Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File:                     aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier:          h5nW2mJOOWf/OAmYSxmDEGrlmaCr5oSEdimCzV38cko=
Subject key identifier:   95:2D:E8:7F:4F:76:72:8D:C0:3D:3B:A8:C6:2C:8C:4E:CC:75:C9:C2
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       346F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number:          3467
Signing time:             Fri 04 Apr 2025 15:10:13 +0000
Manifest this update:     Fri 04 Apr 2025 15:10:13 +0000
Manifest next update:     Fri 11 Apr 2025 15:10:13 +0000
Files and hashes:         1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: OdoK/9uCQZSVnpPsSnv2DOuI2rHE41UIpDbF6ywXBvY=)
                          2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13423 (0x346f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010
        Validity
            Not Before: Apr  4 15:10:13 2025 GMT
            Not After : Apr 11 15:10:13 2025 GMT
        Subject: CN=67eff655-9de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:c6:bf:4a:ff:b9:c0:d2:fe:86:fa:3e:c5:
                    7e:15:83:b4:e4:3c:ef:f7:da:4a:52:03:89:5d:53:
                    d7:b9:ba:30:67:af:7c:a1:76:a8:48:f4:1c:81:d6:
                    40:9f:51:bd:65:a5:89:f2:20:d5:12:80:12:d2:29:
                    9e:dd:90:78:c7:f7:41:cc:8e:96:fb:d5:e6:fc:52:
                    8d:e5:2c:04:39:4a:84:aa:89:74:9a:e1:f4:ab:32:
                    a8:e5:5e:ca:17:84:81:a5:25:81:64:fe:25:45:8e:
                    16:61:30:fb:0d:b2:b2:72:61:c3:84:3b:35:a3:e2:
                    70:62:76:ed:ea:4e:75:39:fe:4c:50:3f:15:45:be:
                    02:56:3c:19:a2:43:aa:9d:7d:3e:63:40:73:44:e2:
                    80:0d:bf:6a:e2:18:ba:77:a6:47:bb:7c:d2:04:33:
                    0a:17:2c:95:be:c4:d2:d2:06:d5:9a:af:63:6b:3e:
                    de:5d:09:73:1e:65:3b:ec:ba:77:02:5c:c7:83:7b:
                    4c:86:12:8a:cc:fb:ce:95:da:e1:77:11:17:70:78:
                    e7:90:3c:25:3f:62:e5:45:16:d0:63:ee:83:a5:8b:
                    44:11:3d:16:8e:ea:38:89:48:60:4d:6e:5f:e1:3d:
                    00:9b:ac:47:a9:b6:4a:b4:ab:e9:8c:b3:17:5a:04:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:E8:7F:4F:76:72:8D:C0:3D:3B:A8:C6:2C:8C:4E:CC:75:C9:C2
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:53:ff:37:b2:97:8d:89:1a:d1:47:d4:a5:36:ca:0c:b3:f7:
         ea:c6:df:bc:2e:45:ec:43:8f:65:0b:1d:45:77:20:9e:86:7f:
         47:e7:f9:d0:bd:af:b3:94:66:ed:1f:09:4b:e3:f7:36:09:b1:
         87:0b:a2:8d:aa:c8:11:d8:b7:8c:13:7b:7d:07:85:58:d8:ce:
         74:5c:88:dd:63:30:1d:e8:e9:6d:ff:e1:b7:d8:28:23:21:3a:
         24:d5:95:a3:f1:c0:2c:59:7c:07:f6:a4:85:98:74:f7:04:c0:
         c3:18:b6:df:8a:d5:34:c2:13:2a:5c:98:d5:17:5d:f2:ae:7d:
         7b:93:aa:8c:44:b0:70:5b:b6:92:39:ae:f8:68:4b:f1:ae:8f:
         ac:af:c4:08:f5:34:e9:92:d5:b8:23:2a:ec:55:e6:1b:be:3e:
         75:0f:c4:4a:54:1e:57:fd:45:83:20:18:c1:6d:46:d6:d9:27:
         99:09:2c:dc:81:b8:55:57:b2:2d:25:96:a4:66:8e:23:2d:e8:
         de:90:76:e6:58:b9:40:1d:8c:bf:2f:94:21:f8:82:e6:74:54:
         7f:b2:cf:2a:26:d8:dc:e1:19:05:a8:63:97:88:fb:61:49:29:
         14:cf:01:fe:55:0a:f1:51:a1:7e:ba:46:4b:9d:a9:84:ca:ad:
         29:b4:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:13 2025 by rpki-client