Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json)
Hash identifier:          fwljdeKjUeUuMqKQmVurdjYQ8HfxkgwBtZhZMb+S2dI=
Subject key identifier:   AE:7E:94:BB:D3:D3:22:86:40:2C:EA:1A:0E:26:94:58:6B:96:53:A4
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
Manifest number:          0853
Signing time:             Sat 26 Apr 2025 20:28:48 +0000
Manifest this update:     Sat 26 Apr 2025 20:28:47 +0000
Manifest next update:     Sat 03 May 2025 20:28:47 +0000
Files and hashes:         1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: /J8V+qATyZSMDYk9ELOoJFyoobSo/LvoR3Q+Tq/dx2M=)
                          2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: Apr 26 20:28:47 2025 GMT
            Not After : May  3 20:28:47 2025 GMT
        Subject: CN=680d41ff-e4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:8d:22:9d:32:8e:44:52:69:69:ab:16:a4:
                    cd:19:de:96:d8:9b:0a:3a:7d:c8:64:ac:ee:5f:ee:
                    c8:ee:7e:f0:da:df:50:81:30:fc:3a:1b:f4:9e:2f:
                    eb:0e:b8:96:9f:38:d1:6e:72:32:93:eb:aa:e9:81:
                    03:f7:8a:13:2e:c0:ef:aa:79:d8:cc:b7:c2:63:25:
                    f9:6f:bc:bf:91:62:46:62:d3:df:0c:83:77:0e:6b:
                    55:1a:63:8a:b8:34:61:4e:b2:c3:1b:4b:32:33:98:
                    89:1f:ea:e6:76:c5:25:da:57:cd:90:cb:ab:d4:6d:
                    20:f1:a2:eb:23:16:81:75:a8:7e:e8:8e:77:e7:18:
                    5f:40:e6:b8:37:de:b5:e9:ff:5e:06:a9:12:ad:60:
                    85:fc:c6:d9:3f:ab:d5:a6:ad:8a:47:dd:b3:d3:42:
                    0e:69:ba:0c:e5:ce:cb:cb:49:d6:98:19:e1:f0:4c:
                    86:4e:e9:b6:a7:6b:0d:5c:f3:31:b7:db:d9:fb:48:
                    c5:83:15:6a:b5:5b:77:5e:1e:e5:5b:03:bc:8a:63:
                    8a:db:9a:b6:8e:75:33:f8:24:83:84:95:fa:a4:a6:
                    11:ac:ea:46:96:33:e4:7f:b0:31:2a:90:59:a1:a3:
                    8c:8d:85:f4:3b:b7:f1:90:ff:a4:a6:28:a0:8b:7e:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:94:BB:D3:D3:22:86:40:2C:EA:1A:0E:26:94:58:6B:96:53:A4
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:af:15:95:2f:48:c8:be:14:97:57:c9:90:a2:8a:f1:b8:97:
         19:8a:4e:59:33:45:5b:b0:51:e4:c5:9a:23:ed:97:a0:e1:90:
         b0:58:c4:c7:ca:a1:ec:c9:d8:09:67:a3:db:de:da:30:9c:18:
         a2:98:4c:71:10:a2:97:f8:6e:f2:c9:f6:8d:13:8b:e7:63:ee:
         a3:9c:c7:5e:e0:3d:72:82:a1:68:99:d5:04:10:c2:80:62:d4:
         6d:cd:30:66:3e:77:89:ce:95:04:d4:19:34:10:13:d7:07:c6:
         44:9b:d1:8f:19:b1:9b:45:3b:8d:13:85:f1:59:ba:d5:ac:e2:
         07:e3:3c:11:c2:80:42:83:62:50:21:69:ff:33:f1:86:bc:4b:
         0a:1e:b2:cc:99:c9:95:59:5c:7f:24:af:9c:11:6b:4a:01:d6:
         9f:d3:97:a6:85:63:66:4a:b4:3c:f4:6a:41:6d:a6:2d:ea:3d:
         9b:1f:c6:37:3d:c5:9a:c9:d1:13:c9:8c:0f:6f:a1:7e:1a:a7:
         e9:0f:54:31:70:f2:e1:f1:1a:07:4f:cc:9e:14:47:65:33:b8:
         7d:cb:c2:1d:0b:1e:41:eb:db:7a:3f:10:25:c6:4b:ff:17:4f:
         29:43:94:3a:f1:dc:c3:98:4b:2c:b6:64:0a:70:55:8a:7a:65:
         7c:7d:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:02 2025 by rpki-client on console.sobornost.net