Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          ny3T4aR2dsbZw6Xb4PCOb0hEDh5OHdT1Wsc7rZJCudo=
Subject key identifier:   3E:51:B4:5A:7B:C7:D8:8A:09:40:92:E5:AE:CC:F4:C7:2F:97:F0:D8
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       1486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          147A
Signing time:             Sat 10 May 2025 16:47:36 +0000
Manifest this update:     Sat 10 May 2025 16:47:36 +0000
Manifest next update:     Sat 17 May 2025 16:47:36 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: xbJDUlrbW9SecaaxutG8Wk19xwIdlRzfhAQthVKczRI=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: FG61AEeBt/KwKh7Rq7GtmQk5iB1zq03M8kwTThCsmIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 16:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5254 (0x1486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: May 10 16:47:36 2025 GMT
            Not After : May 17 16:47:36 2025 GMT
        Subject: CN=681f8328-793e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:f1:38:21:cf:5e:85:af:95:bf:52:45:b8:
                    e9:15:00:b2:6e:41:d1:09:0b:cf:97:07:6a:11:95:
                    5b:e7:3c:03:75:ef:f4:e8:21:23:78:38:22:eb:53:
                    47:da:66:33:b8:bb:f0:d4:ef:6b:a6:46:4d:db:80:
                    99:97:2e:a8:52:aa:16:06:c4:48:7f:4f:5d:a7:0e:
                    31:b9:f4:61:92:4f:5e:e1:9f:da:5e:2d:d2:9f:d2:
                    db:a7:23:4c:b5:6d:d3:64:14:e8:19:4c:4a:dc:ef:
                    09:39:bf:f6:a5:3b:64:05:67:c8:e2:dc:11:66:26:
                    46:f7:b8:c6:c6:de:c6:52:95:13:63:30:76:e9:6e:
                    83:c8:f1:6a:6a:0c:6d:f9:65:33:fc:8f:e0:8b:f7:
                    5b:cb:da:5a:db:62:5f:50:62:a5:0e:9f:8d:6f:f5:
                    b0:44:1d:f3:00:24:4a:62:de:3e:b3:b6:73:dd:8e:
                    52:39:b0:54:2d:a1:e0:4e:21:83:1a:47:d0:88:96:
                    75:4c:c8:8b:85:db:98:4e:c6:8f:f1:5e:3d:53:8f:
                    8b:3d:a8:7f:3b:31:fc:e2:a0:87:0c:2a:cf:6b:e1:
                    6e:d5:19:bd:e7:4b:0b:3d:cd:0a:1a:52:b2:53:a5:
                    d5:ac:a6:70:ff:c0:76:a6:c0:5e:cd:95:a5:05:90:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:B4:5A:7B:C7:D8:8A:09:40:92:E5:AE:CC:F4:C7:2F:97:F0:D8
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:5f:00:d7:73:b1:d5:95:e3:e2:68:85:dd:b9:5e:f1:53:
         16:59:5c:bd:8f:ba:2f:75:f6:99:0a:2b:8b:dd:4e:c5:b2:98:
         cd:b2:21:d3:5b:8f:47:27:29:1f:f7:0a:b4:be:0b:d1:dc:b2:
         c5:84:36:0f:85:d7:24:46:3d:4f:6d:e9:98:ba:0c:d8:b9:0b:
         45:ad:0d:94:e8:d2:7e:6e:ff:b9:59:32:fd:34:5f:9a:61:45:
         5d:30:a4:c1:db:a7:68:6c:31:8d:fd:0d:51:5c:b9:4f:22:b7:
         3e:b3:53:c2:a3:1a:f9:01:a2:b4:af:79:a8:da:d9:49:fb:2c:
         22:91:51:4d:db:a2:53:ee:16:27:f2:cb:c0:80:12:8d:38:16:
         23:37:75:f5:e7:26:1d:cb:18:54:09:a4:24:f9:c1:3f:13:00:
         ca:bb:ed:83:7e:69:5e:78:87:49:e2:b4:42:1d:cd:b4:88:fd:
         32:5b:38:7e:49:7b:31:65:5c:38:3c:b8:1e:cc:bb:44:5a:e3:
         97:5c:f7:d4:80:ed:29:e8:72:e7:96:b3:9c:78:f9:b7:bd:97:
         36:54:4d:d9:a4:c5:98:86:ba:bc:e2:8b:0c:a6:ec:fd:36:93:
         66:60:43:a2:fc:2f:7e:a1:19:01:1f:39:27:96:e2:32:7f:0b:
         c9:aa:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:03:07 2025 by rpki-client