Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          cqaDYuqiZoV1jHQOBYbsG4U1bB0vIFwChF/MmIeJPRQ=
Subject key identifier:   18:F8:33:1B:27:2A:F5:6D:8F:19:7F:D6:32:AB:82:9C:04:95:72:50
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          0704
Signing time:             Wed 14 May 2025 21:59:21 +0000
Manifest this update:     Wed 14 May 2025 21:59:21 +0000
Manifest next update:     Wed 21 May 2025 21:59:21 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: Sro0QXeTUol0tsOGJ8rLrm++UbyUNhr2DTm1d9DsgWU=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: May 14 21:59:21 2025 GMT
            Not After : May 21 21:59:21 2025 GMT
        Subject: CN=68251239-25ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:bc:a5:d1:90:a8:16:f1:4e:ff:82:6c:16:
                    b5:36:1e:ab:c4:10:ad:d7:a4:fe:aa:1c:21:8e:97:
                    49:28:aa:ef:a8:7f:42:9f:ad:f9:d4:89:dc:d3:cc:
                    66:b1:a2:87:36:1e:b1:d5:f3:86:fa:79:d2:c2:71:
                    81:58:5c:f8:b7:6a:19:2c:20:b9:3b:97:d7:33:60:
                    f7:5e:99:0d:a5:99:d3:b9:32:25:d3:53:2b:42:0c:
                    2b:d9:8d:28:35:4e:b1:43:5f:65:2e:37:32:bd:03:
                    9f:1b:d0:c5:f4:b8:d4:25:2e:6f:68:1a:50:a5:8e:
                    b9:5c:86:91:2e:aa:3b:e8:0b:df:bf:47:86:f1:ba:
                    83:56:3c:61:e1:0d:b1:52:fa:fa:6e:a0:45:ac:e8:
                    23:de:8f:90:c8:64:70:49:2b:32:ce:c5:5e:b0:5d:
                    81:2f:c7:22:68:27:e1:c6:fe:08:36:1b:ec:88:8c:
                    3c:a2:10:88:f4:49:fb:f0:f7:7d:e4:37:51:ef:97:
                    83:4a:31:06:ce:fa:a1:4a:bc:18:2d:75:c9:2c:a0:
                    0f:2b:ba:d2:5d:c5:1c:69:2b:af:1b:66:5f:dd:47:
                    b7:d7:72:8a:e6:d1:6c:48:24:62:8a:8e:0a:9c:35:
                    e9:7e:24:6f:48:16:50:a1:b3:5f:bb:a3:4b:5d:f9:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:33:1B:27:2A:F5:6D:8F:19:7F:D6:32:AB:82:9C:04:95:72:50
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:32:1d:9f:7a:23:77:fd:27:b5:25:1c:b0:1f:3f:4e:40:
         24:f4:a5:1f:52:73:e0:ce:96:64:a1:f9:4a:7e:12:3d:9c:a3:
         9f:e4:ef:e9:ad:5b:a5:20:0d:db:6f:50:10:22:68:29:32:42:
         90:85:d1:e4:b3:ba:1a:39:43:2b:96:c7:e3:60:2b:93:40:0c:
         88:09:a3:32:54:99:9b:d4:9c:91:8f:cf:cf:ca:6f:cb:9b:dd:
         c8:2d:b3:dd:fb:f4:dc:e5:67:ee:4f:00:ea:88:8c:fc:7d:0b:
         b9:ba:4d:a4:ab:0e:b2:1a:b4:8b:81:79:a1:ef:38:c5:6c:75:
         e2:2d:f3:e4:ef:17:6a:dc:5d:6a:60:4b:92:bf:87:37:96:26:
         3d:76:4c:a3:54:eb:7a:c8:2f:b6:14:41:84:7f:67:5d:8e:28:
         13:d4:e2:41:6d:d4:1e:19:d0:28:bb:04:c2:13:dd:ed:5a:23:
         20:01:99:83:8f:a5:ba:12:a0:f4:98:1b:bc:03:f0:64:f8:1a:
         7a:19:76:87:e4:e4:a4:8a:dd:22:b5:7e:62:3f:cf:0c:e1:b6:
         50:6e:87:5a:e8:b8:c7:8b:1b:08:78:82:2f:b9:d4:73:37:ec:
         f9:6b:65:fd:48:4e:4b:61:18:9d:38:08:0e:0c:4c:0a:f3:35:
         1a:25:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:32:37 2025 by rpki-client