Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          NPoK/rQoY7pAclImv1x7uV5ah2wl1yRa9ZxazcCxMCg=
Subject key identifier:   05:38:DE:B3:E3:93:31:CB:EC:72:A7:DF:45:C7:B2:E0:DB:9A:C1:D1
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       34C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          3491
Signing time:             Fri 04 Apr 2025 15:22:06 +0000
Manifest this update:     Fri 04 Apr 2025 15:22:05 +0000
Manifest next update:     Fri 11 Apr 2025 15:22:05 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: O65P6lIPqyiwNTtoy3ukNdamgGrtcgbShwMmQN1UvjE=)
                          2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          3: 1DF2E9F2D3D011EFAF492E7BC4F9AE02.roa (hash: DdcwMrYgxms39/2lnopBgWj9ObBDY+6LEivm3sNs/Qs=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          5: 1EC858EED3D011EFAF492E7BC4F9AE02.roa (hash: euotB1lZTcoqtUUH2euaO83sgnon7ei5ZbzHhUhX+Ec=)
                          6: 1D7E458ED3D011EFAF492E7BC4F9AE02.roa (hash: cfuG3Q6SxCv5NEHrNvBKgcm8n0lxZoatwiMQRslcJQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13505 (0x34c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76
        Validity
            Not Before: Apr  4 15:22:05 2025 GMT
            Not After : Apr 11 15:22:05 2025 GMT
        Subject: CN=67eff91e-de0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:fb:84:c4:c5:a5:36:32:25:25:57:22:78:
                    76:5e:ab:29:6a:78:8e:9b:74:28:95:e4:b5:3e:9e:
                    22:a0:e9:18:71:dd:5c:cb:31:d7:28:81:33:7b:bb:
                    8e:bc:fc:13:c4:87:74:f2:4c:e8:41:ab:e3:b0:45:
                    e0:50:73:f1:9a:0e:cb:0c:78:d6:65:ea:cb:c3:ef:
                    b4:5a:3f:16:d3:22:0d:28:39:e7:a9:94:72:6e:6b:
                    ae:42:a3:d0:df:65:3f:6a:19:ee:12:40:d9:a4:83:
                    ab:b7:63:ec:79:10:60:1b:1b:56:61:e6:0f:ed:a5:
                    39:93:5d:e7:2b:32:1a:9a:86:a1:8b:d0:4e:76:2e:
                    d7:e2:58:ee:64:fc:a4:22:a5:ec:b5:c3:4c:e4:92:
                    10:38:c6:72:20:d9:63:89:72:b0:93:31:09:89:6a:
                    52:dd:57:0c:c1:4f:64:ad:4e:78:de:01:66:f2:b8:
                    bc:60:fe:6c:62:cb:01:8a:03:d1:8e:db:8c:4a:79:
                    b1:f7:9b:93:71:62:16:58:cb:db:c3:e1:97:0e:1d:
                    fe:3e:c8:21:4f:56:c4:76:c2:d2:7a:9f:34:f4:b4:
                    93:44:99:08:81:71:9e:39:53:3b:4b:09:0a:3f:20:
                    68:62:08:e9:fd:70:fa:b7:f1:3f:ef:89:10:9b:d8:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:DE:B3:E3:93:31:CB:EC:72:A7:DF:45:C7:B2:E0:DB:9A:C1:D1
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:a9:55:91:c4:46:10:ba:28:e6:84:0f:e1:56:c3:40:a4:
         83:03:3e:94:80:a3:f6:d0:cd:de:68:b4:d2:f0:a9:e6:09:9d:
         0a:18:bf:e1:29:c8:47:80:d3:5f:24:7c:e7:fa:44:13:03:d9:
         55:54:e9:cd:fa:13:35:d9:ce:06:9f:36:80:75:8e:83:d8:e9:
         64:93:8a:cd:f6:c0:c1:bc:16:41:50:f4:2f:a7:d6:0e:3d:d5:
         ba:98:9b:df:7d:81:d5:87:54:1d:ed:9b:2b:18:72:d4:d9:17:
         1a:4e:16:cf:a7:70:0b:aa:a4:53:f5:42:4b:64:dd:0a:93:17:
         e1:df:b7:a7:48:b7:52:62:27:1f:f4:e9:5c:e8:58:63:7d:f0:
         7d:c3:06:68:fa:a5:a0:ee:e1:9d:5e:4e:af:a7:b3:00:18:80:
         ec:52:9d:33:8e:c6:88:a0:41:8f:66:fc:41:41:b3:91:aa:55:
         b8:5e:5f:8c:fe:9d:fc:4f:46:14:46:d2:d6:d8:48:ac:05:6a:
         19:c8:02:ff:1a:15:2b:58:4f:aa:a0:71:e9:59:bd:52:64:39:
         7b:31:34:96:9c:c5:07:03:0f:1f:cc:60:ec:25:60:72:42:a1:
         e6:4a:94:1c:cc:49:d5:7c:24:ea:e7:c8:97:83:36:0a:56:89:
         32:31:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:21:52 2025 by rpki-client