Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
File:                     yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json)
Hash identifier:          JQ8A1ITlF0prcq9K22TxOtBgLNJWaTAz+tw3DOHpR38=
Subject key identifier:   3E:01:3C:70:1F:53:EB:62:F1:C9:D6:D6:0E:E8:B6:0C:FD:BD:DE:97
Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7
Certificate issuer:       /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
Manifest number:          016E
Signing time:             Thu 03 Apr 2025 03:09:52 +0000
Manifest this update:     Thu 03 Apr 2025 03:09:52 +0000
Manifest next update:     Thu 10 Apr 2025 03:09:52 +0000
Files and hashes:         1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: Ir/M4uV8AsfGiqVE1qWi8oelD516lra3XynDnycpIOM=)
                          2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: W0hL1B4Pu9Y3eTRJdGcmU+N0LKwGZJeiFs+2ym6914M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl
                          rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161065
        Validity
            Not Before: Apr  3 03:09:52 2025 GMT
            Not After : Apr 10 03:09:52 2025 GMT
        Subject: CN=67edfc00-a901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:e1:86:30:3e:51:c9:94:70:30:7f:dd:69:
                    bc:6c:9c:66:df:82:d0:80:a7:67:c8:e9:fd:66:20:
                    e7:fe:35:3a:67:75:80:95:53:05:6a:6b:28:9c:d3:
                    c5:45:03:dd:3c:3b:2c:0f:5b:57:66:13:21:fa:26:
                    72:a4:ff:9a:4f:bb:65:ab:bf:99:24:0d:f8:20:d5:
                    7c:b3:19:19:81:4c:6d:02:51:a2:ac:b0:55:8a:8b:
                    4c:33:26:80:f1:e5:0b:3f:8b:03:94:f2:2f:35:bf:
                    17:ca:1f:d2:14:cd:1e:02:c8:d0:85:41:23:df:2d:
                    ef:b0:82:67:5f:5a:7f:5c:46:3c:8e:f4:c8:68:b9:
                    39:8b:a1:44:86:12:d0:58:db:b6:81:da:1b:4e:3d:
                    1b:d0:4b:15:fd:15:32:0e:dd:2a:35:c6:b7:ec:e7:
                    e7:91:cb:ca:ae:88:21:a9:d5:22:b0:ec:e8:b2:ac:
                    e6:d1:6f:2d:81:f1:1f:47:c5:dc:03:fd:7d:9d:89:
                    0a:b1:bb:65:48:ca:c6:ec:4e:d2:f9:c9:b0:68:79:
                    9c:de:15:c5:dc:f2:32:21:c6:1b:70:f1:5d:57:5b:
                    08:c5:f5:10:f8:ed:4d:04:f3:bb:a0:c2:f4:cf:08:
                    96:ad:b9:9b:b8:3f:da:4b:4b:69:4c:1c:85:69:0d:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:01:3C:70:1F:53:EB:62:F1:C9:D6:D6:0E:E8:B6:0C:FD:BD:DE:97
            X509v3 Authority Key Identifier:
                keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:32:d7:a6:25:5d:cb:02:28:8d:d5:b0:b5:98:f6:2f:54:
         36:1b:e0:4b:4a:18:d3:42:18:16:a0:a7:c5:8a:14:3b:c0:c1:
         3d:f9:96:ad:fa:cd:71:b4:05:5c:e8:c9:1e:6f:50:9b:71:d9:
         e0:9f:df:09:e3:84:a2:81:fa:cb:56:fd:2f:3b:e3:43:b1:4e:
         a4:2e:4a:73:36:da:ad:d1:a0:5f:ba:f2:2c:c3:e4:34:b7:51:
         44:d1:4d:f0:d8:b5:13:4a:b4:6c:7c:aa:e5:0e:88:2b:29:9c:
         27:f3:37:5a:24:87:37:bf:09:ed:de:71:43:da:01:4f:66:23:
         1f:88:25:11:95:36:ec:c6:91:b6:13:96:83:e7:cd:4a:93:a9:
         04:0d:fb:be:69:3e:11:99:25:71:25:f6:25:42:45:4c:da:4b:
         f8:04:ab:fa:9e:14:c2:3c:c7:44:52:b7:1e:f5:85:3a:c9:46:
         44:c6:5e:5b:cb:6f:cb:8f:7a:21:b7:c8:87:08:e6:4c:df:3d:
         b2:32:28:46:3f:90:99:6f:b0:79:71:c9:ba:35:30:b7:1f:4f:
         d6:fd:d0:52:6e:3c:18:02:94:b6:b1:fd:68:e8:1a:8d:59:e3:
         11:ea:5a:a1:3c:94:b6:b7:aa:08:7b:17:12:9a:4d:16:7b:5a:
         a1:d5:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:08 2025 by rpki-client