Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File:                     R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier:          SW5CMkYKpHOFmiyRkwBwZQqL0QKyXARejmq6NFri/jE=
Subject key identifier:   B9:4E:38:A7:4D:E8:C4:22:3D:89:B7:87:C5:0B:EE:7A:D4:9B:88:0B
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer:       /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number:          079C
Signing time:             Fri 04 Apr 2025 21:23:12 +0000
Manifest this update:     Fri 04 Apr 2025 21:23:12 +0000
Manifest next update:     Fri 11 Apr 2025 21:23:12 +0000
Files and hashes:         1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: FfgVM4OSQxniPFLSJdH9wAnLYIP2jSbq/xYJPdfwCU4=)
                          2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=)
                          3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=)
                          4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=)
                          5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=)
                          6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
                          rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D072
        Validity
            Not Before: Apr  4 21:23:12 2025 GMT
            Not After : Apr 11 21:23:12 2025 GMT
        Subject: CN=67f04dc0-d72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:1d:c4:2c:38:12:7d:9b:ba:a3:e7:ab:f6:
                    8f:3e:57:a3:f5:d6:dd:ee:e8:68:3b:cd:2f:d7:2c:
                    d1:10:35:d9:2b:b3:69:d2:da:73:cf:3f:55:e8:4a:
                    a0:2b:ca:53:34:d5:69:3b:77:da:5f:6f:3e:7d:ee:
                    bc:64:cc:bf:19:1a:08:b5:17:3a:d9:e6:ed:c5:45:
                    1e:aa:73:50:7b:dc:c0:60:4b:46:92:ec:fc:98:8c:
                    af:1c:60:bf:79:44:6e:1e:87:66:a4:1a:d8:f1:7f:
                    21:18:9a:c3:5b:d2:81:47:43:b9:36:09:35:0c:90:
                    b7:8b:5e:7b:5b:8f:2b:33:20:c5:50:8d:1b:06:81:
                    8e:f6:a0:7a:9d:d2:73:5e:98:fb:9d:7a:b1:7c:b9:
                    b1:be:a2:d9:86:1a:fb:ff:1d:03:60:c6:48:97:52:
                    b5:99:81:b6:dd:a7:76:3a:f5:77:38:76:25:9f:14:
                    90:f8:f7:ef:c0:68:b2:77:b7:4b:72:79:b2:8b:af:
                    26:ec:d8:5d:84:70:80:46:33:d3:18:55:d4:66:2d:
                    e4:b7:ef:83:9a:9f:02:ec:76:01:8f:fa:7a:9c:30:
                    f7:10:f5:29:72:1b:aa:55:3e:fa:ee:a4:f3:ac:a0:
                    97:02:d9:c2:8e:55:8e:b8:8e:65:d2:f1:96:e9:67:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:38:A7:4D:E8:C4:22:3D:89:B7:87:C5:0B:EE:7A:D4:9B:88:0B
            X509v3 Authority Key Identifier:
                keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:7d:9f:89:9a:74:cc:53:e2:a8:3e:9e:d1:43:13:f2:dd:
         97:69:73:27:65:c4:5f:ad:da:5c:74:64:73:d9:42:95:9d:c0:
         e7:70:97:a8:a6:9d:2b:6c:7e:7b:34:5a:6c:42:03:7b:43:b2:
         ae:2f:89:2c:4d:66:01:17:2c:7e:91:99:d3:e4:90:17:1d:18:
         ef:c6:a8:de:96:34:0e:71:2f:a7:85:8d:50:b1:57:a3:8a:13:
         ee:10:ea:b7:8e:34:82:87:9f:e7:57:d5:07:24:9a:b9:da:a9:
         b6:da:c9:60:07:9f:a4:8a:e6:90:c4:a4:40:78:45:27:87:28:
         63:b3:b2:87:ab:18:00:3f:fa:c8:40:f8:66:55:8e:95:07:68:
         94:65:82:6b:67:2c:6f:b8:03:96:59:04:c5:6f:2f:94:34:8b:
         d0:13:7d:71:a4:e5:42:22:ed:ad:1d:ca:44:4d:83:2f:e1:9a:
         87:53:18:7d:cf:9c:a6:d1:a0:8f:fa:10:87:64:cf:0a:aa:77:
         d8:57:78:f5:16:29:34:6d:0a:00:65:7b:e8:21:c9:20:86:e4:
         38:ad:72:c3:71:60:ae:c6:52:26:05:32:c5:3a:2f:cd:71:63:
         2b:cc:1c:9e:c6:39:fe:16:7f:79:50:98:40:37:5c:e4:6d:e9:
         3b:63:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:46:58 2025 by rpki-client