Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          5gxjlCuuEttpVw8tOAMutt0hL3NHIa6iGxfytPqOEOk=
Subject key identifier:   65:8F:83:79:9B:EE:9F:78:66:1A:3A:95:C5:22:6C:B0:F1:4B:99:9E
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0C71
Signing time:             Fri 04 Apr 2025 18:25:48 +0000
Manifest this update:     Fri 04 Apr 2025 18:25:48 +0000
Manifest next update:     Fri 11 Apr 2025 18:25:48 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: YcxcpONQu2iosNi2WTleHtdyC64frueR6MtvvhxfRgQ=)
                          2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: DUbgXXzqpapSxP1SYmetX0pcnJaOWrBmkI9YsNCICSA=)
                          3: 6C061360105911F08BC6692CC4F9AE02.roa (hash: fxnKQH+hbVYix2vpYNlA4ryJmehEVWmxPALPrY6fkNI=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646
        Validity
            Not Before: Apr  4 18:25:48 2025 GMT
            Not After : Apr 11 18:25:48 2025 GMT
        Subject: CN=67f0242c-b5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:df:6e:f9:49:b1:33:96:4c:72:19:cd:a0:
                    f1:bd:45:ce:80:dd:a3:a1:fd:6d:b4:11:91:7c:1c:
                    a3:1c:5a:c7:b1:eb:54:0c:d8:6a:e4:98:f5:18:85:
                    cf:33:4d:91:bc:e5:84:82:48:0e:de:46:53:2d:ff:
                    5f:04:64:1d:c6:7f:3e:3b:be:12:df:83:6e:99:67:
                    b7:2d:ac:1a:ca:fd:fc:51:20:39:1e:8f:26:6c:a1:
                    0c:17:4f:a6:9b:4b:5f:69:0a:3b:5d:99:90:74:60:
                    d5:c6:40:06:60:d1:3f:9b:b5:f8:44:86:ad:7b:d5:
                    c2:05:fd:69:3f:7a:b3:37:9e:eb:12:50:91:90:d8:
                    32:97:04:da:1f:de:b1:6f:b3:38:15:bc:06:17:2d:
                    dd:c6:fa:71:dd:76:aa:76:06:97:4f:94:04:dd:7a:
                    93:74:75:31:3b:b3:d5:18:77:ec:c1:27:40:42:5f:
                    76:ea:6e:3c:ac:48:c2:d7:1e:54:a4:a8:fd:f5:e5:
                    e9:e1:1b:5c:a2:fa:e3:7d:62:3c:6e:6f:e7:88:e2:
                    1a:b9:c7:a7:0d:d9:0d:c5:95:93:48:8c:bc:23:11:
                    6f:e1:11:8f:86:b1:61:a8:b6:ab:18:53:39:36:6c:
                    43:81:f7:aa:4c:b0:c1:d3:60:23:ab:63:56:59:e0:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:83:79:9B:EE:9F:78:66:1A:3A:95:C5:22:6C:B0:F1:4B:99:9E
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:4d:a5:99:cd:44:db:49:dc:4c:52:ef:d5:2a:34:d3:2c:
         e0:d1:8a:35:20:30:5f:82:d9:6f:07:72:50:1d:40:e9:93:ac:
         e6:00:16:ea:23:f8:3d:54:81:ac:86:c1:84:71:fa:9d:63:88:
         42:b7:4b:f5:ff:9b:2d:15:2b:f4:11:22:df:dc:fc:b3:b4:7b:
         8c:c7:81:a0:26:46:c5:e5:c6:62:55:43:53:c3:04:63:04:13:
         db:fe:53:68:29:76:cd:07:72:29:e7:e3:92:fb:4b:d5:61:3f:
         e1:05:3d:90:5c:a5:58:31:10:1f:78:de:d7:d0:af:3f:e1:11:
         34:ab:67:e1:7b:a6:65:5b:96:a6:be:d9:e5:78:7d:2c:94:19:
         49:d8:50:cc:9e:ab:d2:2b:47:e1:a4:dd:ad:54:6d:35:02:0c:
         b7:e7:41:86:e5:6b:3d:63:4a:d2:3a:08:f1:90:94:d3:e8:35:
         48:3f:f4:46:08:34:ad:95:c4:e7:67:44:06:1a:b4:e0:5f:5b:
         53:e0:7b:76:16:89:13:fb:1a:0c:c6:5f:20:92:1b:61:89:eb:
         56:1a:3a:5e:b3:10:43:68:d7:67:4b:3e:6f:53:16:22:8d:12:
         b0:63:96:89:16:1c:0e:df:c7:39:a1:d4:b9:68:d3:05:c1:4f:
         6d:9f:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:11:24 2025 by rpki-client