Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          5RX2/+aIgisk4Q+FNEAoEPLEMXZ0lzt6HoEk10pJyQQ=
Subject key identifier:   6A:39:84:A3:36:37:1A:D2:B2:55:53:33:03:10:1F:0C:43:CB:0D:83
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          07CE
Signing time:             Sat 10 May 2025 20:46:32 +0000
Manifest this update:     Sat 10 May 2025 20:46:31 +0000
Manifest next update:     Sat 17 May 2025 20:46:31 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 9LcgnGro/Z4jPZ83H+V44+utUZZ4oZ1x5OfR88DHD3I=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 20:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: May 10 20:46:31 2025 GMT
            Not After : May 17 20:46:31 2025 GMT
        Subject: CN=681fbb27-495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:d3:96:2e:62:ac:10:a3:81:28:4e:b5:dd:
                    ef:8f:39:ba:bb:ec:7a:c2:70:04:a9:c2:55:63:15:
                    f9:df:ee:75:b9:ef:47:b8:a7:bf:62:fd:51:33:49:
                    e9:d4:80:47:3e:20:99:a1:cc:ac:7b:c9:22:c7:03:
                    4a:e9:b7:a3:8a:f4:dc:a0:2f:ee:8f:e2:8a:78:f5:
                    71:f6:fe:c9:dc:12:27:6c:70:e4:a8:5f:da:3e:11:
                    3a:f4:6b:75:fe:06:99:b3:5e:ba:45:9b:db:7e:5e:
                    63:82:aa:f3:87:7e:6c:c3:64:b9:68:7d:ff:0a:51:
                    6b:6f:e5:aa:06:53:78:b8:45:f4:c1:b8:05:cc:3c:
                    2a:34:39:98:8d:db:85:1e:e8:73:0f:b5:6a:39:91:
                    56:6a:8a:61:3a:18:01:d1:3d:6a:ea:c2:63:8d:96:
                    3f:86:fb:1f:4a:3c:26:f4:59:78:c2:37:ce:06:f6:
                    66:bb:5e:bd:27:15:03:32:de:0a:0d:21:83:e2:23:
                    87:b6:8e:e8:65:f4:51:48:4c:cf:39:be:c0:a3:7c:
                    ef:d4:42:32:2e:4b:f3:70:2e:8a:6c:f0:b2:51:a1:
                    4d:23:3b:4c:01:22:8a:3d:db:f5:e8:34:75:2a:eb:
                    d6:3a:79:64:da:2b:77:05:3f:9d:88:02:34:13:a3:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:84:A3:36:37:1A:D2:B2:55:53:33:03:10:1F:0C:43:CB:0D:83
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:3b:ef:c7:0f:f4:79:ce:4b:38:d3:ea:9b:bd:68:8c:a1:
         91:3d:c2:b9:0a:37:a9:20:f1:2d:17:00:11:5a:72:f9:11:cc:
         8e:c4:1d:43:27:61:2a:46:8f:43:9b:ee:db:16:31:0a:16:d1:
         90:2b:52:d4:f5:9f:f1:71:38:af:c1:a1:f0:49:77:13:ef:72:
         9c:a3:91:35:af:5c:51:92:ff:2c:e5:fa:df:21:d2:3a:55:6c:
         96:7e:d0:21:e6:fc:38:92:62:90:7d:1b:97:6d:6e:57:44:b8:
         38:9c:6c:c1:30:15:47:59:30:62:37:0e:00:33:35:88:09:81:
         3e:a2:71:13:0e:7f:73:a4:9e:7f:50:71:38:41:62:17:75:70:
         bb:75:d9:79:cc:fb:f6:b7:b8:79:53:db:91:ce:aa:65:07:2a:
         e9:a3:40:fe:42:e6:a1:ea:d6:4e:e3:d7:be:7e:f5:b9:5d:bc:
         ba:6d:b5:df:17:f6:85:55:20:70:a4:b0:1f:9a:95:ac:28:6e:
         be:29:6a:5f:e2:49:ea:d5:e1:b2:e3:5d:69:ee:e3:ea:81:76:
         5b:3d:a5:69:ce:c0:8d:38:34:88:07:cc:c4:6e:59:ae:82:e6:
         fc:c5:b0:6d:a1:5d:97:e3:f7:4d:6f:e9:08:d0:37:78:f2:12:
         55:aa:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:53:16 2025 by rpki-client