Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
File:                     76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json)
Hash identifier:          EkAQcAcqzjCKuNhi59Fzhzt5uxlP+VHhFNrjruRLOr0=
Subject key identifier:   2F:49:4E:D1:9A:93:CD:EB:40:35:88:E6:AE:53:B4:BE:A5:AD:23:25
Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
Certificate issuer:       /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Certificate serial:       0852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
Manifest number:          084B
Signing time:             Wed 02 Apr 2025 20:46:10 +0000
Manifest this update:     Wed 02 Apr 2025 20:46:10 +0000
Manifest next update:     Wed 09 Apr 2025 20:46:10 +0000
Files and hashes:         1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: 6E0oSZhTKBYXmWWut64h2fTs3TcRFmKpnMWcTebGlQE=)
                          2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: xKyisYvUwmSw7aw37XhK5iMVyY2+rghDJ4s9FMBG+wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 20:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A921
        Validity
            Not Before: Apr  2 20:46:10 2025 GMT
            Not After : Apr  9 20:46:10 2025 GMT
        Subject: CN=67eda212-9544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:a4:2d:29:41:ee:33:c9:37:5b:19:41:62:
                    6d:00:e2:0e:35:7d:5b:2b:47:bc:94:4a:aa:8f:4b:
                    2a:d0:3c:d6:fe:9c:21:9c:a3:cd:61:9c:68:4d:69:
                    de:04:49:f0:06:ef:be:97:98:2d:5c:4c:02:c5:10:
                    2f:9b:45:be:37:26:20:aa:f4:08:9b:a2:43:ef:95:
                    98:b8:a4:46:6b:84:74:0b:b7:d0:75:5a:f1:7c:e2:
                    a7:e8:0c:c6:8f:23:1e:76:1c:73:34:01:ac:79:34:
                    bd:0d:a6:0f:6a:82:98:95:b7:0e:d1:01:e6:07:89:
                    2c:ad:51:c9:b8:77:67:70:9e:bf:22:84:90:13:b3:
                    1a:1b:d1:ce:de:b8:e0:72:87:91:90:a5:ae:c7:c4:
                    90:b4:f3:ec:b3:3b:35:99:bd:fe:90:59:25:15:7a:
                    35:61:f3:55:b0:4f:58:f2:23:a0:da:cf:d2:df:a5:
                    0f:dd:dd:aa:70:51:91:66:88:f8:0e:d9:51:39:4c:
                    73:49:2c:de:b1:2b:fd:ca:b8:01:8f:d4:15:42:f5:
                    83:5a:8a:9b:f4:d0:82:40:95:6f:27:b0:e2:82:b4:
                    52:f0:2d:ce:a6:62:e5:fe:33:68:78:c4:21:05:21:
                    14:47:47:80:80:b2:26:98:77:16:a2:da:15:e6:78:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:4E:D1:9A:93:CD:EB:40:35:88:E6:AE:53:B4:BE:A5:AD:23:25
            X509v3 Authority Key Identifier:
                keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:65:28:df:c4:a6:61:24:95:58:5b:35:35:fc:77:99:e4:a6:
         b5:4f:cf:6f:60:97:db:67:34:89:cb:6b:27:bc:2a:c0:8a:8b:
         c1:72:29:0c:3d:3b:43:47:bd:b9:d1:26:d7:29:61:cc:a5:0a:
         45:82:89:53:b8:52:7e:6d:35:78:98:02:5a:c5:7a:9f:91:91:
         1d:df:be:32:bb:89:db:7f:c3:be:45:d2:47:a2:f3:86:04:b1:
         16:a7:77:01:a6:0c:1f:83:a7:24:d3:4d:1b:83:f8:89:eb:40:
         97:e1:6c:8d:0b:87:c2:89:d1:b0:2e:34:4d:dc:94:bf:50:49:
         e1:41:6f:fd:ac:a6:af:98:fd:e1:c9:8f:b1:50:6b:dc:a6:9b:
         57:38:89:40:3d:8e:cf:11:cc:e5:9f:63:87:74:2f:94:a4:53:
         d2:9c:b9:5a:57:52:90:9a:19:28:aa:34:2d:06:48:21:fd:65:
         c4:e2:6d:29:90:cb:7e:bc:eb:d7:ac:26:f7:60:ee:3d:65:b2:
         7b:05:8e:9d:7e:ec:72:7b:87:97:c6:86:08:64:c8:9b:70:1a:
         6f:82:c4:0f:64:05:17:77:3a:81:b7:cc:6c:56:9f:55:bb:49:
         e5:6c:ef:68:ce:14:43:2a:3f:47:09:b7:0c:d1:95:fe:68:71:
         9d:95:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:14 2025 by rpki-client