Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          5odt7yDHYowM35FFuRFf54P7JjLHrF1cdJibaGaLgDw=
Subject key identifier:   BF:AD:59:D6:59:21:E9:37:23:1A:51:9E:6C:1E:BE:ED:62:46:6B:D1
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       055F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          0558
Signing time:             Wed 14 May 2025 22:43:17 +0000
Manifest this update:     Wed 14 May 2025 22:43:17 +0000
Manifest next update:     Wed 21 May 2025 22:43:17 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: /9ztLKimM0y7M8WRo6R0wHOK8R0ol16ByOI+AeIvaMU=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: May 14 22:43:17 2025 GMT
            Not After : May 21 22:43:17 2025 GMT
        Subject: CN=68251c85-d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:8e:37:96:25:c9:49:5a:83:42:88:3b:b6:
                    95:8f:28:ab:70:81:33:85:5c:d6:d1:9a:fa:79:9f:
                    c3:48:46:ab:aa:54:3d:68:28:98:89:a3:5d:7e:e4:
                    e4:33:12:88:e0:7c:17:31:9a:3c:2d:e9:9d:52:ae:
                    83:76:88:75:a4:ba:36:ca:09:1f:9c:26:83:48:f1:
                    d6:56:d6:55:0c:9f:e2:99:39:f5:ff:7c:fe:92:bf:
                    25:d4:b3:04:b2:9b:37:a1:12:29:54:0b:d3:f8:32:
                    de:eb:6c:15:15:70:4d:dc:9f:58:10:e1:56:d6:2c:
                    1e:e5:3a:43:19:7a:37:0f:ef:10:76:8c:e0:c2:14:
                    ca:4d:70:5c:a0:90:d2:47:47:10:a5:0b:a1:1c:7f:
                    b9:51:88:ec:93:b4:53:35:3d:42:d9:25:aa:3e:63:
                    bf:9c:73:28:db:5b:68:6c:a0:dd:75:ef:f6:d0:96:
                    d2:3a:42:33:97:8a:fb:e6:e8:b1:29:79:8c:8b:0a:
                    6f:19:4c:36:30:75:41:2e:3a:ec:dc:0e:a3:be:b5:
                    78:19:32:19:c4:a8:8f:15:a8:f3:b4:62:fd:1b:a4:
                    d2:c2:8f:c6:4e:54:31:6b:8e:20:aa:96:43:2e:8c:
                    67:ae:fc:53:87:41:91:eb:e6:8e:98:bc:a7:4c:ef:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:59:D6:59:21:E9:37:23:1A:51:9E:6C:1E:BE:ED:62:46:6B:D1
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:b5:6d:2c:ee:c2:4e:39:9d:f4:b1:b8:fd:e0:5b:6f:50:
         db:df:eb:15:70:1b:77:28:f8:de:9f:95:7f:4a:cb:00:11:17:
         f5:ce:86:fd:57:98:0f:82:ee:be:9f:bd:89:a5:1a:ad:33:ae:
         e5:79:f2:96:7b:02:9c:e5:59:a3:19:cd:a9:b8:13:da:fa:15:
         f4:92:e1:17:b7:43:7b:ac:51:45:cd:3f:76:56:c3:78:a4:58:
         1c:b7:2e:e0:7c:7f:dc:bd:2d:12:12:c1:80:ba:88:2b:e8:42:
         e1:d6:41:30:d2:c3:b3:50:e7:4e:6c:84:88:15:95:83:7c:a5:
         0c:c4:a3:1c:0a:97:93:87:94:00:78:56:83:ee:5d:01:02:e6:
         48:90:f8:a9:3c:25:96:b3:8b:2e:9e:b4:0d:cd:3e:2c:26:f1:
         29:d3:80:d6:1d:d8:72:e4:16:d2:61:a8:a1:93:e3:25:75:3a:
         45:b0:36:32:c3:bc:34:61:91:a2:bb:e9:7a:bb:67:8e:b1:8a:
         3a:c0:0c:5d:97:90:dd:c1:93:08:c7:f7:3c:e6:15:f2:87:43:
         52:94:e5:7c:ff:0a:ce:b4:cf:06:37:ab:c5:30:7d:3f:bc:9e:
         da:d8:9f:b2:44:a1:98:ad:6d:57:91:30:32:d9:9a:95:c4:d4:
         3c:d8:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:09:08 2025 by rpki-client