Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File:                     26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier:          tB80JGS2GDa8pRj/kdqAoKa2cqvnaRPyeHCEvyy/8Zw=
Subject key identifier:   5C:E8:95:19:2E:3B:A1:81:12:3A:8F:3A:65:05:09:98:9C:BC:BA:0B
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       0367
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number:          0357
Signing time:             Sat 31 May 2025 01:12:29 +0000
Manifest this update:     Sat 31 May 2025 01:12:29 +0000
Manifest next update:     Sat 07 Jun 2025 01:12:29 +0000
Files and hashes:         1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: sWm74fhguUC16Ewrh+EWLPVYDpAu1xHF5olsHkUAFWc=)
                          2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: YZBCLzG1LRQi5fjPkPYGATjitv5X8ahwOZh2l+uHQzk=)
                          3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: 4KkZhlwS8BwldE+nm9AJgbyzDDEgaxmp/JCW8JNKT3c=)
                          4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: 2yiJ1vYQVaVYgn6ZIE4vtmjEfZixmgLzUvn/Jupt42Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: May 31 01:12:29 2025 GMT
            Not After : Jun  7 01:12:29 2025 GMT
        Subject: CN=683a577d-ddd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:0c:63:60:23:81:c9:ea:5a:13:d7:70:00:
                    38:b6:13:16:b0:c8:bc:69:5a:e9:d8:aa:4c:65:f5:
                    d4:f5:87:1b:c7:94:42:a6:68:8e:a2:88:9c:19:fe:
                    7b:36:51:bc:0d:e1:fc:b4:84:5a:f5:1a:e6:1f:20:
                    8f:86:f5:4f:ef:51:09:b7:5d:0d:9e:d8:56:bc:a8:
                    42:6c:87:03:4d:ff:e6:86:b4:3c:08:86:99:d8:51:
                    6f:4a:3d:3d:3c:e0:a4:72:4a:51:32:e1:fb:c7:fb:
                    22:07:74:69:c8:83:1d:62:5e:54:1b:05:66:3b:b3:
                    f8:3d:45:39:83:b1:3b:d8:39:bc:7d:d9:f4:37:e8:
                    82:d4:5b:a1:eb:b4:e1:1a:61:fe:5a:29:a2:03:75:
                    df:36:14:02:75:84:ac:5b:56:03:23:a9:bc:a2:bd:
                    cf:37:a9:d8:20:98:cf:f2:5d:a1:d9:29:d9:0e:74:
                    78:13:9b:22:18:d4:64:54:e4:8d:15:60:71:dc:9d:
                    54:46:f2:66:14:55:f2:ae:71:ed:7a:90:90:8d:81:
                    97:81:0f:91:93:18:52:6c:7e:29:ee:6e:23:d4:39:
                    f6:5c:41:6f:a9:d2:72:54:9b:7f:d8:3e:7d:86:4a:
                    41:35:29:9b:bd:9c:6c:de:24:15:ef:2d:b4:2e:9a:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E8:95:19:2E:3B:A1:81:12:3A:8F:3A:65:05:09:98:9C:BC:BA:0B
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:ca:b0:69:21:87:e2:a6:0b:e4:af:9d:8d:0b:35:13:82:
         0d:b1:b2:43:8f:17:83:bb:7b:61:fb:e7:b1:1e:44:c4:4d:cb:
         d7:6a:b2:17:e7:0f:2f:2e:b6:9b:09:45:2e:21:76:05:1a:d7:
         fb:fc:72:02:25:61:ac:43:ff:3a:7a:0a:0e:ff:5a:73:ff:bf:
         0b:ef:d8:a5:85:15:3e:fa:98:4e:01:e3:65:6f:34:d3:10:cb:
         08:f6:c3:22:9b:38:5f:b1:40:c3:fa:cd:51:25:94:d9:ad:c0:
         a9:16:dd:5e:7a:b4:73:f0:0d:04:a6:d8:5a:00:7a:fe:b1:0b:
         70:1b:97:35:9d:69:59:54:f1:b2:10:dd:01:5b:30:e3:37:28:
         de:42:4f:71:b6:13:10:68:bc:e5:20:2e:8e:4f:68:8d:ce:02:
         7f:76:5b:a9:7e:df:a7:d6:35:03:dc:b9:6c:17:20:66:b9:78:
         e8:a9:d0:6c:71:4f:74:1c:63:c6:cc:49:d4:6f:54:03:e3:41:
         c6:eb:87:52:ec:1d:1d:22:a7:94:c0:61:08:b5:8e:99:b3:51:
         f9:91:f8:e2:ba:b8:ab:3a:dd:ab:11:08:57:b4:be:0b:9b:eb:
         1f:de:4f:30:1d:c5:67:c8:4d:5a:34:db:ac:6a:d8:3e:57:fa:
         53:69:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:40:37 2025 by rpki-client