Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
File:                     cIahuzAxFoOubaYN35fN9zN8tm8.mft (raw, json)
Hash identifier:          joyaMYQ5cDtmXSdS8k32tGMoJ7D8KpjoEgWVfgfNn8E=
Subject key identifier:   62:4C:34:6B:8D:D5:3A:CF:55:3D:77:98:F6:05:8D:79:71:73:81:90
Authority key identifier: 70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
Certificate issuer:       /CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
Certificate serial:       078A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
Manifest number:          0789
Signing time:             Mon 12 May 2025 21:07:03 +0000
Manifest this update:     Mon 12 May 2025 21:07:03 +0000
Manifest next update:     Mon 19 May 2025 21:07:03 +0000
Files and hashes:         1: cIahuzAxFoOubaYN35fN9zN8tm8.crl (hash: WeGtW90m9IKakT7jx2pcI1xguXmcgjQbvOwB9BnqmpU=)
                          2: 736816B806CB11EBB9A51287C4F9AE02.roa (hash: mnRywCOvlKSMzMEwT6a/uyPxhXI/A+zzNgPeDhshPxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl
                          rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E077, serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
        Validity
            Not Before: May 12 21:07:03 2025 GMT
            Not After : May 19 21:07:03 2025 GMT
        Subject: CN=682262f7-f7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:af:60:b0:20:8c:18:9a:cf:6a:e3:0f:cb:
                    f1:01:d6:05:2d:7a:29:b5:d5:e5:15:52:c3:fe:93:
                    37:cf:b3:da:9b:e7:bb:bc:ba:93:5b:2f:af:05:13:
                    df:70:a1:e2:c9:39:aa:38:a5:77:cc:2f:f7:58:c9:
                    99:f2:e8:ee:17:5e:60:7b:2a:96:13:01:9f:f8:d4:
                    64:ef:0a:c1:31:5d:eb:a8:7c:d2:f4:ed:39:6c:e0:
                    0d:21:91:7a:af:8d:3f:82:68:8d:e2:35:32:4a:5c:
                    ab:ea:b0:c6:c2:59:ee:69:19:a2:52:29:3f:8d:74:
                    95:ce:1d:2e:b9:bf:15:db:ad:5b:a2:7e:af:2c:bc:
                    f4:ab:09:c4:80:95:75:64:12:80:19:23:b8:49:0c:
                    b5:c9:49:ae:bc:61:15:9f:b7:9e:70:d8:d4:c8:8d:
                    70:6f:36:14:9b:d2:90:58:ac:bb:58:fc:e8:ad:66:
                    e1:48:29:c1:44:ed:bc:5a:c4:49:1e:a0:c6:56:16:
                    60:af:14:4c:89:bb:f4:49:e5:7a:35:28:7a:2c:20:
                    bd:6e:4b:fb:fd:aa:8a:05:99:b9:5f:16:24:82:61:
                    ed:7f:16:71:57:68:17:3b:45:24:e8:a6:d1:bc:fa:
                    e2:dd:ba:04:84:2c:1c:b9:54:b6:66:88:41:63:d6:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:34:6B:8D:D5:3A:CF:55:3D:77:98:F6:05:8D:79:71:73:81:90
            X509v3 Authority Key Identifier:
                keyid:70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:26:50:5a:98:21:4c:d7:fc:97:f3:e3:65:d8:1d:3f:b7:
         bd:f1:88:b2:55:5e:f0:b9:2c:cb:eb:c4:28:fa:ea:03:06:f4:
         41:12:8e:b4:5c:70:fe:6d:20:f2:d1:4d:01:eb:f0:bf:71:11:
         6d:fd:a7:20:22:0b:8c:b5:0e:9f:13:2a:61:2d:4c:f6:9e:a5:
         d3:1b:ac:23:43:ec:ed:c8:df:36:c6:03:0c:58:8e:46:51:9a:
         ba:1e:40:bd:cd:96:0d:a7:58:8a:20:c6:5f:29:d4:2e:ce:8c:
         74:76:29:63:df:a0:13:64:15:90:ee:6c:bc:fa:97:04:22:09:
         5a:73:e9:50:3e:95:7d:36:90:7f:55:f3:1d:3e:e6:ba:ec:77:
         9a:37:02:23:cd:fb:e5:27:43:8b:c6:8d:21:fa:3b:28:6a:7b:
         5d:d5:0e:18:95:8e:c9:e4:c2:94:c4:0f:48:41:ed:35:41:96:
         6c:98:9d:51:da:2f:83:e3:c7:66:f4:97:77:0a:ea:86:5c:63:
         ec:cd:09:23:dd:41:d0:dd:c3:d0:e9:a4:60:81:9c:6d:d5:dd:
         39:c6:ce:48:cc:81:61:8b:19:be:a7:37:84:59:88:59:74:ae:
         b7:d8:44:1c:33:1e:b7:46:8d:ff:76:16:f0:1c:ea:7a:59:fc:
         bd:2c:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:37:20 2025 by rpki-client