Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          Erk3y7NXNX19tlv3niWU9tBmf3wI1htCr1ieHOh+c48=
Subject key identifier:   02:6B:D2:68:FF:5A:60:E9:AF:12:67:81:39:11:2E:3A:0B:E3:7C:10
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          85
Signing time:             Tue 13 May 2025 05:47:46 +0000
Manifest this update:     Tue 13 May 2025 05:47:45 +0000
Manifest next update:     Tue 20 May 2025 05:47:45 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: UOlKH4WTLBY33aLdrb9rER1IpsL4euwOMJ32NkadJGM=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: May 13 05:47:45 2025 GMT
            Not After : May 20 05:47:45 2025 GMT
        Subject: CN=6822dd02-e825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:1f:b5:73:69:28:59:c0:b3:1f:e2:dc:af:
                    76:bd:c4:0f:f9:66:43:11:8c:c8:58:a3:de:99:47:
                    75:ad:8c:82:33:68:f1:e5:93:e6:9a:ae:5b:cc:5d:
                    97:3d:a3:da:bd:5a:cc:40:e7:a3:25:45:0b:e9:c4:
                    48:34:7d:55:0d:ec:a8:13:ef:75:78:8a:9b:f1:fe:
                    66:e9:01:68:c8:6e:b3:9e:dc:a0:4b:da:ee:83:7f:
                    41:a2:7c:47:2e:80:d9:7e:b5:8d:03:56:50:34:78:
                    cb:1b:af:91:a0:81:7f:c1:7d:6d:37:70:6a:c6:46:
                    15:6c:a9:01:0e:f0:6a:45:a9:dc:8f:da:7a:68:5a:
                    7d:27:90:40:2f:ed:ca:a0:50:b6:bc:99:ba:e4:fb:
                    c3:50:d2:69:b4:0b:e6:ad:03:a8:80:29:8c:fb:c6:
                    b9:99:eb:0b:a4:c4:fb:b8:4a:bd:8d:ba:c6:37:c2:
                    56:f6:ff:83:3e:2b:40:29:1d:06:8a:a4:58:66:7f:
                    36:a7:c4:51:fc:8a:46:04:90:ad:05:68:60:6c:e3:
                    41:25:5f:2e:55:77:e4:79:8a:3f:a7:7f:7b:38:d8:
                    28:5c:80:32:70:a6:99:55:4c:bf:cb:5f:a1:64:63:
                    a2:aa:0e:a2:5a:cf:fd:3d:6d:73:36:e1:7e:c1:5f:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:D2:68:FF:5A:60:E9:AF:12:67:81:39:11:2E:3A:0B:E3:7C:10
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:fa:75:74:c1:41:e8:de:da:2b:d0:c9:eb:ad:da:d2:81:
         26:9f:0a:03:46:c7:1b:69:28:72:48:87:6a:20:a5:4d:b0:3a:
         d6:94:02:5a:77:11:ed:3a:43:eb:d1:1d:fd:7c:18:e3:3f:54:
         9a:79:4e:50:08:1b:c1:b2:78:b8:af:75:a6:bc:ef:48:09:41:
         a2:7b:15:6d:4b:3c:06:1d:e4:c7:04:a7:93:75:41:5a:2c:3f:
         fe:53:38:2e:e0:bc:da:be:be:56:a5:75:94:16:18:41:f3:46:
         b5:26:91:e0:9d:ad:7f:08:74:46:56:6c:04:eb:10:57:e4:c3:
         f5:7a:db:6e:6a:e2:2a:7f:a3:94:f0:ba:a2:1e:ed:35:45:cf:
         1d:c3:80:5a:da:75:7b:ce:d8:51:13:0b:13:da:98:3d:b6:45:
         a6:4d:2f:9d:b2:51:c9:1d:8c:4e:3a:1b:ad:52:a9:74:e8:00:
         a5:6d:77:ce:8e:67:22:9c:78:ae:9a:7d:94:96:bb:d9:1d:64:
         3b:b9:48:88:5f:01:c0:53:e9:94:02:8a:92:d0:4a:25:57:78:
         3d:4e:70:33:d0:16:83:66:eb:7d:82:e9:2f:42:8b:3c:c2:d6:
         dd:0a:02:7c:9b:33:1a:d7:8e:57:95:de:32:eb:eb:e6:cc:28:
         49:cb:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:23:05 2025 by rpki-client