Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File:                     x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier:          Mll56+cepLBrZr4PocaE66q+hYTCC7weou5ADR5/rBI=
Subject key identifier:   F6:83:F3:B9:F9:B9:E9:85:20:5D:5F:FD:96:3B:13:F8:C6:F1:62:6D
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer:       /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial:       16DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number:          16B3
Signing time:             Fri 16 May 2025 16:54:10 +0000
Manifest this update:     Fri 16 May 2025 16:54:10 +0000
Manifest next update:     Fri 23 May 2025 16:54:10 +0000
Files and hashes:         1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: uFMLeBD0zre8MmOlV1l3glIiGuwrBwh/KDAupKJpcuY=)
                          2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=)
                          3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=)
                          4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 16:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5851 (0x16db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
        Validity
            Not Before: May 16 16:54:10 2025 GMT
            Not After : May 23 16:54:10 2025 GMT
        Subject: CN=68276db2-8d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:64:65:ce:55:85:b3:73:9e:d3:40:43:fe:
                    78:48:ec:9e:bc:99:84:d6:d2:0a:7f:59:0a:6d:c5:
                    8a:51:29:b4:a4:c4:0b:77:ca:0c:ab:c8:0e:07:3d:
                    ce:36:50:d1:73:91:d2:77:76:3b:8b:46:86:61:d0:
                    1d:d2:65:fe:6d:24:26:95:3e:d9:56:48:09:b2:eb:
                    f9:e7:6e:a4:c1:83:10:16:b0:f3:65:7a:29:d9:73:
                    6a:12:dd:6b:1f:e4:35:e3:4c:3f:b1:6d:91:92:40:
                    66:9e:4d:bb:2f:31:d7:5e:25:be:01:5f:b3:47:d4:
                    d5:80:e7:63:d2:67:75:cd:31:4b:8e:79:2f:dc:a5:
                    b7:3b:38:51:ab:e8:51:7c:ef:d4:91:38:90:2d:00:
                    25:7e:6f:1f:14:c8:1e:12:f2:8e:80:b1:d5:5d:8b:
                    d1:ef:4c:a4:aa:a3:63:97:4f:6f:f3:fe:f2:54:ab:
                    04:c6:0f:de:8a:f5:a3:7c:1d:4a:84:53:37:64:6c:
                    9c:e5:11:63:2e:b6:2e:3d:a0:7d:21:15:55:61:72:
                    1c:39:d1:4e:0b:ca:e8:f1:8b:89:1b:3c:3c:37:dd:
                    31:95:fb:ea:36:9f:3e:15:00:80:fa:f9:16:ae:ed:
                    77:5d:7b:91:10:ad:db:bd:11:30:67:82:12:bb:21:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:F3:B9:F9:B9:E9:85:20:5D:5F:FD:96:3B:13:F8:C6:F1:62:6D
            X509v3 Authority Key Identifier:
                keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:42:ec:2b:08:80:dd:05:fd:a6:8e:e0:9b:71:52:09:ba:
         85:39:a5:86:11:bd:ee:31:d9:9c:5a:78:cd:68:62:87:d5:c8:
         90:6d:ec:15:7a:76:18:33:9e:ef:e6:f8:9c:b2:d9:5f:08:63:
         cc:3c:4d:30:79:df:b9:46:03:ad:9e:17:a0:84:e5:e2:78:ff:
         3e:4d:05:fa:4a:4e:d5:06:69:bc:29:7d:63:63:d5:55:f0:c4:
         c1:f0:d1:22:3c:94:15:55:b5:34:cf:f7:c8:f4:8f:c2:5b:2f:
         b0:05:19:25:14:bb:82:d2:f3:1f:c7:0a:79:e9:d8:a4:fa:3d:
         27:66:57:52:e7:06:45:3d:a7:fd:d6:cb:b4:d5:88:27:ac:0c:
         a8:33:9d:f7:e4:54:e4:f7:d7:47:a6:2c:e2:17:53:a6:e7:83:
         61:79:3a:02:1f:b7:ec:6b:62:60:32:4f:b3:e4:35:5f:f1:5d:
         16:02:94:4e:9b:5e:40:ff:d3:27:e3:d4:11:7e:20:32:a3:79:
         ef:c5:30:9d:2a:36:1f:74:ed:cd:55:c1:21:4b:70:01:5c:a0:
         a9:7d:0b:83:2a:f6:b4:5e:e1:0a:5a:c7:6a:7e:d1:fc:6b:62:
         1c:0d:e0:94:c6:7c:aa:7d:6a:aa:17:ca:8d:c1:e8:8e:8c:2a:
         31:66:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:56:06 2025 by rpki-client