Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
File:                     9i_LOgjeVciXseoID_HMnYub2NU.mft (raw, json)
Hash identifier:          iJIiygrGboYGz+5VL6Ww9txFXOi5Un4moLDzx8S9+dg=
Subject key identifier:   57:E4:7D:77:A7:55:B5:89:1D:18:DD:DA:EB:D9:64:27:51:9D:35:A7
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Certificate issuer:       /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
Manifest number:          02D8
Signing time:             Sun 11 May 2025 00:54:54 +0000
Manifest this update:     Sun 11 May 2025 00:54:54 +0000
Manifest next update:     Sun 18 May 2025 00:54:54 +0000
Files and hashes:         1: 9i_LOgjeVciXseoID_HMnYub2NU.crl (hash: 0HlI13+WKidcqhKdr7qYRFi5I38Z6SP3ABWZhXho75o=)
                          2: 38A83FAE0E9211EEB070CC49C4F9AE02.roa (hash: nmmOZilh2QqIeIttTsVI7Q0aKOKTmdEyN4uM1ispLuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
                          rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC27, serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
        Validity
            Not Before: May 11 00:54:54 2025 GMT
            Not After : May 18 00:54:54 2025 GMT
        Subject: CN=681ff55e-6f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:a4:19:ee:e3:01:39:49:9e:d7:68:7d:b9:
                    c4:3b:58:81:3c:ed:dc:0b:13:50:22:cb:2d:5d:4a:
                    2e:a5:91:0a:c9:a2:ad:43:3e:b7:48:ab:8e:76:c3:
                    d5:c6:af:4f:ee:2d:42:19:5b:34:cd:bd:04:f4:1f:
                    48:a4:bb:e8:2d:5d:89:57:63:f2:a9:af:9e:bb:30:
                    8f:a1:2b:b8:f8:23:d4:13:bd:1e:8f:00:74:af:fd:
                    87:79:ab:fb:98:19:a3:f3:ff:42:1c:aa:63:e6:18:
                    33:79:f6:75:4f:ca:00:83:d3:75:65:63:8e:15:7e:
                    c3:e1:6e:3e:ab:8b:18:9a:4e:eb:3d:3b:c0:d4:13:
                    44:dd:ad:2f:a4:c5:26:db:e8:ce:36:a2:64:16:f9:
                    3d:b8:47:2a:5d:91:48:79:de:db:74:55:5c:ce:43:
                    a5:9a:3e:19:00:e7:84:06:94:94:a5:be:43:48:fa:
                    fa:73:4b:45:f0:a8:31:b9:4d:e5:49:6e:15:78:8e:
                    5e:6b:f0:62:a6:16:f6:81:21:02:cf:28:d0:e7:af:
                    3a:28:5c:74:05:12:45:99:25:61:ab:f8:9e:07:e5:
                    bb:d8:f4:de:d2:40:1b:4a:79:63:ca:8d:5d:7d:5b:
                    9d:55:f9:95:91:10:4b:cd:8c:94:e0:ac:3b:db:f7:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E4:7D:77:A7:55:B5:89:1D:18:DD:DA:EB:D9:64:27:51:9D:35:A7
            X509v3 Authority Key Identifier:
                keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:72:c0:05:84:00:5b:2c:02:8b:78:7f:67:7c:ae:f2:56:f6:
         91:8f:79:cd:27:d3:93:a4:7a:79:1b:a6:fb:d3:55:c4:db:66:
         e1:f6:fc:13:eb:51:b2:18:22:25:72:6c:7c:51:d0:41:e2:9b:
         12:f5:f1:ac:0d:bc:9f:84:df:6b:79:9c:5b:9e:f9:dd:f2:a9:
         04:c7:16:1a:62:d7:5f:41:66:67:5b:81:94:3b:87:bf:f7:6e:
         aa:58:96:aa:d0:64:bd:2c:af:34:66:2b:19:3a:00:dd:26:15:
         04:25:0f:8a:c8:da:35:f8:e4:08:a6:e6:b9:4f:5a:22:ab:1d:
         22:e7:67:6f:8c:c0:a5:27:d2:59:7f:7b:cd:1d:c8:16:7e:36:
         2b:50:16:86:f1:76:aa:f3:ac:4c:58:b6:17:73:1a:9f:89:a7:
         cc:3a:84:c1:67:f4:a1:4c:a7:c2:be:b2:09:c1:23:61:36:07:
         ac:48:a7:7e:a1:8b:63:15:bf:83:83:1a:71:bc:67:92:98:8a:
         e8:47:47:d9:cf:10:09:41:f2:2d:b2:c6:74:d7:46:cd:ee:e3:
         75:ff:9c:94:e5:32:26:52:61:c7:d4:7d:86:4d:76:b1:7c:e1:
         38:3c:73:3c:a5:f9:6c:e5:dd:22:c2:fe:34:bd:bd:00:55:2f:
         3d:a4:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:16:13 2025 by rpki-client