Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File:                     iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier:          Z7Hy8NOMuAQcPaDyk0OKHw/kA8LLH1k3QuE0Lasi0Ic=
Subject key identifier:   A2:C6:FE:C5:E0:38:DC:E4:57:CF:43:D1:76:AC:8C:30:71:1E:3E:CD
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer:       /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number:          0708
Signing time:             Sat 26 Apr 2025 21:39:05 +0000
Manifest this update:     Sat 26 Apr 2025 21:39:04 +0000
Manifest next update:     Sat 03 May 2025 21:39:04 +0000
Files and hashes:         1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: a3Oz9ubiFJCav8aNYDibbwCnSXCrMQXIKQA5lOGffno=)
                          2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: j5L+2E8hgdO5g2Py+e+3EamQHHUmrpaxumPJliNw/Wc=)
                          3: 2100BD70343611EF97A95F35C4F9AE02.roa (hash: HQq1GzHEuZXBL5FuTD7w79nd+cfPjMIfL9rjnRYfJPw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
        Validity
            Not Before: Apr 26 21:39:04 2025 GMT
            Not After : May  3 21:39:04 2025 GMT
        Subject: CN=680d5279-877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:ac:4a:e5:da:08:e4:ed:97:13:d7:fd:c8:
                    fb:f4:36:6a:83:bd:14:0d:c7:17:3f:e7:8f:d7:5b:
                    5b:c9:b3:00:85:94:5e:7e:ba:4f:3c:67:d6:17:2b:
                    84:d1:8c:9a:93:fe:12:46:b3:35:17:02:c1:2e:7e:
                    5a:d7:78:57:e2:9b:80:7b:92:6a:7f:7e:b2:60:02:
                    04:a8:2a:7c:6d:9a:b1:cb:00:49:40:f9:7b:8e:0d:
                    32:b8:5a:5e:e6:ed:7b:7a:48:d9:9a:58:9e:09:20:
                    53:2f:e8:ed:02:3c:95:93:8c:24:86:4d:d0:76:73:
                    e2:cf:cf:3c:0a:1f:72:f7:ad:50:11:1e:ca:98:0c:
                    4b:1f:70:0e:ae:86:34:d5:f9:e5:3b:65:f4:61:39:
                    12:01:fa:c6:2e:21:81:51:57:0a:61:7d:49:a0:69:
                    2b:52:62:1c:7f:05:57:60:bd:59:ba:7c:2c:e0:3a:
                    35:18:75:50:75:5d:76:11:40:1f:a1:2a:89:17:70:
                    14:36:84:fa:cc:1e:51:54:73:13:24:a2:ac:d3:16:
                    fb:e3:ef:d9:96:ed:86:0d:08:96:87:5c:05:be:80:
                    2b:81:bd:4a:12:03:ff:7c:39:59:fb:a3:ef:3d:5a:
                    f2:04:d2:22:05:a8:eb:aa:1c:1a:ea:96:de:32:c2:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:FE:C5:E0:38:DC:E4:57:CF:43:D1:76:AC:8C:30:71:1E:3E:CD
            X509v3 Authority Key Identifier:
                keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:01:6e:d4:b0:e0:f7:db:2c:24:02:6f:92:6e:70:ae:1c:25:
         34:dc:6c:89:22:c3:7c:80:46:dd:29:6b:f8:e9:3e:76:0d:4b:
         47:03:2b:b1:c9:4f:d5:f8:36:7b:c7:37:aa:d8:10:48:3f:38:
         be:76:2b:07:29:76:e8:a9:14:86:25:1f:77:77:4b:6a:95:b2:
         45:7c:66:5e:9e:be:6b:bc:d9:6f:87:3e:7c:e3:42:ea:a0:13:
         19:c7:ac:16:74:10:4c:e5:52:f8:fd:75:28:b5:b7:db:e6:a9:
         e4:c8:a2:51:4e:05:77:cd:bd:05:26:95:64:31:04:95:0b:14:
         4a:18:58:8b:6a:05:57:f2:d7:66:64:d8:ae:86:0d:ae:a0:b1:
         9e:f8:7e:40:02:d5:2f:c1:67:38:00:b9:07:58:aa:bb:72:ea:
         88:e6:75:25:6b:03:ec:40:2b:ab:54:74:a2:17:c9:b9:89:a3:
         69:96:2b:28:0e:7b:2b:c6:d9:f2:88:cd:cf:57:5a:cd:57:07:
         c7:8b:02:25:0c:e6:ac:93:2a:44:be:bf:54:c0:08:43:52:96:
         6d:9d:7d:20:54:0d:e7:03:18:16:99:23:66:53:63:8c:43:5f:
         03:c2:73:49:cf:bd:27:e1:74:6b:b4:52:4f:fc:da:44:4b:38:
         ae:d9:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:54 2025 by rpki-client on console.sobornost.net