Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          9F1r8DV35bgxSwhX4YQxewpcfWb/gmm9sJzQIDGAqQg=
Subject key identifier:   41:1D:2B:0C:88:A9:FB:15:7F:F8:C0:73:87:1A:D1:F1:FD:52:78:77
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          E6
Signing time:             Fri 11 Apr 2025 04:39:44 +0000
Manifest this update:     Fri 11 Apr 2025 04:39:43 +0000
Manifest next update:     Fri 18 Apr 2025 04:39:43 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: o+oqZefA+GNyDi3cExlyxApmllWrAMkNULSKpfkGtaw=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: x9GRsqT1r4p+1r+DiQJUITI9RcFAyXCGhnRIsXkFNWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: Apr 11 04:39:43 2025 GMT
            Not After : Apr 18 04:39:43 2025 GMT
        Subject: CN=67f89d0f-6744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:17:9c:1c:ef:00:e9:7a:ce:52:e5:6c:6f:
                    2f:bb:b4:b8:52:93:54:1e:71:09:72:96:06:64:93:
                    ae:9e:fc:30:47:78:ae:3f:33:ce:da:ff:e3:8d:dc:
                    30:39:a4:ed:16:8b:bc:1a:3b:ac:32:20:d0:34:2d:
                    0f:7a:56:5c:48:54:36:0a:ad:f3:9f:38:00:ce:85:
                    73:aa:1a:3a:8a:3b:6a:04:e5:6c:5d:91:cd:dc:96:
                    80:f6:8f:d0:ec:cd:84:ac:fc:6d:a7:3a:ce:c1:e6:
                    0f:b7:70:46:f8:f4:af:eb:f0:7e:3a:36:b1:e4:f1:
                    31:c0:b1:96:02:75:76:a2:8c:f7:49:b7:01:cd:21:
                    70:2d:12:87:4c:cb:40:27:e0:3c:5f:b3:20:c6:bf:
                    2d:35:63:1e:fb:86:68:e3:5a:1b:9a:4a:59:ab:c6:
                    23:ff:c1:e1:33:05:fb:8d:76:3f:17:46:66:39:3d:
                    d5:30:33:6b:1c:74:d5:dc:e7:62:3e:8e:ca:01:57:
                    b6:d9:fa:16:9a:83:41:a3:d6:c2:2d:57:fc:56:da:
                    31:da:fe:5b:37:32:61:e9:ce:09:b9:14:0b:4b:96:
                    9a:13:22:e5:b9:33:ff:a7:c9:d1:e0:22:11:e1:55:
                    32:93:0a:af:b3:4c:54:38:59:c3:ad:12:c9:cc:be:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:2B:0C:88:A9:FB:15:7F:F8:C0:73:87:1A:D1:F1:FD:52:78:77
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:b6:68:7c:80:43:f5:ce:1e:70:27:1d:c7:3b:7c:c7:4f:
         ca:f2:d5:b3:23:2d:66:37:07:6d:62:8c:b9:d2:b3:bc:0d:e5:
         54:db:db:17:59:bb:26:0f:d0:21:01:79:5b:69:5b:b9:58:04:
         28:45:40:aa:94:04:71:61:b1:e9:77:f1:5c:6d:0d:4d:4e:ae:
         2e:77:ac:e6:cc:9a:90:fe:6c:fb:66:68:ea:63:d3:71:ce:02:
         70:78:1b:a5:ce:db:9b:7f:8d:50:01:bf:2d:bb:c8:34:ed:b5:
         d4:82:c5:4e:af:63:6b:ea:b3:e1:fa:a9:62:c2:e8:b8:74:e0:
         e1:0d:ab:f3:1d:ab:23:51:6b:ef:17:44:87:e8:01:ee:f4:6d:
         b0:41:89:43:96:18:9f:8d:ae:f1:10:1c:f6:d3:21:c3:f7:60:
         c3:82:3c:f5:55:10:ae:ae:78:93:09:7c:1f:bd:fa:72:84:10:
         62:ce:ef:2c:a4:54:80:cc:8c:9d:19:09:98:f9:30:9d:b7:b4:
         b6:5c:5c:97:c8:04:c0:06:12:81:9c:f5:16:87:80:c5:2b:ca:
         f9:34:dd:8f:45:4a:37:ed:4d:72:ee:70:d2:0d:bc:15:89:93:
         b1:24:54:29:d6:5c:51:1b:f1:0e:51:fb:58:b0:47:41:82:8c:
         70:05:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:59:09 2025 by rpki-client