Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          2M2qi7Sq5A6YZ6jwE0n+r0xzilsJ3Upj4TnOYz9d5o8=
Subject key identifier:   0F:61:3C:40:C9:4A:2B:D2:1C:10:1D:0D:AA:A4:ED:C4:59:7D:E1:97
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          0524
Signing time:             Sun 04 May 2025 23:13:15 +0000
Manifest this update:     Sun 04 May 2025 23:13:14 +0000
Manifest next update:     Sun 11 May 2025 23:13:14 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: vRAqO+KC+sxUC1DOMzMune8Ir9U73ubioqzRIFuSxPY=)
                          2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 23:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: May  4 23:13:14 2025 GMT
            Not After : May 11 23:13:14 2025 GMT
        Subject: CN=6817f48a-8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:37:30:11:6a:59:98:c7:32:48:e0:c9:c8:
                    e6:69:f4:55:5c:65:95:88:b7:31:fe:d6:57:0c:e6:
                    86:6e:32:d0:5a:6c:ef:2f:3b:8b:85:de:98:68:ca:
                    29:a1:da:40:07:d8:56:78:9a:e8:5e:5a:e0:16:98:
                    ef:fa:7f:e4:32:e2:14:41:4b:d8:1e:dc:be:cd:4e:
                    33:0c:d4:5c:b9:31:6d:02:24:f9:e9:ba:bf:8a:ab:
                    3b:45:88:f8:5a:05:f6:58:8f:ec:21:82:b4:50:ba:
                    0e:2d:87:3a:93:90:2a:bd:f0:0f:0e:25:a2:5d:e5:
                    e0:48:ae:69:8f:91:fc:33:24:12:b5:ee:60:5a:50:
                    75:4e:b0:38:10:8f:ba:ac:5e:c6:c6:d5:9a:15:a6:
                    86:2b:a4:98:59:ed:31:97:98:66:37:84:06:71:8b:
                    d6:fa:45:c5:59:7c:1d:1b:07:68:d9:90:b1:93:30:
                    a1:eb:b2:d7:aa:a3:52:46:3d:22:05:d3:ff:75:43:
                    b1:e8:5c:37:08:74:df:77:75:19:56:7c:3d:f7:43:
                    a2:ff:d1:64:ae:fc:78:9a:81:a4:b0:96:e9:92:d8:
                    7a:e2:0f:d5:84:26:e1:3e:35:54:11:69:81:ba:4e:
                    4c:db:9a:fd:7c:ae:08:61:4e:2c:a3:a9:2b:83:6e:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:3C:40:C9:4A:2B:D2:1C:10:1D:0D:AA:A4:ED:C4:59:7D:E1:97
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:aa:1e:e1:74:9b:95:2b:ed:64:0f:b4:e3:f5:e9:3f:24:87:
         3b:8e:f1:1d:ea:64:1e:dc:76:c1:5f:ef:a9:d3:75:80:f3:91:
         ac:e9:d9:18:a5:5b:e7:5d:86:ba:d3:34:dc:48:36:71:5d:d6:
         26:f7:71:d9:05:85:df:f2:d0:58:a3:93:a7:12:ce:3a:96:d1:
         2a:8e:7b:7a:9d:36:c4:43:02:b3:03:b0:32:5c:31:34:03:37:
         1b:7c:4f:be:a1:e7:48:30:1f:0d:9f:6e:fd:5f:05:d6:20:96:
         be:6d:04:8c:f4:a5:b0:05:b7:a6:e8:ee:93:20:3b:e2:ac:b5:
         58:26:e5:57:dc:e4:ea:c4:27:ef:79:ca:92:41:d7:b2:40:d1:
         6b:19:ab:42:ae:0b:3e:e9:cd:68:20:65:c2:f4:3d:6a:d4:7b:
         fa:1b:4f:fc:1c:9b:ef:33:a0:ed:1b:01:84:0e:b2:e6:5e:9f:
         3f:90:2a:54:34:d3:ba:3e:ff:4b:cd:03:c2:c0:e9:ef:1d:e8:
         3d:20:2e:ea:12:c4:e5:64:4d:86:8d:9b:47:04:50:0b:38:f5:
         e7:98:6f:82:77:7b:22:df:e3:7d:c5:81:d8:59:a9:b1:37:22:
         f1:a8:67:0f:a3:7b:bc:0a:95:38:27:01:33:01:75:93:56:62:
         b8:1f:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:14:16 2025 by rpki-client