Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File:                     yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier:          UGFt45hJlCiyjp1liWfGDZjfWpyuiPCycST1E6ojGEw=
Subject key identifier:   10:58:50:B6:42:8C:6F:D8:17:BE:27:13:7D:BB:6D:1E:F9:88:3C:98
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number:          0801
Signing time:             Sat 10 May 2025 20:35:28 +0000
Manifest this update:     Sat 10 May 2025 20:35:28 +0000
Manifest next update:     Sat 17 May 2025 20:35:28 +0000
Files and hashes:         1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: mp2t/cYiA23V42CW9VBKX36aDtD5TL1HChHfAsBN8Xk=)
                          2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: 5kUDYmJ4yH0CUdMpxOxfk0FcArn01dfqkN25Zg1CXyk=)
                          3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: t4Mlw7tJOEB0j00nJw/m4xLHs7JGJvrbxajz+Hi3W7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 20:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: May 10 20:35:28 2025 GMT
            Not After : May 17 20:35:28 2025 GMT
        Subject: CN=681fb890-4d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:77:72:b6:de:b1:c9:22:0a:59:4e:6d:7e:
                    23:b9:81:b2:b5:9a:20:02:59:c5:86:d6:7d:27:50:
                    15:b2:2c:e4:88:ec:7a:ef:d6:6a:c0:0c:36:38:12:
                    41:73:47:e4:09:60:a0:c3:62:f0:bc:dc:1c:89:1c:
                    cf:cf:ee:df:3c:5a:93:9c:d5:81:10:aa:a9:6a:cc:
                    75:9f:a9:67:2a:24:8f:a5:7e:79:1c:65:4c:4e:3c:
                    87:e2:2e:4e:30:ad:d8:a7:84:b2:68:74:7a:f2:cd:
                    9e:bb:e8:75:83:9e:a6:94:31:91:c9:e3:b8:e8:26:
                    97:b6:cc:ef:28:77:cc:6d:b9:de:b3:9d:e0:0e:6a:
                    91:26:ab:dd:25:4b:15:26:ef:03:9e:37:22:a8:c5:
                    d5:45:ca:fd:e5:29:b5:3c:3b:72:6d:2b:31:35:6b:
                    ad:2c:d3:13:93:d3:0c:03:ba:ee:e7:cc:5e:8e:71:
                    66:e2:1c:ed:42:64:3e:ce:ea:a3:8a:dc:94:6e:0a:
                    00:f6:7f:59:fc:e1:64:75:3e:ad:62:3a:b3:3a:5d:
                    bd:e4:b9:99:0c:7d:eb:08:19:97:16:cb:9e:26:e9:
                    92:f5:6d:d3:91:e0:ca:08:52:89:58:ae:78:fa:31:
                    2b:c8:99:4a:b7:e5:73:18:c4:e5:cd:80:ab:c5:74:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:58:50:B6:42:8C:6F:D8:17:BE:27:13:7D:BB:6D:1E:F9:88:3C:98
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:48:05:9d:15:cb:34:09:41:a0:50:d9:21:0b:10:64:e0:15:
         e8:dd:78:80:75:9a:2d:23:a1:42:f3:58:39:42:f4:f5:bb:37:
         25:d8:10:e5:02:12:f9:70:8c:42:b5:d9:a6:3f:10:2f:00:50:
         6e:40:01:45:50:8c:e2:c2:7c:b9:12:25:ae:dc:82:8b:c3:08:
         86:39:40:08:6e:34:45:de:d9:72:9b:ba:a9:92:eb:e8:6c:1b:
         31:9b:01:1b:ba:09:5b:23:cb:a7:38:b6:7f:86:06:7d:cd:ca:
         cc:01:59:9e:f9:49:fb:8d:c9:cd:b1:0a:1f:dc:45:d5:ef:8f:
         5b:de:94:9c:f0:2b:f4:b7:99:27:50:53:96:14:11:82:2e:80:
         3c:83:78:30:f5:42:35:f3:f3:ff:90:07:c0:a6:59:7a:70:8d:
         b0:dd:a9:d4:d4:6f:fa:1d:18:80:31:f5:f6:5b:64:f2:6b:55:
         46:5e:50:0d:35:0f:aa:d8:12:f5:58:6a:75:35:ae:89:94:ac:
         85:60:56:67:b0:48:4b:56:9a:f0:bf:aa:bc:ab:32:42:99:16:
         22:58:0d:88:0c:64:a4:a2:69:11:cc:a7:ae:b9:bd:42:8f:1d:
         3e:01:a9:9f:7d:24:a4:d4:68:d0:c6:d3:7c:5d:0e:e7:69:fa:
         ba:03:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:27:01 2025 by rpki-client