Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          uFJXKAR78jANVikL3ZA3eL+AqVbAiko/0Gw8vcuz+zU=
Subject key identifier:   F1:4A:5F:59:2C:5E:F9:15:0F:17:C1:2D:94:F8:84:12:1A:76:EA:46
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          0720
Signing time:             Fri 30 May 2025 22:02:37 +0000
Manifest this update:     Fri 30 May 2025 22:02:37 +0000
Manifest next update:     Fri 06 Jun 2025 22:02:37 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: mr4SE4VH0iUlakokedHOgdzY7pXlNffkD1hFdKvg/KI=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: May 30 22:02:37 2025 GMT
            Not After : Jun  6 22:02:37 2025 GMT
        Subject: CN=683a2afd-4f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:e1:79:0b:52:22:5d:3d:2a:d4:fa:87:67:
                    eb:29:29:3d:c7:91:3f:05:ba:11:ab:df:1a:5e:7a:
                    fc:6c:e8:dd:1f:41:5b:3e:84:0a:d5:55:fa:0d:a1:
                    76:c1:be:32:8d:a6:82:21:92:20:c1:b5:1a:d3:ee:
                    7a:c7:0c:18:f1:d9:c9:37:b4:4b:10:52:e9:0f:64:
                    03:78:a5:28:e2:75:48:c6:a2:e9:37:7e:02:bb:21:
                    73:f2:b1:eb:6d:8e:bd:7b:8f:b4:8c:28:fb:c6:6e:
                    a1:ca:bd:e7:dd:41:00:2e:25:01:67:92:61:0d:be:
                    45:b5:da:9d:23:ae:99:ea:d6:00:bc:f7:61:a7:ec:
                    c8:fe:91:29:09:7f:0e:8c:9a:34:ec:9e:4d:3b:d9:
                    0d:42:b5:19:db:06:54:83:a7:19:3b:ac:e7:80:11:
                    d4:0b:13:fa:f2:d8:3f:7b:14:9a:3f:96:9f:1e:45:
                    9f:ce:8f:f6:12:b0:1a:0e:5b:4f:c7:f3:c7:7e:74:
                    96:1b:d9:05:f6:0f:4c:ec:32:11:d3:7a:fc:6f:25:
                    28:e2:30:63:d1:c1:de:e6:60:b5:88:17:a5:57:39:
                    44:c4:51:0e:6d:07:7d:00:22:90:82:87:6f:01:3e:
                    f5:cf:28:88:af:83:f3:f7:4d:f4:8a:af:51:0e:21:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:5F:59:2C:5E:F9:15:0F:17:C1:2D:94:F8:84:12:1A:76:EA:46
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:29:77:81:81:05:66:90:3c:2b:5e:94:17:b2:de:cc:8d:c0:
         ac:f5:57:00:3e:e3:16:cc:b0:c8:be:b6:5f:90:94:81:5e:53:
         b3:f1:a5:d8:a7:fc:84:fc:87:44:21:c8:15:b4:71:7e:c7:2e:
         6f:08:f0:e8:d2:b2:1c:ce:80:33:d1:88:7a:d3:d2:53:63:57:
         5c:51:09:a2:9c:e5:78:45:c9:78:da:fc:35:dc:f2:ff:85:bd:
         2e:90:be:9f:36:d0:da:54:5d:69:9c:24:24:fc:35:3a:a2:03:
         bc:3a:8e:a3:34:76:09:1f:83:ad:9a:a7:37:22:74:9f:5d:8c:
         69:93:f1:b7:a4:65:c7:f4:c0:59:15:03:da:43:db:be:0f:c3:
         7b:ba:f5:49:d7:d3:8c:27:08:53:64:2e:e2:65:07:41:4f:e8:
         c1:1c:7f:c7:4e:ee:47:12:86:db:ea:1a:74:1a:23:21:fe:84:
         5b:9b:48:a4:ca:34:1d:6b:97:86:d8:62:cd:46:ff:8e:9f:d1:
         67:e1:66:5d:ae:44:7d:8b:0c:81:df:02:07:64:05:9d:8b:c4:
         c8:80:db:52:76:c0:01:00:f2:0b:df:62:e3:c5:31:00:9f:22:
         50:f5:e5:d0:9d:d0:73:18:ce:11:84:ae:f5:a8:b2:4c:6b:42:
         f0:b8:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:29:01 2025 by rpki-client