Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier:          qpFb7YHB4X6BALdTXH/VgTQ/b4yZ3aZuMhmAIHIPuYA=
Subject key identifier:   9E:AB:8B:E5:24:33:F9:2A:A2:3F:D8:93:90:B0:A8:F8:D9:9D:AA:A9
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer:       /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number:          4D
Signing time:             Tue 13 May 2025 06:35:14 +0000
Manifest this update:     Tue 13 May 2025 06:35:13 +0000
Manifest next update:     Tue 20 May 2025 06:35:13 +0000
Files and hashes:         1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: 7gTRbs2kemVyjY7gSk19SFUR4hNBmgC5uli+UktMVU4=)
                          2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Validity
            Not Before: May 13 06:35:13 2025 GMT
            Not After : May 20 06:35:13 2025 GMT
        Subject: CN=6822e821-008a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:40:f6:4f:b7:cc:0c:a8:e8:55:75:c3:43:
                    8d:6d:62:1e:c2:7a:17:40:9c:19:e8:55:a4:94:f3:
                    1c:eb:07:e7:0b:be:29:7f:a6:db:e6:3e:07:0f:23:
                    31:56:22:ff:d3:bb:ee:8b:ea:7f:49:ff:c4:1e:11:
                    bf:78:72:1c:98:be:c1:26:58:c5:10:20:bc:49:07:
                    05:98:54:66:bb:f4:db:a8:6a:83:05:5e:2c:ee:ec:
                    d2:cc:f7:43:53:2b:17:97:a0:1c:8c:6a:df:37:c6:
                    6b:e2:e9:d1:7f:93:c5:1a:22:bb:74:61:1d:2e:c4:
                    81:19:50:0e:5c:58:09:22:6b:5f:46:99:dc:4c:d5:
                    b5:41:67:ec:b9:d5:f0:ff:28:db:31:24:aa:ad:b3:
                    83:34:ea:62:99:36:e8:b0:3d:2d:bc:df:ae:89:db:
                    66:eb:27:45:32:4b:8a:f3:af:48:88:f9:dc:1a:51:
                    85:c4:0e:8c:45:b7:a0:90:44:d9:7a:4f:36:73:47:
                    99:80:e9:64:7e:c1:ed:56:9f:68:48:ff:9b:50:a6:
                    10:29:b5:c7:9c:eb:b6:e7:32:e5:6a:a2:17:20:e0:
                    d9:e6:77:43:0a:47:61:6a:ad:cc:c6:68:39:68:ae:
                    ee:6d:81:67:3b:04:50:3c:4a:a2:56:a3:92:5b:1c:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:8B:E5:24:33:F9:2A:A2:3F:D8:93:90:B0:A8:F8:D9:9D:AA:A9
            X509v3 Authority Key Identifier:
                keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f1:da:da:65:6f:2d:fb:f3:9f:91:31:50:0e:23:92:4b:9a:
         b2:03:94:ec:57:da:e7:4c:cf:ff:10:23:48:37:60:65:95:76:
         bd:eb:02:a3:38:0f:17:23:8c:1d:d8:e5:ad:7c:e5:41:77:6d:
         a7:59:55:2c:5e:31:3a:c3:5b:20:35:53:21:aa:92:2a:13:fd:
         85:47:12:ec:8a:7e:96:34:07:6c:14:09:43:3e:a3:d7:7b:d8:
         92:4c:95:02:fb:af:8d:f5:12:6e:06:7f:f6:bf:22:15:d4:59:
         c7:cf:1e:89:8b:e2:f4:fc:66:22:80:93:9b:ac:0b:6e:ed:ee:
         db:e7:7b:51:f4:8e:c1:ed:56:d6:91:0e:aa:28:48:35:d4:af:
         30:a1:6d:3f:4c:6f:34:2e:3e:33:6c:71:3c:69:98:77:29:cc:
         27:9f:8f:4e:f0:a1:2c:03:ca:d2:26:1e:79:b7:8d:d1:07:79:
         a9:4d:85:5f:a9:db:35:7e:ad:63:5d:71:a0:7a:4a:8e:6b:f4:
         69:7b:38:a7:97:42:fc:23:a9:2b:33:a5:2a:59:88:b2:7b:f2:
         78:e5:a9:46:2f:74:de:77:49:21:ab:61:db:eb:6c:8c:da:d1:
         18:e3:4a:bd:32:a4:f8:ed:f2:e6:39:18:37:ef:14:50:b3:b9:
         77:17:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:57:54 2025 by rpki-client