Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          nl7J3e2bU/ZxhragH/vKZEIY0vquHYVHVAqHbhTu6ks=
Subject key identifier:   80:8C:45:1F:B0:42:61:F6:F3:27:8D:CC:CF:C4:1A:B4:D7:9E:B7:01
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          0775
Signing time:             Thu 10 Apr 2025 21:23:51 +0000
Manifest this update:     Thu 10 Apr 2025 21:23:50 +0000
Manifest next update:     Thu 17 Apr 2025 21:23:50 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: qsDyA4DhMbetSVTc2ivOwYS8e5oAnGPS4vDXthkg8hw=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: bCzW+BaRUSMEs6ksafkZ0M05EIAyYKkAVk7wGw2XL8U=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: hlQlo3zj4oD4t9qHVL26IJYGsUxTLxyLxxcgSQsOSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 21:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Apr 10 21:23:50 2025 GMT
            Not After : Apr 17 21:23:50 2025 GMT
        Subject: CN=67f836e7-b231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:8c:ad:3e:3d:01:6c:96:81:74:90:68:8b:
                    22:d7:1b:f4:33:75:0d:d8:ec:47:46:2b:78:1d:c3:
                    22:52:6f:ec:2d:78:c8:93:05:0b:ed:d3:ea:4b:e4:
                    ec:d0:1a:35:c2:37:53:52:68:ac:e8:19:c0:04:80:
                    2e:7b:dd:1f:48:11:f0:75:1a:45:b7:3e:7a:e6:7b:
                    d9:82:2f:bc:ce:1c:76:7f:25:15:c8:2b:62:83:a7:
                    da:2f:02:14:73:5e:49:89:3d:43:85:c4:37:e8:b2:
                    88:eb:88:c4:e7:c3:5f:69:83:73:cc:39:0f:4b:20:
                    08:dc:88:1f:43:57:ea:ad:e7:41:51:1d:22:75:43:
                    ba:82:0b:02:8a:5d:4a:87:ec:51:f7:19:69:57:82:
                    6f:a1:9f:9d:ff:f0:29:fa:6a:d3:5d:99:dc:8c:b9:
                    5e:52:56:a4:57:50:9e:16:94:ef:c2:16:bf:9a:9c:
                    bf:8f:5d:66:e2:00:66:01:91:b1:cf:85:48:db:a8:
                    35:14:33:8a:3f:ce:99:21:7e:0f:31:0f:8a:9b:8d:
                    3a:75:f4:bc:85:40:b8:5f:dc:f2:17:89:df:d7:16:
                    6f:d4:1d:85:04:88:78:30:6b:1d:fd:61:e1:fc:c2:
                    3d:82:5f:89:7d:49:84:e6:26:44:3f:f1:a9:cc:e2:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:45:1F:B0:42:61:F6:F3:27:8D:CC:CF:C4:1A:B4:D7:9E:B7:01
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:96:68:50:51:92:eb:9e:d4:78:d5:e0:5b:88:78:25:46:
         28:3d:d7:22:c1:2d:b5:f2:1e:eb:85:da:e5:41:61:7f:9a:08:
         1b:36:b6:df:25:d7:b2:25:d4:bc:3f:4c:dc:7c:f3:7e:b7:56:
         5e:5f:89:3c:35:b2:86:c7:de:98:fd:2e:ae:f0:08:f9:cf:f0:
         34:a3:a3:14:0b:c7:cb:b6:33:b5:7b:ad:d4:dc:2b:c5:c6:ac:
         dc:4a:98:2a:7f:95:7b:54:22:a7:f5:bd:5c:03:8e:e9:50:73:
         86:61:de:4f:d9:fe:4d:87:89:2a:d5:ea:b3:4d:40:33:d6:76:
         71:31:32:fa:12:9b:d7:95:a3:52:b6:8d:a7:0d:8b:9c:75:00:
         3f:32:81:08:04:33:2b:15:3d:ae:41:89:e4:e9:63:c2:e2:04:
         53:20:b1:4d:0b:ab:9b:2a:47:ce:1d:a1:ca:ac:61:a3:6b:8e:
         1e:69:96:0e:cf:17:a8:8e:6c:2b:17:f0:a3:23:8e:25:dc:58:
         32:82:5c:61:be:49:39:03:9e:03:10:62:ee:fc:b0:22:d7:85:
         57:ab:eb:a5:60:39:43:b5:77:00:b2:cd:54:e3:6c:b9:e0:98:
         ff:f0:88:26:d9:a3:59:44:b6:ab:b0:38:c4:67:d0:e3:f1:8d:
         00:22:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:41:53 2025 by rpki-client