Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          dqhoWTFCAv7/pgH63S8v1zWVB/rAfkBMtcaCCBHsQAQ=
Subject key identifier:   E2:46:3A:E7:D5:C5:4E:20:A8:37:B8:93:AE:2C:2C:4F:A4:83:8E:97
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          0565
Signing time:             Thu 13 Mar 2025 00:00:18 +0000
Manifest this update:     Thu 13 Mar 2025 00:00:18 +0000
Manifest next update:     Thu 20 Mar 2025 00:00:18 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: U+fO/salLiG2vItdwVhhb0LsuwAe7VgOUaEd37VNRt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363
        Validity
            Not Before: Mar 13 00:00:18 2025 GMT
            Not After : Mar 20 00:00:18 2025 GMT
        Subject: CN=67d22012-c97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:10:04:f2:a3:87:00:93:39:0d:68:d3:70:
                    d0:57:e7:62:cd:9a:d7:43:3c:42:12:27:c5:ee:49:
                    27:29:60:6a:c4:bc:24:eb:6a:79:88:e7:e7:e0:af:
                    bf:7f:8f:37:29:64:5e:4d:26:eb:cf:df:47:e3:26:
                    c8:b3:20:d6:f9:c7:a2:eb:8d:18:39:65:32:67:ce:
                    bf:11:0b:cf:3a:40:43:c8:21:2a:95:50:fc:e2:04:
                    4f:54:7c:a5:11:d8:b5:41:5b:01:52:b9:1b:dd:24:
                    09:09:ed:d0:d6:48:4d:ba:68:8f:10:27:36:08:6a:
                    3d:b1:c5:a6:30:0d:0d:01:99:51:0f:23:dc:fe:49:
                    91:ea:b6:f7:23:4f:ff:77:cb:bf:94:d4:09:b0:c5:
                    15:28:91:c5:94:4d:47:df:33:8c:3e:2f:64:49:51:
                    eb:69:d1:25:1e:bb:b0:be:b0:75:fc:44:0f:62:33:
                    90:d6:4f:1e:da:b3:67:33:e5:7e:be:43:00:d7:db:
                    04:98:31:05:ef:8e:ba:70:89:f2:af:70:c6:14:10:
                    57:53:da:81:72:6b:25:2d:3c:1c:da:97:57:29:24:
                    d0:5f:17:b8:7b:af:86:3f:c8:24:df:b5:95:b8:1e:
                    77:8c:0c:b1:64:a8:96:59:f3:0a:69:31:f9:42:3a:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:3A:E7:D5:C5:4E:20:A8:37:B8:93:AE:2C:2C:4F:A4:83:8E:97
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:05:28:94:3d:02:4b:50:35:cc:f0:d2:f8:22:84:a2:34:94:
         63:87:0f:40:db:49:09:4d:da:48:39:fd:f9:72:26:73:83:f4:
         32:93:d9:9f:26:63:86:b2:2b:eb:51:a1:a2:74:98:d4:22:05:
         0b:b0:44:0e:1b:df:da:56:f5:59:33:14:aa:2d:a3:b0:50:76:
         c7:da:1b:e8:82:51:1b:07:a1:8b:51:e2:23:ac:73:d1:cc:2a:
         20:5b:ca:1d:bd:f1:d4:38:83:53:24:20:5b:45:72:d3:c7:df:
         65:93:83:0e:c6:98:92:e4:9d:0c:3f:fc:68:16:d0:fc:72:eb:
         31:a4:b7:f5:6a:1b:7b:14:a5:4d:f6:6e:3a:eb:a7:e0:93:dd:
         85:0a:2b:44:41:bf:08:ee:de:5b:e7:d2:b4:26:7f:ea:73:98:
         95:73:84:92:68:6a:b7:e0:a9:0d:2d:04:04:5f:f2:f3:5d:a6:
         0b:d8:73:15:8f:09:38:59:d1:d0:e2:54:76:0f:f9:45:e2:5d:
         02:39:b6:79:df:48:7d:72:75:0a:bd:fb:2c:6c:62:44:d8:94:
         4b:ae:92:b4:cc:86:73:20:f5:e1:9f:a3:55:d0:6d:4e:dd:26:
         46:ba:e4:b6:9f:20:53:9a:41:65:36:8b:5f:98:7c:a8:b0:62:
         a8:43:51:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzNjMxMTAvBgNVBAUTKEM4QzI1QzYzREVGNTY3MDBENjU3RkM0Mzk5NEE1NTFG
RTQwQ0NEQzcwHhcNMjUwMzEzMDAwMDE4WhcNMjUwMzIwMDAwMDE4WjAYMRYwFAYD
VQQDEw02N2QyMjAxMi1jOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwcQBPKjhwCTOQ1o03DQV+dizZrXQzxCEifF7kknKWBqxLwk62p5iOfn4K+/
f483KWReTSbrz99H4ybIsyDW+cei640YOWUyZ86/EQvPOkBDyCEqlVD84gRPVHyl
Edi1QVsBUrkb3SQJCe3Q1khNumiPECc2CGo9scWmMA0NAZlRDyPc/kmR6rb3I0//
d8u/lNQJsMUVKJHFlE1H3zOMPi9kSVHradElHruwvrB1/EQPYjOQ1k8e2rNnM+V+
vkMA19sEmDEF7466cInyr3DGFBBXU9qBcmslLTwc2pdXKSTQXxe4e6+GP8gk37WV
uB53jAyxZKiWWfMKaTH5QjqHEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJGOufV
xU4gqDe4k64sLE+kg46XMB8GA1UdIwQYMBaAFMjCXGPe9WcA1lf8Q5lKVR/kDM3H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD
QkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3RFdWX3hEbVVwVkgtUU16
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lNSmNZOTcxWndEV1ZfeERtVXBWSC1RTXpjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3
RFdWX3hEbVVwVkgtUU16Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEBSiUPQJLUDXM8NL4IoSiNJRjhw9A20kJTdpIOf35ciZzg/Qyk9mf
JmOGsivrUaGidJjUIgULsEQOG9/aVvVZMxSqLaOwUHbH2hvoglEbB6GLUeIjrHPR
zCogW8odvfHUOINTJCBbRXLTx99lk4MOxpiS5J0MP/xoFtD8cusxpLf1aht7FKVN
9m4666fgk92FCitEQb8I7t5b59K0Jn/qc5iVc4SSaGq34KkNLQQEX/LzXaYL2HMV
jwk4WdHQ4lR2D/lF4l0CObZ530h9cnUKvfssbGJE2JRLrpK0zIZzIPXhn6NV0G1O
3SZGuuS2nyBTmkFlNotfmHyosGKoQ1GV
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:29:08 2025 by rpki-client