:16:9a:cf:3b:10:71:7c:4e:41:d3:83:
         50:e6:ac:64:da:23:a2:70:37:53:7f:9c:d5:e7:e8:4d:c4:6d:
         b0:c2:d3:5c:c6:08:e8:f7:28:4e:d0:21:9d:7c:b6:93:01:a6:
         68:ae:84:3c:0d:4d:97:a8:94:61:1f:e3:ed:c2:df:4a:f4:9a:
         f3:95:01:67:14:e7:e6:52:ce:88:63:a8:85:5a:90:ae:ce:d4:
         1e:a6:51:6f:e7:94:3e:14:0e:93:fb:d4:a5:71:a9:63:a1:02:
         74:69:e2:d3:1b:df:c8:35:c9:01:2d:37:7c:94:89:20:63:0a:
         a1:f2:c4:d4:e5:8f:3e:e5:16:79:2e:25:65:03:63:07:91:18:
         0c:72:28:a5:d3:29:7a:0c:75:60:9c:fc:dd:3a:8c:34:cd:c0:
         59:05:6b:90:9d:11:50:fc:2d:01:1c:90:cc:c0:91:2f:33:2b:
         2d:39:6b:95:e8:bd:16:97:e3:54:af:6f:bd:d1:5e:5d:3a:12:
         d1:83:01:34:90:51:80:31:0f:ff:cf:16:c8:b7:f2:2c:43:f6:
         6d:46:07:b0:08:b6:09:ea:da:f3:47:bb:84:14:df:b5:e3:82:
         c0:82:2b:50:61:1f:42:e1:96:d4:5e:82:64:58:be:14:d1:85:
         a9:c3:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:30 2025 by rpki-client