Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
File:                     Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json)
Hash identifier:          BMkXx/i25Oamh8chL3zEqxN0erD2pRtf3hUNZdqmXrE=
Subject key identifier:   5E:A2:53:90:86:3D:46:4A:04:DF:CF:16:0F:CB:D3:7F:C0:53:4A:96
Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
Certificate issuer:       /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
Manifest number:          0800
Signing time:             Thu 08 May 2025 20:45:35 +0000
Manifest this update:     Thu 08 May 2025 20:45:34 +0000
Manifest next update:     Thu 15 May 2025 20:45:34 +0000
Files and hashes:         1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: h4zciO5PKB6/2B/94xLW1ylweeq3SX2sQRRxqYww+FA=)
                          2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl
                          rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 20:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
        Validity
            Not Before: May  8 20:45:34 2025 GMT
            Not After : May 15 20:45:34 2025 GMT
        Subject: CN=681d17ef-bc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:49:95:f5:cf:f4:e8:22:5c:ab:32:cc:98:
                    08:2c:15:84:7a:e7:31:65:3a:03:5b:de:68:e2:e0:
                    57:fc:94:d6:01:c1:fe:68:2a:c7:b2:be:1b:e5:a9:
                    7e:27:eb:05:0b:4e:85:a1:46:51:5a:5c:97:32:3b:
                    27:c1:c5:28:8c:8a:c6:f7:c7:65:98:55:b3:34:1f:
                    6b:e3:fb:8f:4b:54:1b:c5:f1:09:b6:bb:e7:68:b1:
                    da:bd:25:c6:7f:86:a6:5d:e5:e1:41:8f:ec:61:93:
                    5e:ca:b9:5a:12:86:26:d1:36:4b:8e:7b:41:b7:ba:
                    a2:4a:63:57:fd:81:c5:71:d1:a9:70:27:b7:ea:b2:
                    e6:42:2b:a0:a9:01:68:d1:0b:71:b0:44:53:f8:89:
                    00:f4:03:88:58:55:48:83:a0:b0:52:c5:f1:db:32:
                    b6:4a:69:4c:e2:75:f3:e5:8f:22:4b:e1:7a:d4:ae:
                    48:6d:f6:a8:af:22:b2:1c:61:3a:e6:5a:dc:8a:f0:
                    c5:81:4e:de:26:43:37:ff:ca:f0:bd:28:a4:c0:01:
                    5e:6d:11:9c:38:7f:1f:6e:95:33:ae:ca:61:71:9d:
                    34:8c:9d:8a:60:70:1b:f9:61:74:a4:d9:2f:d5:db:
                    db:34:59:d3:39:d8:ef:2d:81:71:a1:f6:af:ec:91:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:53:90:86:3D:46:4A:04:DF:CF:16:0F:CB:D3:7F:C0:53:4A:96
            X509v3 Authority Key Identifier:
                keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:4f:3d:66:27:b6:a6:be:2f:73:ca:84:c6:28:60:2c:d1:
         c6:fd:91:2d:d7:f2:25:7f:9c:1c:78:e5:8d:71:96:b5:c9:79:
         38:e3:0c:d4:9d:2b:42:8b:c6:bb:ce:fc:e2:67:bc:6c:c1:a2:
         57:8b:f1:d6:38:c2:dd:19:9b:0a:e2:93:50:d8:42:38:9c:65:
         c2:c1:ef:ff:92:2b:4e:73:fa:48:13:aa:54:89:81:ba:f5:b4:
         ac:ae:36:d4:b7:cf:f6:2c:f9:5e:83:e9:df:6b:58:84:80:45:
         a8:8b:4c:51:2e:29:c4:b9:bd:68:18:e8:6b:ee:87:1f:45:23:
         01:c4:e2:60:e2:c4:72:8f:ee:54:45:79:52:a2:e5:a3:96:5a:
         6a:45:07:e9:74:81:45:a4:91:91:ce:23:48:5e:b7:63:45:29:
         bf:b3:f2:dd:c0:f4:e2:b5:2e:57:42:06:39:8b:e9:38:20:00:
         45:48:f9:41:de:57:32:71:cc:d2:f3:fb:c1:c7:a8:50:21:7f:
         f4:1e:eb:7d:98:c9:8e:95:22:41:4c:e1:44:53:eb:6c:93:e8:
         e6:a8:24:77:c8:ca:0d:b8:f5:90:47:f9:40:d1:b3:73:1e:96:
         5a:6c:5e:99:f7:d7:92:4f:76:95:51:f5:4b:55:6d:fc:60:c1:
         10:69:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:28:04 2025 by rpki-client