Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
File:                     gyMz5kxMiwtYbe-Te7liSCG4wd8.mft (raw, json)
Hash identifier:          sYf1USOhaEqEP4Av627dLsFf8PdgrUH3VGZeqC1ytLc=
Subject key identifier:   EE:E6:3B:4C:88:12:9E:CE:50:AC:9E:60:B0:82:A9:00:56:29:AE:7A
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
Manifest number:          0857
Signing time:             Mon 12 May 2025 20:32:42 +0000
Manifest this update:     Mon 12 May 2025 20:32:41 +0000
Manifest next update:     Mon 19 May 2025 20:32:41 +0000
Files and hashes:         1: gyMz5kxMiwtYbe-Te7liSCG4wd8.crl (hash: fC70hJo6sz+Fyj6+tKPrA+dgGEnFjhZhxlCllAe8kAY=)
                          2: 8479151EC72011EA8062547CC4F9AE02.roa (hash: a8T2tDSruvMY8XhGVCjDtKcaR5fee/wuPWX28KfJWEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 20:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: May 12 20:32:41 2025 GMT
            Not After : May 19 20:32:41 2025 GMT
        Subject: CN=68225ae9-83c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:39:89:6c:5f:98:73:dd:45:ba:07:11:67:
                    34:09:02:f1:81:1c:dd:0c:e3:8e:4c:1a:a1:42:dd:
                    0c:ab:3b:cb:74:8b:fc:36:c7:90:af:cd:5d:0b:bc:
                    f7:df:ed:ae:48:47:b9:dd:50:69:0e:a4:23:05:e9:
                    09:a2:55:99:f4:f5:40:7e:2e:0a:60:e2:14:e2:0f:
                    c0:ec:11:79:49:a1:5f:59:99:2b:4f:54:97:33:34:
                    2b:0b:5b:6d:59:20:00:7c:e2:2b:1a:7f:88:8c:b3:
                    9a:25:89:fc:cd:cf:8b:f3:a0:98:14:10:0e:bb:85:
                    a1:14:9a:05:52:55:15:5c:67:78:75:48:ac:3d:02:
                    ce:f6:d9:b7:46:30:a0:af:ca:81:16:69:41:8c:16:
                    d5:74:89:7c:80:e9:c9:7b:81:82:f0:45:cc:f6:41:
                    b8:5a:9d:77:e6:77:f7:b4:4e:a2:e7:ec:af:3b:3f:
                    55:0b:e0:33:b6:49:94:31:3e:33:2f:49:5b:d6:85:
                    5a:95:f9:42:db:a5:99:41:73:06:a3:91:dd:f5:7e:
                    a5:d4:96:b5:fb:e5:17:90:07:00:64:05:67:3b:d9:
                    66:b9:16:e8:82:58:09:dc:4a:2c:d1:ce:72:92:d1:
                    8a:a0:3c:fd:53:08:ae:14:ef:41:21:85:ad:14:7b:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:3B:4C:88:12:9E:CE:50:AC:9E:60:B0:82:A9:00:56:29:AE:7A
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:f8:46:34:1b:b1:c2:4c:df:73:87:29:f7:ef:8a:79:89:
         fb:b9:66:89:bf:17:65:d2:3b:88:47:cd:52:6b:bd:67:af:63:
         29:60:6c:e2:ad:d1:ce:cb:0e:09:85:9c:82:61:f3:97:95:4e:
         c2:10:d8:88:5f:26:92:b9:56:05:50:73:90:f4:03:77:53:44:
         90:e4:b0:eb:b0:70:9d:a8:51:7f:9d:75:35:99:59:f5:f7:2b:
         bd:bf:41:7f:cf:2c:db:c1:da:ef:a9:a7:d2:b4:cc:36:dc:40:
         11:4b:3f:87:75:a0:ca:d1:39:6e:68:fe:89:37:5f:fd:90:de:
         a5:b9:02:91:e4:a4:91:f2:89:1e:59:68:5d:7a:1a:15:6a:23:
         ac:d1:43:d6:2a:01:c0:32:e9:1d:83:92:bb:cd:60:95:4b:2c:
         98:3b:30:94:86:41:1b:8e:60:7a:77:40:91:fe:34:60:bf:fd:
         af:18:18:b6:5d:d7:d2:ab:d6:db:f3:79:d4:49:20:60:c0:cc:
         34:d1:57:19:9b:57:a7:a5:77:84:39:99:b5:15:ac:39:a2:f1:
         0b:79:78:8f:4a:31:27:ec:c2:31:e3:14:ea:73:bd:ce:32:15:
         11:d9:d9:87:d0:94:62:6e:23:68:2a:ee:b1:b0:30:e6:c7:57:
         f5:97:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:26:29 2025 by rpki-client