Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          NK1V5dhdNvDWUidS3yEnzJWzN4vVA5MxPq8MAjw7rbo=
Subject key identifier:   44:8B:2F:F1:EB:57:C7:9E:42:D2:25:23:44:5E:E9:9F:81:02:C1:4C
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          0194
Signing time:             Sun 27 Apr 2025 02:27:21 +0000
Manifest this update:     Sun 27 Apr 2025 02:27:20 +0000
Manifest next update:     Sun 04 May 2025 02:27:20 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: ZWYJPg/mWQW1qk00dmpdvbcyrKkNjZXQhQc9JD8wGxQ=)
                          2: CCA801A2B97F11ED98ED3A74C4F9AE02.roa (hash: 70nEfW6y679vz54r1rMiwd9UT2VLDF6LzETjWTqp0aI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: Apr 27 02:27:20 2025 GMT
            Not After : May  4 02:27:20 2025 GMT
        Subject: CN=680d9609-70a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:d9:f2:94:d4:14:a1:3f:68:cb:a6:dc:c0:
                    91:63:34:23:e0:62:7e:60:e3:a6:56:21:f1:6b:21:
                    ee:8a:66:7a:51:cc:25:bf:77:c2:fa:21:27:54:85:
                    73:38:f1:bb:f6:5e:6e:88:aa:9b:54:b8:6c:89:b7:
                    8b:31:e9:af:f1:9e:6c:65:da:e8:1e:53:fd:05:a0:
                    72:e8:bc:ac:ae:b4:84:cd:87:42:2b:4e:b1:5f:13:
                    41:3e:53:1b:5b:a4:5c:64:ba:8a:2d:e4:64:67:aa:
                    c2:4c:f4:db:56:d1:d4:87:a8:74:eb:4a:bc:44:c3:
                    b5:d9:47:95:4a:a5:ee:a5:5e:68:a2:77:41:fc:80:
                    9c:b9:90:1c:da:ad:26:f8:1e:8f:51:4a:43:52:32:
                    57:04:f8:71:df:5d:6d:cc:f1:e2:78:ae:5e:1e:76:
                    27:52:c8:cd:8f:61:6b:b3:75:20:3b:da:51:e8:50:
                    b7:80:2f:cb:11:d5:6f:13:78:56:be:23:4f:8c:f2:
                    46:3a:3d:59:10:7c:45:82:cd:e0:8f:c3:dc:46:14:
                    8e:a9:76:3d:e6:16:33:98:bf:eb:69:6c:4c:14:37:
                    6f:51:a0:cf:f3:82:c6:54:b0:7a:e9:c1:ab:64:dd:
                    58:af:ad:9c:73:83:16:80:ec:36:3f:90:5f:06:e2:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8B:2F:F1:EB:57:C7:9E:42:D2:25:23:44:5E:E9:9F:81:02:C1:4C
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b0:bf:94:8b:88:0a:9b:d2:b5:b7:9d:4e:a8:c4:e1:99:78:
         2b:c8:f6:a6:29:5c:83:01:ac:34:9a:33:18:bf:9c:05:36:3d:
         ba:62:21:cf:80:0a:48:50:e8:4d:6b:58:35:8f:dc:b8:c4:a2:
         a7:08:3e:3a:11:5f:bf:43:27:f2:2c:ef:08:bc:4d:0b:70:d4:
         c6:ab:dd:f9:92:62:9b:e2:c3:bb:49:97:16:45:23:67:27:03:
         bb:e7:ba:71:d8:b1:36:36:d2:2a:aa:b6:51:04:5b:c2:cb:3a:
         af:f8:d5:93:bb:93:41:b8:93:34:fc:bb:1d:2b:58:ab:5f:ce:
         dc:b1:97:f8:9e:ce:79:d4:73:41:f1:29:3f:19:95:22:2e:fd:
         b6:7c:90:83:f3:a5:40:d0:2a:d2:47:23:99:05:2b:88:61:85:
         50:46:de:66:5c:aa:51:7f:ec:b8:a7:a1:ca:16:76:1f:66:d6:
         34:3f:2d:4a:89:82:56:4e:cc:60:89:d4:1f:ae:ce:d8:a4:15:
         de:16:12:dd:1d:76:b2:e2:0b:4c:52:08:53:b9:3c:fb:8a:15:
         15:4c:bf:b4:73:a9:cc:03:4a:a0:cb:08:b1:de:3a:2d:9f:d5:
         3f:15:47:b6:20:6a:40:61:68:6c:7d:f7:d6:de:2b:6d:74:57:
         d3:07:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:00 2025 by rpki-client on console.sobornost.net