Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
File:                     sv9l-pYZFKRbib5RLTNlMInW_7I.mft (raw, json)
Hash identifier:          iV0yKKLgv3YJDbaTHTTGbqBFbbRx+BvOvcXBgdxaC9Q=
Subject key identifier:   EB:A3:47:C4:F1:5C:D9:69:57:7E:6B:44:BB:5D:5D:99:3E:D6:8D:80
Authority key identifier: B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2
Certificate issuer:       /CN=A918FCB4/serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
Manifest number:          0800
Signing time:             Sat 12 Apr 2025 20:43:39 +0000
Manifest this update:     Sat 12 Apr 2025 20:43:39 +0000
Manifest next update:     Sat 19 Apr 2025 20:43:39 +0000
Files and hashes:         1: sv9l-pYZFKRbib5RLTNlMInW_7I.crl (hash: Vn8SmaNDJ1o/KgNJpwnt2mbuz1D4tXWHCJhsbbqynms=)
                          2: F5BCC96EF7EA11EF917C0251C4F9AE02.roa (hash: +AyhAJzE/gLMKmNRb1SVHFe/1nuNSQ2YfQc67BMH3Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 20:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
        Validity
            Not Before: Apr 12 20:43:39 2025 GMT
            Not After : Apr 19 20:43:39 2025 GMT
        Subject: CN=67fad07b-c6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:67:28:4a:49:1d:5e:96:b0:41:6b:d7:8d:
                    e8:eb:f5:76:4e:bc:6c:da:33:38:82:51:64:95:14:
                    ee:f4:a2:0b:34:74:49:16:3c:24:b5:86:71:b0:72:
                    97:d1:12:87:6e:61:b3:12:0f:b3:49:8c:38:cf:55:
                    78:b0:74:9b:18:54:a7:15:bb:bf:b3:d2:68:fc:39:
                    11:70:17:23:8c:c4:04:31:ce:e0:cb:06:e9:d6:51:
                    b6:67:aa:c3:28:1d:12:c7:a2:ea:f4:49:90:a1:bc:
                    c2:6c:8d:32:d1:fa:d0:33:6d:21:e4:e4:eb:2d:b5:
                    17:66:92:8e:88:4a:2e:92:cd:04:cb:36:ed:a0:7f:
                    e9:41:77:4a:2f:6f:be:7a:1e:cd:35:96:9d:a7:f3:
                    05:00:eb:b3:33:d7:3b:b0:04:35:72:d9:c7:1f:81:
                    b1:e8:18:a1:fb:eb:07:8d:e6:ae:dc:dd:b6:08:8c:
                    0a:07:2c:62:bf:59:a2:e9:e4:4f:fd:eb:a6:14:67:
                    2f:be:c9:69:7e:32:8a:c0:0a:b8:c3:09:3e:fd:e7:
                    fc:45:6c:27:ab:1b:9d:8b:de:47:7f:9d:83:70:68:
                    d4:2f:98:b2:64:65:7d:50:f3:92:c9:bd:6f:b9:7a:
                    fa:61:8a:cb:96:2b:d5:40:0e:fe:a0:0a:2a:7e:03:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:47:C4:F1:5C:D9:69:57:7E:6B:44:BB:5D:5D:99:3E:D6:8D:80
            X509v3 Authority Key Identifier:
                keyid:B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:01:87:38:0e:98:74:74:1e:9b:f2:98:c4:e8:62:72:43:15:
         db:d5:1f:58:e5:11:72:64:c0:7c:1f:6f:77:87:16:63:31:99:
         ac:71:2d:42:47:d5:c2:7f:a5:77:b6:56:a0:e5:01:25:22:aa:
         f4:3a:4e:b2:87:e0:cd:a4:13:f1:65:df:b2:23:c1:34:a2:c4:
         ef:00:1a:e1:ee:bd:17:cc:9f:69:a9:8d:25:1f:3a:10:79:7a:
         76:75:37:0e:5e:32:29:eb:f5:9d:48:27:53:ff:aa:00:e7:22:
         a3:3c:97:88:cf:14:0c:18:9e:2b:d2:e0:ac:7b:7d:9d:6f:ed:
         83:eb:5d:8e:4f:9f:a6:28:6e:7b:0f:65:d5:93:23:ca:bd:12:
         67:34:7b:c3:85:99:2c:f0:5c:8d:67:fc:ad:19:9e:ea:f0:6e:
         f8:ae:31:ab:ac:e5:30:6d:d9:1d:dc:95:63:3f:b3:41:d7:42:
         76:39:8e:da:a5:ac:f7:bd:bb:16:5c:bd:db:b8:ca:68:5c:c8:
         12:2d:7c:54:f2:28:74:c1:03:bd:86:e2:12:d7:9d:26:3c:ce:
         5e:3e:3d:02:73:19:c0:ce:b4:67:68:0f:1f:cf:5f:3b:7c:e1:
         78:9f:41:0c:94:aa:27:7c:a8:8f:0d:5c:4a:3d:7a:f2:fc:4b:
         cf:b1:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:04:10 2025 by rpki-client