Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File:                     etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier:          PCJ7AOWatfUK01FumJA8+SWxrvU6ktc/OBQl/f8Dj5k=
Subject key identifier:   06:BE:A3:C3:A8:61:0F:85:D4:39:E7:7A:04:BF:63:7F:86:9E:86:9D
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number:          07A1
Signing time:             Wed 02 Apr 2025 21:12:31 +0000
Manifest this update:     Wed 02 Apr 2025 21:12:30 +0000
Manifest next update:     Wed 09 Apr 2025 21:12:30 +0000
Files and hashes:         1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: MpKS/2L4s1wNgvFjBCN3Dev6UueHD3Q7OBsJ1qfBdqc=)
                          2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: +WSibnx37gSo4JTMELKjvSg5tqCiJEiitdnIM0rgO/E=)
                          3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: UHXDMWaMF4j4QvTDDnj7fpF8e54veeD4dGxcEoD4ALo=)
                          4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: a8B15QiOGju+otFzMCk+02tM5sltnBBLqlft6HyPU0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912
        Validity
            Not Before: Apr  2 21:12:30 2025 GMT
            Not After : Apr  9 21:12:30 2025 GMT
        Subject: CN=67eda83e-efef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:7d:b4:8e:53:ae:bc:d1:39:ba:17:23:3e:
                    a8:47:26:ab:92:1b:34:c8:9a:e2:62:f9:0f:f6:fc:
                    28:06:b3:db:63:2c:63:94:2a:b6:b7:3f:cf:47:87:
                    a7:07:1a:79:22:04:88:95:12:70:1d:74:8f:69:59:
                    c4:21:7f:88:d2:16:61:6f:05:70:16:d3:a4:e9:7a:
                    18:c2:e2:93:33:cf:0b:fa:13:6f:da:b0:d6:75:cf:
                    d6:69:34:b1:8f:e3:4a:1a:38:e2:72:fa:9d:96:0c:
                    fa:e4:34:81:4c:94:44:bd:19:89:d9:83:8b:79:57:
                    18:2f:4f:95:21:b8:1f:fa:ca:a6:54:3c:da:25:22:
                    ca:88:63:75:66:15:d8:05:fb:4e:5c:29:99:55:6c:
                    ae:4e:e0:a5:69:d5:54:97:f5:60:17:8a:85:49:f7:
                    6b:c8:e5:98:f3:71:f4:78:49:bf:e4:71:ca:d2:57:
                    8a:46:cc:97:9f:d7:e0:46:63:f1:3f:d2:4f:1d:cf:
                    47:a9:27:df:b0:c2:ad:c2:33:0f:c8:ad:0c:cc:a2:
                    18:11:9b:c9:f7:d4:d6:b9:62:87:8a:50:f3:49:12:
                    2a:6c:1b:27:41:6a:e3:e0:25:48:d1:ea:d1:64:fb:
                    78:a8:d8:a6:82:49:d8:0e:34:b8:90:e4:72:65:33:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BE:A3:C3:A8:61:0F:85:D4:39:E7:7A:04:BF:63:7F:86:9E:86:9D
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:72:79:54:82:8c:f0:f4:94:31:a3:be:1c:02:19:db:54:
         d4:77:56:76:b2:a4:32:50:36:a1:9e:12:b2:5e:f1:d8:fd:67:
         63:dd:c7:c7:37:ae:e6:61:f0:6f:54:53:14:8f:22:28:f7:21:
         3e:0c:8a:59:e6:a3:31:b2:8f:0f:f0:45:6e:19:80:e9:31:f9:
         5a:b2:5a:38:4a:50:36:23:1d:55:9b:7e:82:59:f9:f1:39:2d:
         f3:71:ee:b6:8b:3f:58:af:78:27:26:b9:35:a1:54:28:90:af:
         b5:68:cf:3a:8a:8e:83:5b:9e:3d:4c:2d:26:49:6a:a1:ee:e0:
         7f:8e:ef:1a:a2:ff:90:41:e6:46:2d:ad:0e:c2:b6:77:7c:f6:
         f1:82:aa:72:db:42:5b:ea:8f:25:d4:b5:bf:1b:db:4d:dc:ba:
         56:fe:70:b0:90:53:ec:9a:c9:80:d0:45:e7:ff:41:35:e4:27:
         31:e7:49:aa:ce:be:e0:40:61:fa:3a:b7:01:85:52:72:ee:52:
         fc:96:b9:f2:2b:1f:4e:17:58:1a:b8:1d:cd:c6:f1:a9:c9:0f:
         bc:d1:a9:14:34:2c:46:e4:a4:05:fd:d4:5f:28:b2:95:bd:a1:
         0f:65:d8:3d:d3:a7:fb:2a:ce:b0:f4:46:41:4b:b7:db:b1:c9:
         f8:d4:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:03 2025 by rpki-client