Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          Qr0ZWMFsoseqafheQigBa00W7mkfvxHEnuXmFKJCC2E=
Subject key identifier:   F4:96:6E:33:4E:86:F3:37:44:91:0A:EA:DC:DF:06:AE:23:D9:64:95
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       053F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          0533
Signing time:             Wed 04 Jun 2025 23:23:52 +0000
Manifest this update:     Wed 04 Jun 2025 23:23:52 +0000
Manifest next update:     Wed 11 Jun 2025 23:23:52 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: ZMFqY2DEdupxR5pCq5V3XM2lhZNCXdmNRvaWboAMMIw=)
                          2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 23:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1343 (0x53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Jun  4 23:23:52 2025 GMT
            Not After : Jun 11 23:23:52 2025 GMT
        Subject: CN=6840d588-2ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:53:e8:15:c2:e7:6b:d3:9d:51:c3:61:80:
                    a4:7f:4c:f6:94:a4:57:67:c2:eb:4b:85:84:37:77:
                    4e:06:63:8b:9e:2c:42:5e:4b:84:06:df:96:b5:8e:
                    44:75:eb:d5:19:ed:a7:4d:5c:ad:d3:9f:8d:48:bf:
                    7c:b8:de:fd:f7:d7:5f:dd:f7:cd:37:a8:41:b4:cd:
                    a3:31:e1:ab:2c:55:43:86:b7:d1:c5:ee:1e:54:ad:
                    18:9d:00:24:53:1c:53:1b:7a:e5:01:d6:dd:2a:12:
                    df:95:f3:f3:d0:a1:17:84:be:70:f3:18:ff:b4:81:
                    dd:40:97:cd:49:df:92:28:b6:fd:43:94:59:f8:3d:
                    11:52:67:c3:7f:54:3b:32:05:86:b4:66:8e:36:ea:
                    d8:ab:3a:21:ad:81:19:15:e4:e8:ed:d2:cf:fb:a2:
                    61:0d:d5:a2:58:10:1b:b9:4a:44:f9:82:0d:aa:b8:
                    fd:52:2b:98:fb:fb:f8:06:af:6e:59:8d:65:87:c4:
                    58:f5:83:ec:59:5e:80:fa:e0:61:a1:f1:1a:f4:9d:
                    75:79:7c:89:29:0d:1e:70:fb:29:0c:e1:15:89:e4:
                    35:70:73:e2:23:1f:08:eb:50:89:d9:03:c1:dd:73:
                    8f:ed:03:cf:b8:10:9d:33:fc:fd:2e:87:92:06:f2:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:6E:33:4E:86:F3:37:44:91:0A:EA:DC:DF:06:AE:23:D9:64:95
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:62:02:81:60:88:12:3e:36:a6:e8:09:f9:ac:a3:23:bf:29:
         1c:ae:07:1d:9c:6a:c3:11:f1:98:0b:df:49:b8:0b:16:f2:6e:
         10:2a:3b:c5:2e:dc:e9:9b:81:25:d5:31:f0:b2:fe:f3:78:54:
         86:10:22:93:1d:44:40:39:e1:7d:22:71:1b:f5:37:de:9a:a1:
         92:a8:8f:69:03:73:a0:b4:71:e9:f5:14:64:a3:31:b4:7b:53:
         de:dc:fa:b8:a6:17:51:0d:56:80:ea:c8:60:45:b6:8f:e1:1f:
         83:27:12:83:f9:df:5f:cf:c1:32:3d:aa:14:f6:7f:76:b9:94:
         db:d8:eb:55:f3:f9:29:e2:fe:d8:50:95:8d:31:05:d8:7c:19:
         20:2c:75:59:80:25:0d:6c:e7:1b:c8:05:50:28:56:1c:a0:81:
         1e:9f:ab:c1:97:e9:1f:b7:6c:e6:e9:65:fb:ee:cb:7f:9c:08:
         8e:c5:79:6e:a5:8c:cc:6d:1c:ec:d1:33:70:42:c4:20:20:fe:
         9e:94:40:1e:48:ef:5b:e3:fa:81:6e:6b:e9:a7:05:97:1a:ad:
         aa:08:81:f0:3d:6b:f9:a2:03:70:0b:f9:77:aa:b6:02:e9:f1:
         15:31:bb:de:a9:2b:20:cb:92:cb:f3:7b:d2:31:d6:4d:8c:5d:
         e9:e2:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:08:27 2025 by rpki-client