Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          XDVB53wDXz9UsfZP7ZX/S2tlBXBwyn8spG55uZXCXO4=
Subject key identifier:   7B:F9:FE:57:03:D0:44:87:EA:DF:92:3F:41:4B:5B:F1:61:BF:D6:D0
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0464
Signing time:             Sat 26 Apr 2025 23:48:24 +0000
Manifest this update:     Sat 26 Apr 2025 23:48:23 +0000
Manifest next update:     Sat 03 May 2025 23:48:23 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: ulKFTbSooZBdVTNau45l7LF99DRTHUOQsBjYuHKKf3o=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Apr 26 23:48:23 2025 GMT
            Not After : May  3 23:48:23 2025 GMT
        Subject: CN=680d70c8-868a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:ce:df:be:3e:9d:78:0f:d3:b2:18:ae:d5:
                    f5:d2:77:6c:71:0d:10:e6:8e:40:59:06:25:26:24:
                    3d:37:d3:09:5d:fc:83:d5:6e:44:1f:8b:34:73:fc:
                    6c:2f:92:a5:c2:be:ad:ec:22:2d:32:1b:25:8e:02:
                    d2:2e:52:bf:1a:74:23:93:98:56:9d:fe:61:b5:03:
                    45:cc:47:1c:fc:ee:ea:82:7b:d1:e0:28:e4:44:79:
                    a5:4f:7a:0f:1c:f3:46:6a:84:42:15:0a:8e:c5:1b:
                    05:c8:84:1b:0f:6f:c5:ff:59:5b:6b:3b:4b:9c:d0:
                    bd:14:10:96:54:36:43:f9:70:73:c5:05:a6:6a:16:
                    f3:0a:d6:88:44:21:fd:98:6b:d8:dd:f1:f1:9b:ac:
                    24:ea:0c:89:f5:64:48:cc:7f:51:b7:19:80:82:e3:
                    1e:79:1b:b0:20:67:f8:f5:53:ba:d8:16:dc:a0:18:
                    45:d6:0e:4d:41:08:21:d4:db:02:4e:08:46:f6:9e:
                    3b:82:49:8f:44:2c:c8:cc:86:07:69:65:34:83:4c:
                    e1:67:c4:ae:63:7a:e7:99:98:0c:b7:1d:0a:3c:cd:
                    b5:12:97:00:bb:e4:90:60:fe:50:41:fc:1b:ef:ad:
                    50:15:12:3e:a9:78:42:97:44:7e:47:50:ca:11:f0:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:FE:57:03:D0:44:87:EA:DF:92:3F:41:4B:5B:F1:61:BF:D6:D0
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:02:b5:5e:d3:66:ba:1b:af:db:a2:72:f5:f2:ba:e1:7f:04:
         b4:64:a2:86:b3:77:fb:97:de:25:86:6b:c8:61:d1:f9:89:ad:
         0e:67:5b:4b:a9:0c:b7:ca:92:82:d3:ca:84:8d:a3:46:90:0d:
         34:79:99:fc:fc:2c:29:92:be:dc:83:9b:4d:93:79:89:18:09:
         fd:ef:cb:0d:25:52:4f:84:79:bf:17:1f:f9:c1:7c:69:03:43:
         6e:0e:84:07:93:71:96:ff:ba:c4:88:ee:7a:58:e5:2a:f2:6c:
         c7:fb:02:cb:de:cd:61:74:76:5e:f4:34:c9:39:a3:e9:67:73:
         b5:3f:56:79:90:c1:c1:81:35:eb:c5:e6:2e:fe:61:8e:94:83:
         e2:bb:53:56:10:8b:08:c5:d8:bf:9d:a0:4d:10:f0:c3:99:2e:
         45:67:49:ca:d1:c9:a9:1e:65:11:3b:9f:ea:43:bb:a1:29:24:
         d0:c7:ff:83:d0:63:7a:33:47:89:b1:c1:7f:f6:b7:73:f8:a0:
         bb:e6:1a:7f:e4:ac:1e:06:73:23:29:e7:25:17:dc:12:17:cd:
         ce:fb:c6:d5:c3:b2:a1:b5:8a:09:b2:f9:2c:5b:63:4d:ff:ce:
         7c:11:eb:cf:a5:1f:ad:2b:d4:24:31:ae:40:28:02:f5:05:65:
         db:61:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:04 2025 by rpki-client on console.sobornost.net