Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
File:                     TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json)
Hash identifier:          MITNsh46QffB6+YLV8mJriAY0dxUIZvewYvLn36Xs18=
Subject key identifier:   CF:A9:EB:FC:DF:C6:81:D1:A4:F2:5A:C6:5C:16:CC:91:64:93:DB:16
Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Certificate issuer:       /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
Manifest number:          0708
Signing time:             Wed 02 Apr 2025 21:53:00 +0000
Manifest this update:     Wed 02 Apr 2025 21:52:59 +0000
Manifest next update:     Wed 09 Apr 2025 21:52:59 +0000
Files and hashes:         1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: OoWJFbO8rb1BWrWjwSUiUYk29x5FuuzxsMFiodfRycU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A
        Validity
            Not Before: Apr  2 21:52:59 2025 GMT
            Not After : Apr  9 21:52:59 2025 GMT
        Subject: CN=67edb1bc-39a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:4d:5b:59:fa:4d:0f:34:6c:1e:f7:ee:34:
                    4a:ea:bb:73:d2:df:b2:12:0d:3a:ff:09:54:ed:e4:
                    fa:bb:55:3d:e9:cf:81:15:94:d2:31:bc:2d:b1:c7:
                    44:ea:49:f0:d5:7e:de:5e:03:31:d5:3f:0d:ff:36:
                    aa:3b:af:b8:9d:9d:48:e6:2a:c5:00:a2:64:6f:52:
                    00:ae:35:c2:6d:df:bf:c7:40:3c:68:41:b1:27:27:
                    b2:2f:fe:f9:50:e1:85:1f:ad:4f:ef:8e:f5:87:46:
                    01:0d:1d:ea:f1:55:45:26:b0:72:52:b6:6e:4a:7b:
                    17:83:e6:c3:aa:b6:f8:bd:21:03:cc:e4:db:eb:7c:
                    75:45:14:f3:e6:24:81:1e:37:b6:e9:54:de:bf:d3:
                    a8:37:5a:53:f9:12:5e:98:78:dd:da:a7:bc:e8:ae:
                    66:6e:3c:0f:8b:4b:69:21:bb:05:14:4d:20:cf:fc:
                    66:e5:f8:38:2b:1f:f4:b9:35:de:55:ff:bd:cb:bb:
                    1e:22:36:c6:d1:dd:ef:78:cd:31:91:8c:1d:a3:72:
                    9e:dd:b7:29:e1:e9:ec:a1:45:51:35:92:32:40:8c:
                    8d:37:8e:39:6a:00:88:44:b3:c7:ec:bc:6d:a0:14:
                    11:da:cf:0c:c5:ce:17:cf:87:97:21:d2:b7:9d:1d:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:EB:FC:DF:C6:81:D1:A4:F2:5A:C6:5C:16:CC:91:64:93:DB:16
            X509v3 Authority Key Identifier:
                keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bd:93:b6:a1:83:7e:a1:0b:90:d3:69:0b:f4:92:1f:2b:e0:
         f6:df:8a:83:7e:fb:02:1b:a7:62:c0:6f:34:10:81:ae:c9:29:
         40:d3:f0:b1:a6:a6:bd:fb:e8:1d:e3:cc:75:4f:9e:b5:0f:7d:
         8d:9f:9f:1d:1c:65:21:da:8d:55:8c:ec:80:2e:50:a6:8d:f3:
         ea:9b:d3:0d:98:8b:cd:24:46:6d:66:84:e6:c8:66:44:bd:f2:
         d2:09:0c:68:5c:53:3c:3f:80:59:9c:94:4c:22:9c:f4:d8:24:
         4e:8d:47:86:bb:4b:57:e8:ca:0c:ad:06:36:59:61:47:a2:e6:
         c6:5a:43:24:71:d4:8b:6b:fc:e2:1c:e0:e4:a6:68:5d:86:97:
         75:a5:50:8c:d3:2e:2b:b0:15:c4:41:ca:d5:ce:53:51:db:bd:
         70:d7:da:e8:d3:9a:95:0a:f1:1e:aa:3e:be:57:70:b5:fd:49:
         ba:8d:b1:f8:fd:84:a5:2e:77:5c:52:2c:51:27:88:10:88:be:
         6c:62:4d:b3:e3:d6:89:b8:13:54:85:b9:76:4e:7e:62:4b:b0:
         e9:a0:4e:30:8b:5f:31:f5:ed:3c:36:d3:12:92:1c:5c:c0:e6:
         35:32:5d:8c:dd:6c:8f:91:4f:48:7b:35:b5:61:e9:54:ce:72:
         2e:69:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:04 2025 by rpki-client