Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
File:                     Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json)
Hash identifier:          xW+W1QCPH7XbtJX2DtBg00LToTpOiqELlljz84EtR0w=
Subject key identifier:   0E:F9:0D:37:EA:60:09:FA:08:BF:B6:CA:9E:AE:9D:2F:4D:66:50:60
Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
Certificate issuer:       /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
Manifest number:          0615
Signing time:             Tue 08 Apr 2025 22:31:15 +0000
Manifest this update:     Tue 08 Apr 2025 22:31:14 +0000
Manifest next update:     Tue 15 Apr 2025 22:31:14 +0000
Files and hashes:         1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: uIJMyM7/D698IiggmcvWEaftWtSYQ4XFAhPIpbBChj4=)
                          2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: gli6G9isd7214k/XwPb4QWIehT/cx5I/c38k571CPVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 22:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178580
        Validity
            Not Before: Apr  8 22:31:14 2025 GMT
            Not After : Apr 15 22:31:14 2025 GMT
        Subject: CN=67f5a3b3-e573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:b1:3e:d9:57:33:93:37:0f:b0:47:b8:78:
                    34:62:6b:6c:f9:7c:9d:a2:31:22:6a:75:64:ba:56:
                    d0:06:59:74:4c:b4:b9:55:9e:8f:6d:f4:a6:fa:3c:
                    54:42:92:ac:5a:24:61:1a:a8:70:cd:b6:6e:43:a3:
                    75:ba:0f:d3:b9:ba:f9:c5:a0:5e:d6:74:86:ba:12:
                    3f:41:d2:99:32:0a:7e:90:b3:d5:e3:4b:22:9c:ea:
                    f4:b4:3e:b4:b4:05:91:30:b2:0e:0e:ce:ec:d2:66:
                    6d:2b:7e:01:e8:27:c0:b7:d8:4d:bf:d2:8e:35:14:
                    2a:46:06:9b:33:d7:55:85:6d:2c:c7:6f:5c:e5:ea:
                    e8:fa:8e:3c:6c:a4:9b:b3:ff:7a:f7:70:20:2d:ce:
                    0b:f8:43:60:5b:2d:b0:19:36:d1:27:e0:b8:ca:bd:
                    43:fc:13:9a:b4:b5:a2:f7:3b:20:d7:30:87:52:88:
                    d7:3f:8a:dc:d7:f4:95:4a:63:5c:20:ec:43:41:e2:
                    c0:cd:57:c5:2b:fd:b5:19:cf:47:4e:25:d7:ae:6b:
                    0b:20:af:49:85:ff:ca:c3:4c:b4:74:be:ea:4a:92:
                    c9:ca:bd:09:13:19:7c:7e:04:dd:58:26:eb:20:10:
                    3d:6d:9c:eb:29:3b:1f:a8:0e:18:e2:ec:db:ca:07:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:0D:37:EA:60:09:FA:08:BF:B6:CA:9E:AE:9D:2F:4D:66:50:60
            X509v3 Authority Key Identifier:
                keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:79:07:0a:af:6a:23:58:45:70:12:26:21:41:90:1a:ea:
         9d:ef:46:53:1d:fe:6d:b5:e7:3f:42:d2:41:28:7e:82:a1:a9:
         c5:b1:30:58:c2:40:71:dd:dd:9b:b6:b3:54:b9:6e:2a:04:68:
         21:8b:20:58:ba:21:e1:d6:6b:0a:09:f7:4a:e1:24:f2:2f:48:
         43:a0:61:0a:4e:f3:a4:c5:7b:65:9e:04:49:b2:3a:d7:f5:65:
         4f:ac:08:06:d2:c1:16:10:fc:e0:3a:74:58:d1:6f:f8:7e:97:
         45:12:ce:06:9e:9b:7f:70:c3:54:43:3e:f6:65:c0:b6:5b:04:
         e3:78:2c:9c:69:c0:00:92:43:da:d8:77:77:5a:81:56:72:16:
         53:18:00:96:f6:d1:e2:5e:5f:03:07:d8:4f:52:b5:91:a3:bd:
         7e:2a:08:e2:a8:ba:83:04:26:e8:da:b1:a2:0a:7b:b7:8c:51:
         3d:12:27:16:5a:78:02:a3:b3:ab:0b:4b:7c:2e:5d:73:f9:cd:
         fc:07:a9:35:fa:52:81:e3:ac:5c:d5:8f:26:6b:ca:bf:d6:4c:
         9a:78:6a:56:c6:d4:63:1e:97:05:13:5f:55:33:f5:3d:66:8e:
         30:df:50:85:d0:3a:e8:e9:ef:93:32:50:fd:52:01:b1:15:49:
         a0:70:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:18 2025 by rpki-client