Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          N/iiyqqlfFfWy+H/8rjS7OoCjtj+6ZJbxqQWeLe1c6c=
Subject key identifier:   0B:BB:9E:2E:91:36:B9:34:60:D6:2F:B1:28:13:0C:80:A9:7A:A2:C1
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       03EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          03E9
Signing time:             Sat 31 May 2025 00:41:59 +0000
Manifest this update:     Sat 31 May 2025 00:41:59 +0000
Manifest next update:     Sat 07 Jun 2025 00:41:59 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: QYEneMlQD+KpMJeqegrXWGg2YQycZQxloC9SnUuVWDw=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: May 31 00:41:59 2025 GMT
            Not After : Jun  7 00:41:59 2025 GMT
        Subject: CN=683a5057-8748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:53:06:9b:18:f1:5e:cc:90:16:02:4f:da:
                    9a:79:59:c7:8d:87:58:fa:d9:29:42:a7:43:4a:71:
                    c4:05:69:f0:d7:5f:8b:ff:ad:97:23:73:14:d7:9f:
                    68:ea:a9:55:58:ca:64:dc:50:67:5c:8b:56:9b:eb:
                    a3:23:2c:b8:71:66:d1:c1:62:1d:6d:5f:0b:e5:71:
                    66:79:b1:72:95:d4:bc:5f:e9:e5:7a:3e:e6:49:62:
                    62:ed:b3:78:0e:c7:22:37:c0:f3:7a:e5:5a:36:1b:
                    12:29:04:f8:ce:e4:c0:7e:07:ca:af:35:85:a3:65:
                    37:96:42:71:7f:76:1c:89:d8:95:46:f9:99:4f:26:
                    3b:0c:2d:6b:0f:68:d6:bf:98:c3:7f:56:fa:9e:da:
                    d2:7b:e2:b5:3d:69:45:f4:79:80:c1:43:4a:26:c4:
                    9a:0b:bd:8b:eb:d3:19:6a:56:02:0a:50:20:c4:4e:
                    2f:3c:56:f0:df:72:25:f5:d4:b6:01:4a:ca:90:c0:
                    d8:48:93:d2:f0:af:c0:c6:3d:96:24:a3:20:d5:4e:
                    b5:fd:b9:3f:e9:33:a4:4b:97:b7:30:a1:34:76:b2:
                    f0:52:d8:2e:50:1e:64:4c:09:93:06:2c:93:88:12:
                    a6:79:2d:6d:6c:f5:48:ed:82:5c:3a:4e:38:b3:ee:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BB:9E:2E:91:36:B9:34:60:D6:2F:B1:28:13:0C:80:A9:7A:A2:C1
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:da:ce:61:c7:59:cc:98:92:33:66:70:9f:95:cc:9a:8b:21:
         c6:f7:37:98:51:0e:e3:65:e8:97:81:6a:6a:d8:24:b4:db:c4:
         39:c0:cd:4c:50:28:c0:5e:26:61:a8:e2:f1:f3:92:46:5f:1a:
         a4:20:98:10:b8:b6:88:98:f8:10:11:2c:e9:89:a6:22:d3:7d:
         6e:4f:4c:de:6c:b8:a9:03:b3:e3:33:f3:5a:8b:92:86:78:d2:
         ed:d5:11:84:69:db:cb:8f:08:73:6c:04:63:f2:f5:3b:05:f5:
         da:af:cb:c0:29:ef:47:c3:f6:d0:30:37:29:b2:99:09:90:52:
         a0:13:64:d8:f9:fb:42:62:3c:48:37:a4:8b:bb:2a:99:c9:a2:
         e1:62:0c:4d:10:a1:d5:a2:84:84:ce:8e:ba:cb:bb:5e:9c:f3:
         3e:ef:aa:b5:d0:3c:a8:d8:b1:99:bf:25:a2:c6:91:aa:3e:83:
         95:c9:c6:60:19:ee:24:1d:68:26:db:5c:8f:63:12:ad:38:c2:
         43:f4:45:2f:7d:53:fb:0a:6b:2a:31:99:15:b7:80:49:e3:73:
         b8:2e:7c:ce:0a:d2:07:de:cc:a1:7c:62:ea:45:2d:26:27:d1:
         e9:36:9b:75:4d:96:ff:a7:0b:f8:0a:7d:24:86:ee:24:d1:c5:
         60:aa:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:46:29 2025 by rpki-client