Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
File:                     lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json)
Hash identifier:          hyrdyBY92EoXGZfz550IQoux3AOFGWRrUtVsUbWryOg=
Subject key identifier:   EC:9E:DE:3B:44:7D:39:3F:14:35:C1:B6:15:5C:56:BB:6E:E0:0D:3C
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       07E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
Manifest number:          07C7
Signing time:             Wed 14 May 2025 21:23:35 +0000
Manifest this update:     Wed 14 May 2025 21:23:35 +0000
Manifest next update:     Wed 21 May 2025 21:23:34 +0000
Files and hashes:         1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: bAnC4NgQNuBQ1SmalOJ6xVbdU143UTE//qiO1Xr624M=)
                          2: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=)
                          3: 9D594A509FFB11EF9E614409C4F9AE02.roa (hash: fpSWb3+1/or+BPPYOQwZNVSa0gpgbLnYUKAHGw/tdCA=)
                          4: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: iRd1/ZHW+2xlwhXyNjL/uUSU9QGRKaTGijCT9xr8AHM=)
                          5: 7F81B29AD24311EFA5E5B012C4F9AE02.roa (hash: bBRIJf+7fUSvuqh5dd6ayigZtBMms6tUQ/qVmqSY6fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: May 14 21:23:35 2025 GMT
            Not After : May 21 21:23:34 2025 GMT
        Subject: CN=682509d7-6087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:b0:88:1d:ee:05:81:8f:88:c2:ce:51:64:
                    a8:eb:74:e6:4c:9e:b8:8e:eb:94:90:3f:ef:e0:cc:
                    92:07:f6:16:ed:29:4e:7d:3d:71:6e:fd:62:d9:e4:
                    a2:80:10:d6:c1:16:65:a2:71:d7:98:f2:0f:12:de:
                    13:87:86:fd:1c:4f:10:fa:e8:5e:ce:52:90:b3:c5:
                    c4:4b:b3:52:60:ed:9a:64:7b:a2:ab:be:c3:07:63:
                    39:e1:76:1d:d0:cd:4c:b1:e7:c0:d1:c6:7c:8b:b0:
                    d0:69:b2:53:84:78:27:eb:49:00:0b:48:19:67:a1:
                    74:62:75:69:52:e2:40:0f:a5:4c:f3:c9:5e:3b:c4:
                    66:4c:cb:1a:28:07:fe:88:bf:ea:4f:2f:45:77:f1:
                    90:78:25:c2:ab:f7:26:98:27:04:47:dc:ad:a9:e2:
                    c7:d3:c1:6e:75:4a:05:a0:d1:b6:68:39:63:fe:04:
                    43:e7:0a:1c:fe:18:87:9e:4e:82:f5:13:92:49:4e:
                    ea:49:0b:33:8d:29:76:bc:8c:14:81:ea:66:5a:6e:
                    fc:2f:ab:ee:7f:05:af:54:3a:25:dd:c7:a9:ae:d5:
                    4b:fa:20:07:01:8a:09:22:11:bc:c8:c0:8a:f2:bc:
                    8f:58:5b:e8:4a:76:7d:36:ef:b1:94:6a:87:7a:6e:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:DE:3B:44:7D:39:3F:14:35:C1:B6:15:5C:56:BB:6E:E0:0D:3C
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a3:b2:b1:1d:96:81:48:b6:23:77:ac:e4:15:0e:31:2a:1d:
         1c:7e:92:e6:5a:d1:76:87:0c:1e:ff:44:44:39:02:ff:45:0c:
         e0:b7:f5:8c:b9:ab:fc:8d:4b:df:84:d4:09:79:12:ce:3e:32:
         37:54:86:2e:7d:28:9c:88:ba:58:e7:87:90:6b:09:87:4a:0d:
         22:9b:aa:9c:f6:a8:4e:67:05:f1:5b:78:74:61:4e:f3:23:15:
         4c:13:52:76:67:ad:9f:1a:d1:54:f3:8b:62:56:df:f5:3d:29:
         b4:1b:6f:04:5a:f8:38:47:48:70:f9:b1:7e:9d:13:e9:c1:80:
         c7:28:62:43:20:83:dc:a6:4c:77:c6:e3:e3:13:1e:9f:b0:16:
         98:10:5f:91:5e:cf:83:0c:40:37:63:1f:3e:a1:e5:5c:6a:12:
         ff:df:54:05:07:89:cd:53:db:a3:b9:54:2a:ec:07:e6:6e:52:
         09:6e:43:ee:89:00:3d:e2:6b:8a:05:9a:da:43:6e:0e:c7:f5:
         f5:b1:48:1a:de:9f:24:d0:ca:15:90:a9:d3:75:b2:d6:2b:5a:
         92:cb:08:2c:cc:33:d6:a2:9c:7d:5e:60:d9:fa:c0:23:2f:17:
         d6:42:c0:45:be:ec:72:38:27:eb:17:c1:97:39:e1:af:ce:c2:
         47:fe:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:02:42 2025 by rpki-client