Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
File:                     pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json)
Hash identifier:          aW6NrHykb/Mmu+T3uHqRdqvNvhg+dD8RLE9I4cfbFXI=
Subject key identifier:   C3:03:A7:EB:65:F0:8E:61:C1:7B:39:B7:4C:60:BD:52:AA:90:EA:D6
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Certificate issuer:       /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
Manifest number:          73
Signing time:             Sun 11 May 2025 05:37:36 +0000
Manifest this update:     Sun 11 May 2025 05:37:36 +0000
Manifest next update:     Sun 18 May 2025 05:37:36 +0000
Files and hashes:         1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: vRrfVOFfws0G84Jrs86Yp5bjjk5FfTlu/DDv8mPgbKE=)
                          2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=)
                          3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 05:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
        Validity
            Not Before: May 11 05:37:36 2025 GMT
            Not After : May 18 05:37:36 2025 GMT
        Subject: CN=682037a0-1a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:44:fa:e6:d2:af:be:39:43:5a:0d:22:01:
                    4e:33:a8:bb:ea:46:12:bb:cd:b7:bb:52:26:04:3d:
                    bb:34:11:09:92:f5:0d:04:d4:3c:4d:33:92:2e:39:
                    49:e0:a0:35:8f:49:5f:cc:f3:0f:3d:e1:80:0d:98:
                    51:78:7f:e7:a6:45:1b:f9:05:8a:12:69:9e:f1:65:
                    1b:7e:84:48:20:2c:ec:6b:af:f2:a6:5b:1e:3c:ed:
                    3c:34:2e:8a:3f:88:33:7b:15:d8:10:95:18:a4:1f:
                    82:2e:ff:80:60:5a:48:85:ec:85:db:38:3b:1c:1b:
                    99:35:af:5e:d2:c6:4e:fa:fc:9b:8f:ea:f3:ad:87:
                    8c:17:49:df:e8:29:1e:89:82:ec:d1:02:3b:ca:88:
                    be:ba:c2:cc:f8:fb:81:ae:ec:5b:8e:c3:39:9f:94:
                    31:01:7e:d7:96:fe:f0:73:b6:df:d1:07:ca:2f:c4:
                    17:8f:bc:b0:30:69:74:87:69:31:23:d5:9e:cb:ba:
                    f2:74:05:e6:b8:7e:8e:97:3f:dd:92:5a:fb:1c:7c:
                    f6:13:b3:16:b6:71:70:62:21:c6:9c:59:40:13:c6:
                    7f:9e:e6:17:5b:86:b0:b8:a0:6f:46:92:cc:0c:33:
                    84:97:e0:6b:78:08:9f:98:c1:1b:ee:48:c4:6c:e4:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:A7:EB:65:F0:8E:61:C1:7B:39:B7:4C:60:BD:52:AA:90:EA:D6
            X509v3 Authority Key Identifier:
                keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:c8:99:a4:66:1c:ea:8a:ce:a4:48:23:7b:1c:2c:e7:0c:
         64:b8:eb:2f:3a:7c:75:4e:4b:44:08:7a:82:a9:ab:d3:6b:09:
         7d:68:ed:ec:97:f6:d7:da:db:55:b0:75:c1:73:c1:08:6b:ed:
         fe:af:b3:e8:86:d8:e2:b0:0e:7c:fa:c8:c7:b4:6e:83:6f:be:
         09:2a:da:43:1b:61:10:be:89:05:4b:06:6e:03:a9:1b:f3:71:
         db:ef:78:12:08:9c:08:74:cc:e2:75:1a:9e:6d:bd:76:bb:f2:
         6d:68:20:23:25:7b:82:4d:f3:7d:4e:57:91:fb:19:82:cd:74:
         35:36:5a:6c:8c:9e:43:6a:46:75:f0:e8:1a:b4:a8:2b:a5:e4:
         bb:3e:9d:8f:70:fe:89:56:54:c1:35:a2:ad:55:c6:18:0d:df:
         0e:48:58:cb:34:a4:29:4b:4a:44:50:98:20:04:6c:ec:36:a9:
         75:c4:2e:37:67:5a:9b:af:aa:70:32:24:5f:c8:82:44:b1:06:
         40:62:5a:50:b4:35:99:9e:14:de:18:7e:35:e7:3f:1e:e4:fd:
         18:23:ce:1c:b6:5c:31:da:35:0e:79:94:25:dc:e4:2c:8d:bb:
         95:87:da:a4:5e:f3:f5:b2:66:62:7f:fc:72:1a:37:fa:8a:4b:
         fa:10:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:26:15 2025 by rpki-client