Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File:                     _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier:          aE6pGJzbp1tVkkeiRjb4Q8OuQiiX0nDke3DJiJ5WjeE=
Subject key identifier:   6F:36:A5:B1:7C:78:1F:D1:CC:EB:BF:0C:7F:68:78:25:2E:D6:3C:04
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0D20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number:          0CD9
Signing time:             Fri 16 May 2025 18:27:30 +0000
Manifest this update:     Fri 16 May 2025 18:27:30 +0000
Manifest next update:     Fri 23 May 2025 18:27:30 +0000
Files and hashes:         1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: z1ecdIsta64bocMIeWsU3Was7FJM25jzpolaxRMwRQs=)
                          2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=)
                          3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: OxkEmLMGkxV9qU2vxCISEVaV7VxznjkiRbOpszB8G5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 18:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: May 16 18:27:30 2025 GMT
            Not After : May 23 18:27:30 2025 GMT
        Subject: CN=68278392-c215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:a1:c1:eb:5a:5c:06:74:6e:c0:61:55:c2:
                    08:9d:35:b1:2f:70:56:96:04:e5:3d:69:63:bd:b0:
                    59:fe:50:b0:18:aa:48:9e:5a:75:88:bf:b6:fa:0a:
                    d0:d3:37:01:01:b5:36:d2:b0:38:7d:12:4d:20:07:
                    0d:f7:ed:57:27:40:d4:27:b9:57:8b:fe:f2:20:ce:
                    f6:2b:db:06:66:64:c7:3c:a4:32:ce:90:53:f4:0d:
                    c8:44:51:bc:c0:6e:ce:58:19:96:e8:9e:f8:30:c6:
                    ba:b5:18:ce:2b:af:33:02:a0:8a:70:d2:ef:32:eb:
                    8d:92:5b:08:bb:2f:85:cf:79:2e:a9:2b:14:be:16:
                    78:95:dc:48:e9:12:b2:4b:b6:86:e8:80:fc:ea:cf:
                    61:66:6d:ba:f9:78:4d:8d:0c:28:1e:59:c4:76:27:
                    aa:1f:3a:53:c2:b6:65:81:95:40:01:5f:00:05:b1:
                    a0:c9:27:f3:5c:cc:3b:ea:39:0b:b0:fa:46:d2:63:
                    38:84:e7:a0:f3:77:ea:33:36:fb:42:fc:cf:8a:58:
                    f0:25:df:18:f3:e3:54:96:64:a6:26:ed:c0:02:04:
                    5a:6b:91:c3:f2:fe:aa:73:96:e2:77:d4:56:36:32:
                    75:76:74:43:3a:07:00:a5:46:88:86:dc:b4:c0:21:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:A5:B1:7C:78:1F:D1:CC:EB:BF:0C:7F:68:78:25:2E:D6:3C:04
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:d9:ab:11:36:29:76:15:01:86:81:93:6c:10:72:63:46:
         01:94:de:cd:c5:23:5d:63:cb:21:83:0f:dd:b3:08:49:27:69:
         04:4a:a4:2a:6b:11:f7:06:a4:2d:40:9d:07:06:18:db:96:11:
         b1:e4:87:87:f4:21:78:cc:b3:19:29:65:60:2c:8f:c8:d9:97:
         f7:78:d6:7f:bc:79:a4:12:07:67:6f:d5:bc:57:cc:d6:83:25:
         08:5e:c6:5e:24:ab:bc:e9:30:83:d8:ec:9b:b0:1e:9d:43:5f:
         b1:94:fa:6e:d5:1d:f1:41:a8:1c:5e:db:93:f4:0d:38:ec:da:
         ec:20:43:e8:49:d4:c5:0e:ab:9a:f8:12:6e:38:ec:d8:94:7d:
         21:58:e5:28:94:ce:53:15:af:c4:43:8d:6e:0d:bf:da:65:be:
         11:b3:3e:d5:ac:29:fb:20:f8:be:1b:1b:49:cc:5f:af:ce:6e:
         3f:68:14:6c:29:0c:b7:7e:ca:a0:5b:61:41:5b:5e:da:68:b3:
         47:bd:29:34:1b:46:72:ca:16:d6:74:19:27:bb:83:af:1c:24:
         c4:99:d2:89:b6:7c:eb:ab:3e:e5:8b:b2:11:98:6e:e6:52:bd:
         1b:30:7f:d5:85:54:68:fa:ed:37:6e:ba:73:f7:03:4a:d7:6a:
         86:44:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:48:28 2025 by rpki-client