Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          sXaINLlQ3bkmwzdzF0U72S7NGyIQLJMO6Q9Y7cfUP2A=
Subject key identifier:   7F:37:B4:3D:44:B4:F1:52:45:BA:0C:FA:33:71:F8:DA:B0:05:9A:D8
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          03BE
Signing time:             Thu 15 May 2025 00:41:56 +0000
Manifest this update:     Thu 15 May 2025 00:41:55 +0000
Manifest next update:     Thu 22 May 2025 00:41:55 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: xbPL5ZvU9G2+hzwM90hZEZ5wL+Nb7+eTQCD9ceiUQOc=)
                          2: E966D7528A9411ECA50F3F2CC4F9AE02.roa (hash: Xzb8IT5Uqo9ZdC2yTg4RbM+dXXOtLp1/V8NChuUy/RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 00:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: May 15 00:41:55 2025 GMT
            Not After : May 22 00:41:55 2025 GMT
        Subject: CN=68253853-9979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2d:17:c6:ed:1d:b6:01:8d:f2:8f:4d:40:b8:
                    c2:aa:06:1c:e7:08:37:1d:2a:d5:b5:84:c3:95:8d:
                    f0:16:ec:f6:43:5b:23:64:5c:58:15:54:17:97:e2:
                    12:c3:d3:d8:ad:72:a0:9a:5d:a2:71:9b:36:f8:a3:
                    8f:95:18:41:b3:3b:32:1a:b8:44:e3:c2:39:a0:3e:
                    4a:c4:f5:aa:52:9f:69:ee:09:d6:39:48:44:67:3a:
                    a8:58:c6:fc:0d:b0:06:49:b4:43:5b:fc:a3:f0:25:
                    ec:0f:27:92:d9:0e:e7:16:4d:11:ba:04:f5:c3:f1:
                    f3:c3:2c:ff:db:39:bd:9b:69:eb:66:d7:3e:c9:d7:
                    ae:d4:5a:17:bd:e8:a0:c6:be:b1:91:fd:8b:5a:69:
                    58:85:88:4c:07:c6:be:14:c5:f3:8a:8f:d4:8b:c3:
                    4a:e7:21:38:96:0e:99:c5:2b:d2:67:fd:9f:16:a7:
                    40:7c:bf:96:58:f3:0b:29:97:ee:c6:00:b7:0d:57:
                    a6:be:8c:b7:63:d4:b7:6f:ef:e4:46:f9:ee:5c:01:
                    46:a7:74:f5:9f:c2:a2:e0:15:91:cc:01:41:88:19:
                    9b:1d:ae:37:3a:23:16:06:1e:f0:c0:fe:c2:b7:9d:
                    c4:88:0f:db:3a:11:c5:21:97:42:6f:a9:1f:57:fa:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:B4:3D:44:B4:F1:52:45:BA:0C:FA:33:71:F8:DA:B0:05:9A:D8
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:a3:2b:00:54:f8:da:86:83:55:7f:54:e6:20:5e:a3:94:
         d8:e5:0c:ea:b7:12:f8:c4:fe:fa:f6:b5:96:d8:38:f7:c4:3b:
         9b:b1:76:5b:42:8e:f4:08:bf:19:88:94:ea:03:91:c5:59:62:
         ae:c0:0b:d9:ce:3b:36:07:93:c1:10:4f:4e:b0:b7:0b:d5:12:
         1e:fd:7f:2f:87:b3:f8:97:e6:a9:6a:0e:be:92:85:e2:b1:13:
         c0:2e:b6:ce:2a:4c:d8:aa:e1:b4:88:b0:89:8e:14:b8:d5:9c:
         38:dd:0a:c8:b0:1b:2f:a2:42:31:5d:5c:bf:aa:d1:87:fe:a2:
         24:68:b5:9b:aa:b5:f7:76:47:7f:7a:58:ef:63:e2:bd:b9:61:
         95:c1:72:b9:9f:de:cb:ef:a3:e9:47:a9:a7:f2:9d:8d:70:9a:
         03:6d:73:7a:02:83:ee:53:4b:f7:c8:a2:7b:8b:c1:5e:cc:4b:
         b5:18:57:4a:5b:d9:1e:f7:3b:10:1f:a4:09:d6:e8:af:0e:5e:
         3d:2e:f5:88:9a:77:69:0e:02:41:a1:cb:d9:2a:9c:6d:14:99:
         8d:10:cf:38:85:9b:43:bd:34:14:4c:db:d7:b3:5a:89:20:f2:
         66:e2:d3:36:a0:a6:bb:7b:a3:93:db:f1:e4:90:92:3d:ba:44:
         39:45:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:22:07 2025 by rpki-client