Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          zIqD0T6zA8XwKPGgHy/FGmlWlbt1ZMSyf5dFDPAZgeE=
Subject key identifier:   51:66:A8:E4:92:73:4D:41:A8:93:0F:89:4E:3A:8D:9E:AB:5F:3E:87
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          0181
Signing time:             Tue 13 May 2025 02:53:34 +0000
Manifest this update:     Tue 13 May 2025 02:53:33 +0000
Manifest next update:     Tue 20 May 2025 02:53:33 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: Z8GLQ9CzwySnxHlNbib3oYSQznAqGcvmzdtzmuGXvN0=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: May 13 02:53:33 2025 GMT
            Not After : May 20 02:53:33 2025 GMT
        Subject: CN=6822b42e-3b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:0c:41:60:fa:4a:9d:e3:13:40:e9:f3:d2:
                    d4:8a:cc:b7:00:5e:b8:1a:95:f0:1e:ce:e0:ee:1e:
                    f8:0e:70:42:d1:84:f4:c3:ed:0c:25:06:e8:20:5e:
                    cd:db:ce:ba:8b:60:cf:c6:38:f2:0b:f4:00:ad:a8:
                    dd:43:3d:53:4e:58:5c:82:5c:00:d8:a8:5e:6e:66:
                    7b:56:e8:3c:39:5c:74:2b:f7:7a:22:6c:d1:15:31:
                    6f:6b:9d:dc:f3:87:d3:7d:1f:53:53:da:86:08:09:
                    27:1f:e6:02:85:36:26:74:57:e9:6a:01:fd:c4:0f:
                    84:85:ce:f0:38:2d:da:4d:86:d6:0d:01:44:ca:33:
                    d9:62:9c:c9:d6:a9:47:cb:69:a7:8e:4c:4a:04:1e:
                    85:aa:16:eb:20:35:8e:44:bc:f5:c7:39:62:b2:fa:
                    45:13:fe:c9:4c:1d:92:aa:61:72:ad:d5:a9:97:aa:
                    42:f9:9e:cf:89:8c:af:bb:ab:34:73:7e:97:f2:72:
                    c3:83:02:cf:09:93:5c:81:2f:59:63:a6:62:4b:30:
                    9e:92:98:93:2d:45:53:3c:02:62:1f:eb:d4:bc:54:
                    d4:02:d3:5e:d1:67:5f:dd:c9:3e:85:88:05:70:79:
                    d8:64:34:3f:35:68:c4:42:47:0d:50:78:9f:0c:ad:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:66:A8:E4:92:73:4D:41:A8:93:0F:89:4E:3A:8D:9E:AB:5F:3E:87
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:27:e0:80:85:79:e2:e1:d3:11:19:fa:51:7d:37:ff:ee:32:
         ed:03:f7:cc:95:a6:4f:f9:a1:9c:0b:de:41:b0:48:52:70:d6:
         31:7a:1b:26:2f:4e:b9:40:11:c0:a4:bd:00:2b:d1:0f:bc:e3:
         31:21:12:6d:08:aa:5a:c2:7e:56:88:bf:07:4d:ef:5f:c9:22:
         a5:c7:4f:d7:ac:6e:f1:f6:1d:56:a8:ae:37:24:86:05:78:5d:
         e0:b8:6a:44:ef:eb:ae:c7:5c:61:90:dd:36:72:c4:7f:f9:d2:
         a4:86:94:c3:ae:67:76:77:a1:ef:be:c0:0a:56:6f:c1:3f:61:
         ed:e1:40:f9:61:1e:3f:0c:2c:c7:dc:4e:ae:fa:2c:5a:8f:d4:
         d0:4b:1d:43:9f:29:90:ce:91:e7:06:9d:95:45:ac:7e:30:09:
         45:f0:40:fc:f8:0a:3f:05:f1:c9:ad:85:14:14:aa:84:40:70:
         a1:68:74:ce:be:18:3f:af:78:bd:28:29:77:18:f9:9e:14:a1:
         45:b4:f1:67:c5:be:10:ea:a4:a7:41:fc:13:3c:bb:e7:0a:ef:
         da:16:f6:e5:cf:80:e1:82:fb:25:d1:5d:43:d4:b5:90:d9:d9:
         ab:57:fe:6d:ec:c9:11:36:a5:eb:db:2e:82:e1:6c:d6:62:88:
         5c:6c:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:44:25 2025 by rpki-client