Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File:                     LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier:          CJU3EC6QJrGBc08/e6l1A8kl1bqBifCKO1CYYZclgPU=
Subject key identifier:   81:E6:B2:AF:35:1D:CD:68:30:BB:B0:2D:28:83:30:CD:01:13:C9:F3
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer:       /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number:          022C
Signing time:             Thu 15 May 2025 01:55:54 +0000
Manifest this update:     Thu 15 May 2025 01:55:54 +0000
Manifest next update:     Thu 22 May 2025 01:55:54 +0000
Files and hashes:         1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: 7INbvz4sheeognyBPr2aCWIMrm5dxZ/vnB2esAjXWCI=)
                          2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=)
                          3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
                          rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 01:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
        Validity
            Not Before: May 15 01:55:54 2025 GMT
            Not After : May 22 01:55:54 2025 GMT
        Subject: CN=682549aa-191f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:34:9a:40:94:4a:02:9f:4c:3c:13:eb:13:
                    c8:64:da:d3:61:e6:97:41:72:a3:61:11:d6:33:0e:
                    b1:62:db:6b:93:bd:ba:7a:88:e5:b7:e4:a1:86:ea:
                    87:b4:fe:66:2e:0c:82:b9:c3:ae:a8:97:dd:9a:7a:
                    7d:a7:da:df:c3:8a:e1:a5:4d:7c:56:30:0a:74:e1:
                    06:f5:54:a9:b6:81:47:32:57:b4:51:aa:df:2a:66:
                    c2:45:3b:3e:a8:cd:6b:5c:29:55:4e:e6:c9:50:53:
                    36:27:a3:ca:9e:25:4c:79:73:d0:1a:4e:36:d0:8f:
                    ac:b0:b3:14:60:80:6e:53:c4:8a:0b:c7:5f:ab:08:
                    f8:5d:32:9a:4c:d1:6b:fd:9c:62:40:04:d0:14:08:
                    b3:40:7d:25:40:36:10:42:6c:f3:45:15:e7:25:c4:
                    78:98:6c:cf:19:44:64:81:de:6d:f0:cd:7b:25:d5:
                    45:c4:3b:c1:c0:6f:21:39:e0:ad:8c:be:de:bf:06:
                    45:75:3f:be:85:b6:37:44:76:67:fd:38:16:db:e9:
                    a2:2b:0d:43:b3:f1:6e:6f:d8:a6:05:b2:74:5e:a6:
                    ee:7b:c3:e1:c1:37:77:4f:c9:c9:d4:49:9c:62:d2:
                    2f:05:84:7b:9e:bf:09:53:1d:6d:a9:cc:0a:cc:32:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E6:B2:AF:35:1D:CD:68:30:BB:B0:2D:28:83:30:CD:01:13:C9:F3
            X509v3 Authority Key Identifier:
                keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:5b:c1:fb:c9:c2:a7:08:0e:87:4e:09:5e:5e:02:be:61:
         63:83:e7:d9:0c:70:77:b6:49:a8:71:52:6d:f1:48:d4:ee:4f:
         5b:41:8c:c8:0b:14:f8:8d:56:46:35:e0:75:cf:54:f6:d7:63:
         e6:88:43:32:c2:f3:23:e7:52:46:5b:33:2f:a8:0c:1f:98:40:
         78:43:a8:f8:fa:92:9a:af:d8:80:fb:b9:39:ed:a6:9a:79:d3:
         49:f3:2f:63:f3:2b:04:c8:fa:e2:de:8e:f3:b7:fe:1a:6f:bf:
         f7:b9:a4:45:5b:65:32:ba:d0:61:68:3f:b8:bb:8a:91:c1:21:
         96:a9:72:b9:2e:40:3b:0a:4b:50:e3:72:36:9c:c6:9a:f7:4e:
         07:6d:d3:73:23:c6:eb:66:a4:14:1f:b2:0d:28:5a:a9:44:d7:
         a7:54:66:92:22:ef:d6:68:25:e7:7c:e1:3f:82:61:cf:d0:6e:
         51:a9:9e:93:85:b5:d4:20:77:87:ef:c5:d4:4c:8f:f5:6c:08:
         4b:2f:6f:e9:d6:07:a2:59:9e:67:0d:bd:aa:ee:d4:7e:63:90:
         cd:e3:a0:68:cd:73:7f:26:90:ee:1d:15:0e:25:03:a1:bb:df:
         dd:0f:92:07:f1:13:df:c3:69:c0:82:18:03:1e:00:70:bf:02:
         30:1b:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:11:42 2025 by rpki-client