Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          jxY0oHxNOAbllEj1tjNKzK+Z94Z8NeG8w8Z1lhAn6lQ=
Subject key identifier:   B7:75:7D:EB:09:7C:4D:4B:83:67:55:FA:25:F7:72:5D:EC:2A:56:9C
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          75
Signing time:             Thu 15 May 2025 06:03:38 +0000
Manifest this update:     Thu 15 May 2025 06:03:37 +0000
Manifest next update:     Thu 22 May 2025 06:03:37 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: WgX+YNvma5SEIxb9EDiqD+dMIqwNqqMKVhYK9K6mcko=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: DRt8K6jlAria6yTB9gWZIhOKN+7LEqAGx7rHUxgtPQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: May 15 06:03:37 2025 GMT
            Not After : May 22 06:03:37 2025 GMT
        Subject: CN=682583ba-61de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:2c:4a:be:ab:f5:e4:00:57:63:af:be:02:
                    2d:44:ef:ea:22:f3:59:9e:13:fb:c1:a9:2a:64:c0:
                    95:45:d0:8f:02:80:08:9a:5c:61:0e:6f:0a:df:cb:
                    eb:4d:ad:57:c1:fd:8e:f2:f4:65:27:b3:af:68:71:
                    e6:cb:3d:4b:d0:3f:46:42:03:b9:bc:85:01:f2:2f:
                    a9:a4:b1:60:46:a5:e4:cd:10:d5:20:65:4d:58:6c:
                    46:15:fc:31:78:a8:b5:68:a2:dc:04:7d:66:25:cc:
                    0d:8e:cc:1e:86:30:ba:62:35:c7:94:ec:10:70:08:
                    f3:40:08:5e:dd:67:24:65:e7:1a:41:a4:58:0b:99:
                    3c:10:18:02:0f:57:2a:5a:f4:6c:9c:e9:70:36:90:
                    97:27:98:4e:7e:bd:4b:df:8b:b1:cf:b5:f7:39:24:
                    88:1b:74:25:e1:56:5d:77:53:53:e6:1b:ee:20:89:
                    f6:7b:f3:fd:07:a0:e5:cc:02:f6:32:fe:60:43:0d:
                    ea:e6:93:08:2e:25:b0:79:9d:2a:59:90:d1:f1:57:
                    40:c9:1e:6c:ee:69:34:6a:d7:8b:2e:7c:ca:c2:8a:
                    af:dd:7d:2c:d0:bc:29:35:90:d9:84:3e:36:40:b4:
                    87:2a:ae:f6:33:3c:a0:75:ad:09:5a:6b:e5:68:94:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:75:7D:EB:09:7C:4D:4B:83:67:55:FA:25:F7:72:5D:EC:2A:56:9C
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:73:07:96:89:d6:32:8a:d3:a6:fc:fe:9b:a7:df:63:0d:
         af:ab:2b:3d:df:13:2b:82:d7:35:90:6e:e8:3a:97:dc:fb:1e:
         97:6c:53:0f:63:24:85:40:ba:34:9e:ea:79:dc:bb:95:47:80:
         bb:36:3b:1a:41:c1:28:5a:93:9e:47:c9:63:69:ef:fe:95:40:
         d8:e9:71:c3:e6:33:9d:4d:3a:82:ed:a9:10:2a:22:07:09:9d:
         bf:48:84:cd:d8:97:fd:51:de:7b:84:8c:9d:87:30:4d:f2:60:
         68:f0:2f:67:c2:6f:f3:99:a3:3e:4d:d1:7d:85:01:58:5a:ad:
         fa:c9:1c:88:b4:3e:86:00:6a:c9:d5:47:7d:7f:e4:a5:b4:d8:
         7a:ad:35:6c:02:6e:99:96:af:65:44:a0:7f:22:29:60:78:a9:
         b4:1c:c5:4c:8f:2a:ea:af:8b:bd:de:70:cf:7d:71:be:a9:12:
         5f:80:46:06:e9:73:7f:70:1c:1d:be:27:81:c0:eb:7b:dd:6c:
         67:45:a4:62:9c:ef:2c:41:a5:f1:1e:c3:a1:1d:f1:9c:24:f6:
         21:f5:36:d1:f1:ce:7e:73:82:b5:c7:cc:f4:66:51:87:8f:6e:
         7f:ee:fc:5f:15:4d:00:86:18:8b:25:a4:cf:48:39:f0:0c:7b:
         2b:0e:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 16:49:24 2025 by rpki-client