Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          9g2jj/feuATa7zlJhLF+HTY4f3ddDS89V94edClI8/M=
Subject key identifier:   F8:99:F4:95:34:1E:68:AF:2E:38:49:87:E2:1E:1D:1B:C1:C4:17:05
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          F2
Signing time:             Sat 17 May 2025 04:51:05 +0000
Manifest this update:     Sat 17 May 2025 04:51:05 +0000
Manifest next update:     Sat 24 May 2025 04:51:05 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: EoZh+PutJX/0UY6vEYBTdpi8M1irgEUgW2j63X8gYpI=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: V4rJ9+KQ3AK8oq6Dx/jnK6Kq8OonvPFz54Mtrt4dysM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
                          rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
        Validity
            Not Before: May 17 04:51:05 2025 GMT
            Not After : May 24 04:51:05 2025 GMT
        Subject: CN=682815b9-eebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:de:9d:62:9e:15:c2:c4:6b:b5:29:e6:e0:
                    77:73:b8:5d:db:a3:22:7c:ce:c4:68:c1:5e:93:b2:
                    93:54:b7:b7:8d:8f:d2:48:01:e6:e8:14:6b:78:3f:
                    ee:07:76:58:ab:ab:c5:23:4f:e3:1d:dd:ce:05:8d:
                    b1:f9:02:34:2a:ff:11:66:3e:cb:4b:d6:04:95:db:
                    2d:88:f7:a4:71:ec:0f:99:fc:97:30:9c:60:db:7a:
                    db:29:7a:ab:84:de:22:b6:10:e6:f8:bc:12:38:a7:
                    a7:dd:9a:16:49:da:f1:ff:7f:a0:7b:04:af:85:60:
                    37:39:21:15:52:22:ad:05:7d:44:4f:61:a9:72:db:
                    a7:31:c5:b5:e4:b6:2c:29:0a:08:90:f2:3e:62:71:
                    2c:65:11:cb:66:8a:85:76:48:64:d3:b5:01:49:3c:
                    84:6e:e8:f0:0d:11:ca:8e:6e:e0:3e:16:a7:b2:04:
                    cd:bb:f4:3d:33:b8:a5:8a:a8:01:bb:3d:7c:fb:51:
                    a4:c8:d9:30:1c:6f:1c:34:d1:bf:63:ca:97:d8:03:
                    b7:e3:39:64:cc:92:32:09:95:83:81:39:a9:a2:de:
                    04:d7:56:46:9a:09:bb:6c:ce:98:c1:87:04:dd:fc:
                    a9:e5:26:26:7a:3f:3d:10:96:55:28:a7:02:ce:a0:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:F4:95:34:1E:68:AF:2E:38:49:87:E2:1E:1D:1B:C1:C4:17:05
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:48:41:29:2c:02:90:18:24:84:8e:47:c7:32:9e:33:fd:
         05:61:64:36:b0:0d:94:1e:dc:36:93:9a:4f:4a:a8:b9:b5:c6:
         16:3f:bb:c4:fa:fe:e8:02:71:ba:83:bf:45:91:1d:12:db:9f:
         24:27:d6:66:a6:a4:09:70:00:f8:04:27:a1:eb:22:03:7f:35:
         10:68:f5:19:0e:8e:9a:da:20:26:81:5e:82:f1:57:80:b9:a3:
         47:b3:8e:8f:26:46:b1:a4:53:6a:d7:f1:ba:c3:9d:38:6e:33:
         d7:99:78:86:c9:18:a2:b4:b4:3b:6d:55:1e:cc:9b:a2:b4:86:
         74:ec:68:0c:1f:4b:9d:fe:e2:6d:be:f8:0e:44:80:a1:89:12:
         e9:d8:d6:4d:a7:ec:c7:b8:a6:4f:a2:4a:75:60:57:36:22:7f:
         fc:4a:6c:7a:92:22:f1:59:bb:6c:19:41:95:38:6c:e4:4b:87:
         15:c9:a9:e3:a8:e9:e8:c4:b8:4b:e7:59:19:64:bd:8c:8c:22:
         ca:38:60:53:17:65:35:b8:1d:cd:aa:ba:7e:78:cd:22:91:26:
         7d:37:dc:a0:8f:12:f6:d8:23:2e:76:c6:a1:c3:b1:94:26:0f:
         a8:86:a5:21:89:e0:92:1a:55:d3:4f:8d:14:75:6e:16:a9:eb:
         2c:48:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:29:54 2025 by rpki-client