Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          PDdIlXnhZWRXNtClRyYWgXWzV/Ceb0olZKfOm8zjIw8=
Subject key identifier:   25:CB:AC:42:9F:07:E5:14:E1:25:70:A4:98:38:F2:47:EB:3F:76:C5
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          F2
Signing time:             Mon 05 May 2025 04:09:12 +0000
Manifest this update:     Mon 05 May 2025 04:09:12 +0000
Manifest next update:     Mon 12 May 2025 04:09:12 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: C9Flig8ThBLm0eNtuTQLzIeQT4WCpjgAZqlDF1pBtM4=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: x9GRsqT1r4p+1r+DiQJUITI9RcFAyXCGhnRIsXkFNWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 04:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: May  5 04:09:12 2025 GMT
            Not After : May 12 04:09:12 2025 GMT
        Subject: CN=681839e8-3ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:5e:8b:a1:97:00:42:bd:95:67:e3:5a:20:
                    bf:2d:1e:7e:af:28:fe:15:1d:f0:02:4e:64:0a:fc:
                    2c:83:62:e4:5c:1a:15:1e:4a:b6:99:d7:a2:01:f7:
                    52:5b:e8:b5:04:da:e3:b7:fc:a0:31:01:59:32:52:
                    f9:ea:4e:32:a4:87:2c:eb:41:d9:58:a6:94:7f:bd:
                    df:6b:8c:14:18:53:eb:a7:3b:05:47:22:31:39:10:
                    07:99:94:24:fc:20:4e:75:8d:2c:45:01:a4:e9:30:
                    40:23:1d:92:1e:9e:27:d6:53:b5:90:e0:de:ee:80:
                    b4:6b:49:75:bc:8c:ff:a7:54:4c:cc:da:fc:15:9c:
                    42:55:2b:57:97:ec:7e:92:b7:59:ff:f7:41:3d:93:
                    fb:9a:00:ab:09:3b:f3:8e:f5:75:31:b3:59:5e:d7:
                    47:38:33:b4:d1:c1:b0:8d:34:c9:8d:47:e0:cb:69:
                    c2:75:52:e3:c9:be:70:b2:1d:41:91:ee:49:da:2f:
                    33:cb:9e:a5:98:d5:3d:f1:77:d0:6f:d8:17:d3:ed:
                    a8:6b:17:3f:63:1c:93:8b:41:51:7c:36:72:e1:99:
                    65:08:cb:db:9b:47:eb:b8:f7:66:29:5b:c9:f9:41:
                    0d:7e:48:eb:94:93:8b:18:6d:4f:c0:b3:78:48:28:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:AC:42:9F:07:E5:14:E1:25:70:A4:98:38:F2:47:EB:3F:76:C5
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:22:2b:5a:3c:54:cb:67:85:5e:02:5c:86:c5:a1:9d:11:
         04:78:2c:4b:06:6c:0a:2c:e8:57:59:9f:e5:93:1d:0b:31:c8:
         74:fe:ff:7f:cf:f7:e3:09:78:68:f7:8b:44:3f:aa:02:eb:de:
         3c:16:a7:39:84:6f:bb:17:1d:91:4a:41:2b:c6:ef:f5:82:d8:
         c5:a9:a8:fa:aa:fc:5a:bb:62:03:d2:10:c3:16:28:25:7d:d8:
         32:ce:e6:ae:d8:c1:b7:0b:08:77:d2:ca:f5:12:83:44:c4:4f:
         66:2b:5d:1e:e1:9d:86:05:a9:40:a2:f6:6e:72:b2:34:9a:1c:
         a9:ae:c1:66:94:c3:12:63:a0:61:e6:9b:4f:80:6a:a7:c2:cc:
         2b:d6:4b:fc:6c:d1:00:65:03:7b:a8:8b:79:6b:37:0a:be:7a:
         94:89:c4:6b:06:ec:a3:99:cc:f5:9b:12:57:92:54:46:a5:38:
         db:f4:21:58:22:62:37:85:b4:d2:2c:f0:77:d8:6a:c5:67:29:
         c0:72:cd:04:4d:0f:e9:28:71:a8:10:d1:10:df:fa:8e:64:b7:
         a2:40:32:d9:47:af:49:da:94:81:5f:b3:0e:43:df:c4:4d:e4:
         4b:fe:a9:a1:5b:16:c5:0a:6b:7e:97:91:c0:07:7f:c2:ef:07:
         37:72:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:32:52 2025 by rpki-client