Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File:                     y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier:          MJ8H4XO422sA7ZFdd6ntetrberGa3smBSB695tjMe+o=
Subject key identifier:   9F:1A:92:7C:24:3F:07:81:A8:BB:71:77:7B:51:41:AF:BC:C3:9F:50
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer:       /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial:       1B1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number:          1AEF
Signing time:             Mon 28 Apr 2025 16:25:09 +0000
Manifest this update:     Mon 28 Apr 2025 16:25:08 +0000
Manifest next update:     Mon 05 May 2025 16:25:08 +0000
Files and hashes:         1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: iLHw5+aj9SXaQYfYYI6jYBhJhvJAAaAXW9U98sXjoIE=)
                          2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: Jv1d6fF3qu1qMz0c/kGUVQ3xOsIZk2UWH2dC2+4vagE=)
                          3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: hMIakiTTivB+fRa4Rnc2jL//XFH58YMCoj5LWIbNoBM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6939 (0x1b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
        Validity
            Not Before: Apr 28 16:25:08 2025 GMT
            Not After : May  5 16:25:08 2025 GMT
        Subject: CN=680fabe5-f373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:43:32:70:fd:6f:1d:27:41:73:5f:36:d1:
                    54:07:13:8b:0e:6c:5d:af:eb:b5:9c:2c:6a:a2:6e:
                    f6:55:da:90:cb:35:cb:d0:c8:2e:f7:6d:64:61:21:
                    68:d6:03:a7:97:1a:8c:0d:f8:cd:8d:cb:1f:99:1c:
                    9c:b6:1e:80:bb:7a:0b:4f:78:fe:55:55:cc:43:f8:
                    1a:f4:dc:ce:9d:a1:a9:23:38:a5:d3:3b:9a:99:b8:
                    4f:fa:a4:d8:58:03:ba:7d:f6:b4:e1:25:2b:db:8f:
                    ab:50:9b:44:06:03:42:3f:0e:db:ff:0a:7d:da:90:
                    cd:14:52:37:b5:a9:b9:87:14:7d:47:ad:fa:7d:87:
                    d8:e9:a9:41:bf:ea:30:73:87:ea:90:8d:5d:19:5b:
                    52:3d:c8:1b:20:df:86:57:11:62:c8:da:9a:47:84:
                    de:51:dd:8d:b3:40:89:b4:48:78:6b:2c:4d:c2:53:
                    4e:08:0a:77:0a:ac:b3:01:42:af:71:00:e9:ce:a0:
                    46:c7:a8:e8:89:61:22:e9:ff:c0:95:6e:74:e2:b6:
                    f5:20:94:06:f6:56:24:a3:3e:32:b0:01:b0:ea:e0:
                    11:bb:1b:ce:8f:6c:91:35:5a:b1:ef:4a:ac:02:cf:
                    ba:78:a8:6c:01:35:c3:31:bc:6e:e2:f7:53:94:77:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:92:7C:24:3F:07:81:A8:BB:71:77:7B:51:41:AF:BC:C3:9F:50
            X509v3 Authority Key Identifier:
                keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e5:a8:46:39:64:be:f7:e1:57:a9:c7:a2:fd:4b:a7:db:16:
         57:04:d0:e7:99:4b:a8:16:59:55:8e:d3:c1:8c:7d:d1:22:86:
         d6:ee:c6:49:75:55:ce:68:b9:50:44:21:8c:8d:d0:85:dc:1d:
         c2:ca:7b:83:2c:bb:2f:f4:c3:7a:60:5d:c1:82:12:1b:46:5b:
         f5:8c:cf:a3:b2:9f:03:d5:46:5e:6d:97:d1:a2:f4:32:a0:cd:
         b4:71:44:62:ae:55:18:18:ef:38:90:bf:e6:32:d8:1e:2f:66:
         ea:d5:8c:9b:b9:e3:38:10:4a:8c:09:a8:3d:e5:22:b6:97:27:
         d7:2e:de:10:0f:1a:5f:33:12:0a:b2:f9:6d:89:8b:37:97:f3:
         ee:89:a1:37:bd:61:2c:d0:29:19:e1:3e:c0:3a:8a:60:11:d0:
         d5:4e:b0:d4:6e:e8:2c:74:4f:5c:b3:4c:c7:dd:45:a6:de:91:
         2e:7b:56:91:2f:36:02:ba:78:45:a3:b1:c9:23:9c:37:5d:bd:
         ee:6a:e8:47:7a:79:59:a5:68:3e:2a:54:43:af:46:ec:21:2f:
         3b:5e:72:ab:76:95:20:17:d6:81:f9:4a:ff:ab:cb:36:48:e1:
         65:d3:74:da:6d:95:63:3a:d8:9b:4c:f0:a6:fd:b1:14:55:69:
         16:52:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:31 2025 by rpki-client on console.sobornost.net