Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier:          DxuUIS9sF4RKf787Mbm+6VDaS/JygAsjyxojtRhuHkw=
Subject key identifier:   99:BF:AF:21:03:ED:18:B0:A5:D0:F6:B8:EB:72:D4:77:29:56:8A:E0
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number:          03DD
Signing time:             Fri 09 May 2025 05:57:30 +0000
Manifest this update:     Fri 09 May 2025 05:57:29 +0000
Manifest next update:     Fri 16 May 2025 05:57:29 +0000
Files and hashes:         1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 9b9I3zkfg1XdBLePnbbqz4k88mtOgvIfkNvP/NBZoss=)
                          2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=)
                          3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=)
                          4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: NExRy59G2Bw5GmZl7o9I0g3/X3wcdqeJ/PPzQYsGHhY=)
                          5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 05:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: May  9 05:57:29 2025 GMT
            Not After : May 16 05:57:29 2025 GMT
        Subject: CN=681d9949-3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:54:27:af:aa:24:7b:82:54:6e:e3:5a:7e:
                    bc:ca:d3:47:2c:80:52:85:34:c3:6e:c9:f8:db:3f:
                    d9:ad:77:35:28:df:82:31:7f:d9:4d:ac:e0:f4:7c:
                    a7:04:81:c5:c4:44:9a:b7:0d:7f:d5:33:39:b8:8d:
                    d0:70:93:39:94:55:cc:1a:79:c0:ef:c4:07:13:dd:
                    8f:70:47:e3:8c:53:b4:e8:45:7b:be:9e:68:04:1d:
                    7d:71:e5:f8:29:24:53:ba:44:93:00:52:99:0d:66:
                    ea:f5:89:f3:e5:86:db:e7:09:c8:32:37:30:b5:4a:
                    18:80:aa:8c:f7:5f:cf:8f:ce:4e:ba:0d:6d:cd:1c:
                    0f:c1:3c:91:49:06:92:7e:e4:90:02:63:d8:c7:16:
                    8e:95:d3:2d:7f:4d:f7:32:6f:74:14:90:7e:23:7c:
                    ef:9f:4c:da:0f:9c:48:33:04:da:07:5d:66:9c:3d:
                    e5:97:d1:4e:a8:10:a4:ee:fa:7c:97:de:de:bb:60:
                    20:fc:9f:1f:23:5d:65:ad:aa:c4:b8:d9:3d:8e:2f:
                    2c:0f:78:70:d1:d7:aa:44:95:24:3b:75:e5:05:f4:
                    06:be:02:42:0d:b5:3c:bc:04:35:d2:3b:e7:94:ac:
                    62:a2:cf:a2:6a:74:4c:92:8f:8c:bc:3b:16:41:ac:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:AF:21:03:ED:18:B0:A5:D0:F6:B8:EB:72:D4:77:29:56:8A:E0
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:86:13:63:59:75:b2:c9:1f:e2:1e:c0:a1:47:be:d3:ed:
         27:25:c3:20:76:f6:a8:21:95:46:75:b5:43:1d:7f:e8:81:46:
         e7:49:e3:a9:ae:ae:67:89:b4:6b:4b:11:37:43:79:6e:12:c1:
         dc:90:00:92:cb:af:9b:57:59:1d:7c:6e:11:26:9f:96:a4:28:
         19:7c:58:0d:47:06:19:7d:57:fe:5a:e3:8b:20:14:91:ca:f9:
         91:24:01:2c:a8:55:90:43:1e:af:9d:df:7a:c6:3f:a3:5f:24:
         0a:d7:89:9b:bb:ea:a2:71:31:f4:4b:5f:3e:77:9c:58:5a:c3:
         60:23:51:88:c5:d9:1b:54:26:b0:60:54:09:9b:75:60:9b:1a:
         ff:64:0d:f9:47:79:3b:10:4c:ca:30:28:25:14:dc:cb:b0:d4:
         89:b9:8b:78:a2:50:bf:73:30:62:50:f9:0c:ed:1c:99:77:f6:
         31:45:0a:db:67:37:fd:b7:ae:19:82:0b:6c:45:af:fe:ae:ee:
         69:74:64:9b:90:4b:5a:36:99:4b:5f:38:bb:a8:26:75:82:b9:
         c7:4c:c7:ec:32:fa:d3:73:40:4d:5d:5d:47:49:56:e6:b9:98:
         a3:d8:76:13:ef:11:7d:3e:47:66:0e:ad:de:ce:95:28:36:9a:
         1b:75:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:45:34 2025 by rpki-client