Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
File:                     6JNyY8Gd-yOWz0THcFJD_MJujzo.mft (raw, json)
Hash identifier:          kMTNd21bKn1R9J+sGF5ZBHykxl25dHUJYwPMRdZqUcg=
Subject key identifier:   CD:68:99:91:78:25:23:0E:8B:F9:2C:E8:F1:D4:A7:4B:8E:07:AE:95
Authority key identifier: E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A
Certificate issuer:       /CN=A913827A/serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
Certificate serial:       0302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
Manifest number:          02FD
Signing time:             Sat 05 Apr 2025 01:23:58 +0000
Manifest this update:     Sat 05 Apr 2025 01:23:57 +0000
Manifest next update:     Sat 12 Apr 2025 01:23:57 +0000
Files and hashes:         1: 6JNyY8Gd-yOWz0THcFJD_MJujzo.crl (hash: MEQKIhgaPiwDBhSwRBHU1UBhG2po8Jedlj4FMP+jIOI=)
                          2: F89476D4CF1E11ECA610684AC4F9AE02.roa (hash: gItlJTY1+dGcH3o+59HiIic+mOzBUYAhWZ8QAU9v7JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl
                          rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913827A
        Validity
            Not Before: Apr  5 01:23:57 2025 GMT
            Not After : Apr 12 01:23:57 2025 GMT
        Subject: CN=67f0862d-c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:3e:7a:c0:e7:10:ab:50:d3:18:74:df:81:
                    95:9b:50:44:cb:eb:d5:54:2a:99:97:55:98:4f:de:
                    34:88:7f:20:9e:45:fa:41:5c:58:83:ae:53:e2:73:
                    b9:d0:9c:59:ac:de:59:3d:1b:ae:8e:47:33:8f:76:
                    e3:a7:9f:e0:04:45:61:c1:40:00:7b:9c:cd:4d:1c:
                    7b:36:d5:9d:bd:e5:d0:aa:e9:fb:5e:37:e1:50:eb:
                    bb:a5:ea:d6:85:b0:d6:90:08:42:cd:4b:4a:f9:d1:
                    0e:2d:98:d4:42:77:aa:b5:2d:d4:c2:83:b1:88:c1:
                    46:49:92:e5:5c:8a:27:61:69:82:c6:40:9e:29:3f:
                    62:d8:ba:86:a3:d9:1f:d0:46:5d:e0:ac:42:47:07:
                    df:20:c3:ed:8a:84:12:84:06:5b:ee:9c:76:32:53:
                    8b:bd:86:29:c7:f2:42:eb:5b:55:79:f0:00:8c:fa:
                    72:92:c4:30:06:a2:cb:34:6c:d5:6a:02:19:15:53:
                    e7:9b:03:a8:9f:6d:bf:50:42:44:ff:54:50:4e:95:
                    42:06:62:c4:bf:b7:8e:85:bf:8f:92:2a:77:40:ca:
                    13:c2:ca:ea:00:33:bf:61:92:51:5b:b3:3b:50:5d:
                    ec:ad:86:dd:11:93:12:fc:d6:26:70:4a:ba:17:9f:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:99:91:78:25:23:0E:8B:F9:2C:E8:F1:D4:A7:4B:8E:07:AE:95
            X509v3 Authority Key Identifier:
                keyid:E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:80:81:64:fc:cc:00:ef:85:38:ba:6e:46:d6:08:f3:fe:
         8e:6f:be:e3:78:46:c2:b9:c5:3e:7a:ba:99:04:fc:71:e9:0d:
         af:90:1b:31:c3:8f:fc:c2:8d:3a:3a:d3:23:7f:fe:45:63:8a:
         8c:dd:d9:7c:85:c1:8e:01:a7:8d:c5:7b:26:00:55:de:dd:72:
         f4:54:92:ff:45:0f:b5:d5:c7:c4:ce:4d:0d:66:2a:c4:c7:e3:
         25:45:18:6a:41:95:59:a8:4c:29:62:7a:a3:97:a3:6b:a4:60:
         77:44:57:71:51:f8:1f:0e:92:bc:5c:6a:69:39:d4:94:72:4e:
         a5:8d:03:d4:23:03:e0:dc:1a:bc:da:cc:9f:cc:d3:dc:78:e6:
         8f:53:25:13:a2:b4:d0:1d:d2:90:43:9e:8f:c9:ba:e5:86:51:
         34:93:33:c6:b0:b3:57:18:75:26:03:54:e0:7e:98:92:39:33:
         0a:02:67:04:e5:69:0a:cc:ab:32:ac:82:eb:7a:ac:c8:6d:4e:
         3c:15:8d:48:db:8f:ee:41:2e:95:df:ef:a9:c2:4c:c0:8d:a1:
         56:ff:04:14:1a:43:72:35:61:0c:13:1d:66:a4:f6:b8:3a:56:
         e1:5f:7d:ea:c3:69:69:4b:65:79:6b:25:7d:de:54:cb:b0:96:
         b4:6d:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:31 2025 by rpki-client