Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
File:                     Syj186m-bJVf8b4Pe1CAOrF-tGA.mft (raw, json)
Hash identifier:          bxLFzMg+AsLMSdUtFuVSat95KduQOXeFO44F6XTY5Os=
Subject key identifier:   32:39:BE:DA:BD:D0:7B:D0:5A:38:FC:12:30:97:BB:0B:00:7E:3A:44
Authority key identifier: 4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60
Certificate issuer:       /CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
Manifest number:          9A
Signing time:             Mon 07 Apr 2025 05:11:47 +0000
Manifest this update:     Mon 07 Apr 2025 05:11:46 +0000
Manifest next update:     Mon 14 Apr 2025 05:11:46 +0000
Files and hashes:         1: Syj186m-bJVf8b4Pe1CAOrF-tGA.crl (hash: UI6pI5R+tMATa/Tl/k+bzKpv2DRKVwz2W3ru444Z1pQ=)
                          2: 8E20940E32AE11EFAE6AE719C4F9AE02.roa (hash: bTdH2BNkxu8pmsOX7z6m4Cai9a9U6KqGeoJPp3UjSyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC324
        Validity
            Not Before: Apr  7 05:11:46 2025 GMT
            Not After : Apr 14 05:11:46 2025 GMT
        Subject: CN=67f35e92-a11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:10:5d:a1:82:a2:f0:d8:5a:43:14:ae:63:
                    a5:e0:62:40:a1:9c:3e:35:2b:5e:b4:6e:9e:8c:e6:
                    f8:e2:41:a6:e1:3c:af:13:6d:1e:20:fb:80:6a:98:
                    8d:a6:34:ca:41:3e:dc:94:3c:14:82:58:50:98:af:
                    0b:44:b2:da:1c:61:33:1c:b5:d6:e2:b1:06:88:24:
                    12:48:cd:21:70:2a:65:30:78:0f:98:5a:e3:f3:b0:
                    6e:7c:30:42:79:7a:b4:9f:ba:c0:46:99:da:6d:55:
                    d5:4e:78:37:50:b6:e3:ac:d3:93:65:2e:94:72:d0:
                    1b:08:77:d9:9b:e5:37:3b:8e:1b:7a:e8:b1:eb:15:
                    a4:d5:d6:46:68:86:6a:1b:c4:cd:e5:6d:f2:0d:6d:
                    73:97:1b:5c:d1:b0:d1:dc:4a:66:5b:7b:0e:9a:47:
                    57:49:d0:b8:08:30:ba:9a:13:3c:8b:45:a5:31:c7:
                    1c:b1:d5:0d:01:ad:bd:b1:0a:6d:4f:e1:81:1a:3a:
                    71:bb:5a:6b:db:ff:24:ac:04:07:dd:ab:09:57:17:
                    59:bd:c7:83:99:0a:f0:cd:c8:24:8d:04:74:bb:e7:
                    ae:f2:c2:73:c6:38:14:40:3d:56:0e:c6:64:65:48:
                    b0:f0:7a:30:25:85:93:5a:b4:26:98:7d:15:34:ea:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:39:BE:DA:BD:D0:7B:D0:5A:38:FC:12:30:97:BB:0B:00:7E:3A:44
            X509v3 Authority Key Identifier:
                keyid:4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:1e:8c:14:2b:13:a4:c1:62:7b:72:60:ca:4c:92:16:7c:
         10:bd:74:81:06:52:69:8b:4a:4e:ec:5c:9b:45:94:a4:31:d7:
         c4:21:82:3f:5b:ff:52:b6:c2:de:3c:fa:fb:79:e5:06:f7:4d:
         4a:9c:37:98:a4:f5:8c:b7:96:8d:04:ec:c7:70:e9:f1:ef:01:
         e3:91:46:a8:be:ff:15:fd:c1:9d:43:88:ef:be:30:b4:95:98:
         e3:76:c4:fd:51:de:91:e7:38:6f:6c:83:16:de:8c:cc:e3:32:
         f3:4b:73:1b:7c:cb:c8:88:ff:05:9a:f7:d0:60:cc:6f:a4:7d:
         08:1c:d5:55:e7:16:09:93:ad:03:ba:d4:ea:4d:ab:cf:c0:48:
         71:b6:19:d9:58:78:0d:7d:33:14:20:46:30:95:30:7e:a1:8b:
         a9:5a:6b:3e:53:8c:b8:48:9b:eb:9a:b9:1c:76:1d:ef:b2:62:
         36:41:5f:bb:9e:1e:dc:0e:ec:f2:54:52:f3:2d:58:ce:01:8f:
         b0:57:5b:6e:14:ab:4b:47:7f:01:a5:f0:8f:82:35:a7:4f:7c:
         c2:e2:36:17:eb:08:ba:e4:3f:f6:e2:19:32:1f:d2:5c:e3:7f:
         b9:8f:33:58:cf:1f:d3:2f:86:e6:88:bb:38:b6:e9:95:a2:88:
         b1:d7:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:14:41 2025 by rpki-client