Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
File:                     4D9YAHuXKQulI0NZeReytqtd0uk.mft (raw, json)
Hash identifier:          mJPQvAZI1GkAzW1iSi6w1fGlyYFXHFUaEHAka9X3d44=
Subject key identifier:   05:69:E1:29:A4:3E:BF:76:F3:5C:E5:82:CF:06:B9:5A:8D:4F:36:FB
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Certificate issuer:       /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial:       05E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
Manifest number:          05E2
Signing time:             Wed 14 May 2025 23:00:50 +0000
Manifest this update:     Wed 14 May 2025 23:00:49 +0000
Manifest next update:     Wed 21 May 2025 23:00:49 +0000
Files and hashes:         1: 4D9YAHuXKQulI0NZeReytqtd0uk.crl (hash: cCVULFLXw4TbT5PjajyDBOnyEU1MHufeAkCGeE0s1Fc=)
                          2: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (hash: /w5fG5I8SVvb6KU0qV88HCDiJhOJmaZaXcIt+zZPytA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
                          rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166646, serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
        Validity
            Not Before: May 14 23:00:49 2025 GMT
            Not After : May 21 23:00:49 2025 GMT
        Subject: CN=682520a1-685e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:63:5b:26:f6:25:30:80:ea:ef:e5:b1:88:
                    11:3c:f1:63:f0:16:53:4a:1f:b2:77:b5:dc:aa:2d:
                    29:61:b9:da:09:74:1e:aa:a2:6d:87:9b:37:c6:5c:
                    4c:05:36:08:de:e9:b9:f9:2c:d3:2c:66:e0:4c:70:
                    31:71:15:13:0f:c9:3f:e2:2b:fb:91:d2:0e:89:c9:
                    cd:c2:06:de:2c:c9:15:dc:fa:e6:94:82:fb:f6:a4:
                    46:5e:ce:28:bd:10:fc:88:70:ad:ad:96:66:0a:8f:
                    31:c0:70:77:b6:c6:f4:4a:a5:4f:bb:9a:c4:7d:0d:
                    70:11:84:4e:e3:18:07:73:59:87:57:c3:dc:97:53:
                    55:71:58:d2:bc:ed:4b:d6:22:ab:d0:1b:28:c6:34:
                    80:23:8e:a6:27:1f:a4:9a:aa:a8:07:ad:dc:55:8e:
                    da:b5:95:74:7b:f7:55:e2:73:3f:32:1f:de:ba:2f:
                    f8:2c:50:5a:ba:70:b8:a4:a9:c7:9a:7c:74:cf:05:
                    e2:2d:d3:5c:e5:45:25:79:72:7a:00:c5:52:cd:64:
                    c5:95:bc:1a:bb:e6:ae:4f:09:31:3f:b7:3e:4e:c1:
                    a5:a4:c3:25:d4:16:09:56:21:6a:7f:b4:bd:54:d2:
                    3a:87:27:10:da:8c:ff:9e:44:9b:c8:96:a0:ce:19:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:E1:29:A4:3E:BF:76:F3:5C:E5:82:CF:06:B9:5A:8D:4F:36:FB
            X509v3 Authority Key Identifier:
                keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:65:88:5d:05:d5:d2:00:bc:0d:a9:1e:aa:c3:0e:92:5d:
         06:9a:9b:e7:cb:b0:51:8e:2a:8c:c0:e5:a3:68:07:2c:8e:34:
         04:3d:17:93:d3:44:0c:9c:0a:0f:77:b8:dd:e5:53:fe:2c:0c:
         24:70:a5:c9:c7:10:42:ba:0e:b6:b1:0b:f7:36:bf:24:19:d2:
         5c:f3:1e:b2:64:74:2b:2d:42:2d:ee:86:cf:06:32:37:52:7d:
         a5:8b:82:e9:ca:01:43:be:88:6d:e5:ea:1d:b6:b5:d1:94:24:
         71:80:03:d1:36:d8:86:f6:4d:96:01:fd:9b:00:75:87:49:15:
         b1:a7:51:38:3c:50:d5:92:45:dc:67:24:a5:ee:63:f8:06:33:
         32:f7:3e:7d:83:4b:6a:4c:70:13:a3:0f:91:ba:80:9c:67:3f:
         2a:c7:8b:00:a6:67:56:77:fc:d8:45:2d:fb:45:35:8a:f4:06:
         98:4a:c2:61:dd:5d:7b:6a:6e:d0:c8:a8:90:46:d4:b6:8a:14:
         85:a5:2d:f9:9f:ea:f3:f6:31:99:6a:a2:5c:78:9b:48:d9:0f:
         cd:0b:22:4f:90:13:9b:5e:b2:de:a9:13:d1:8f:fc:66:c6:e9:
         96:6e:12:15:cc:a7:fe:aa:05:6f:40:c8:b4:9a:0d:e3:8f:c6:
         0d:63:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:37:18 2025 by rpki-client