Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          nltj9sm8o506ZNoHu1Jgnq0xQGBIafMz1/1eDATaZCU=
Subject key identifier:   DD:91:3B:00:08:1C:04:8C:67:C1:BE:FA:06:0D:2E:71:39:75:7A:10
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          012F
Signing time:             Wed 23 Apr 2025 03:45:15 +0000
Manifest this update:     Wed 23 Apr 2025 03:45:15 +0000
Manifest next update:     Wed 30 Apr 2025 03:45:15 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: UJ/Yf7J0n9WVmZnycT2bwul329Ghdj2HdFpYoT1H1kM=)
                          2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=)
                          3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=)
                          4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=)
                          5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=)
                          6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 03:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Apr 23 03:45:15 2025 GMT
            Not After : Apr 30 03:45:15 2025 GMT
        Subject: CN=6808624b-2e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:ac:a2:95:f2:dd:1d:a0:fb:d6:83:ae:f6:
                    c0:b2:64:2a:3e:84:72:a1:06:2a:4f:98:5e:3a:fb:
                    f3:20:fa:fc:8d:44:7a:e4:93:e1:5f:5d:55:7b:21:
                    f6:40:94:61:77:d9:c2:9d:b9:3b:db:70:84:6c:66:
                    ea:75:d3:92:4c:44:e0:ae:7a:d4:98:d3:dc:78:b2:
                    9b:de:b9:f9:0a:ba:da:f4:8c:60:5e:26:fe:f4:df:
                    b4:02:3f:c1:50:7b:72:7f:f2:0c:da:d7:e3:e6:39:
                    ac:d6:88:b2:fb:7a:17:2a:5e:d0:95:89:b7:12:5a:
                    58:f6:d0:34:ef:0b:70:1c:8e:2b:8c:a2:08:c6:d2:
                    dc:d2:d4:21:1f:b2:b0:7b:45:a3:e4:88:64:a3:89:
                    25:85:19:48:1e:02:5a:c0:2b:04:5e:73:78:48:5c:
                    13:c5:c5:63:13:6a:22:44:86:d6:54:74:e3:cf:30:
                    2b:43:13:a6:99:25:72:b2:fe:fc:d8:90:e1:30:12:
                    73:70:24:e6:5b:0d:5b:10:7a:d9:30:df:99:43:bb:
                    c8:98:b8:69:f6:22:85:09:88:12:e9:98:9f:dd:06:
                    e3:f1:85:af:93:08:8d:af:0c:d1:74:83:23:ce:97:
                    f8:08:52:61:8d:73:f2:65:27:66:73:34:f6:8e:ad:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:3B:00:08:1C:04:8C:67:C1:BE:FA:06:0D:2E:71:39:75:7A:10
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:1c:26:e3:5b:cd:ad:a0:e1:c9:10:ae:b7:43:db:fd:f6:
         c8:96:46:9a:6d:62:12:af:99:a9:63:20:7f:3d:bc:6f:ab:19:
         c6:88:33:dd:1a:7b:cb:89:7b:fc:72:ca:19:32:2a:21:6b:1b:
         43:0f:30:a4:a1:74:61:bf:c0:3e:98:4e:78:8d:ff:95:33:cd:
         ac:5f:76:43:73:84:73:d4:b2:20:0b:2d:06:65:73:f5:99:3c:
         82:63:aa:f2:4b:3f:4b:34:e2:7c:3d:ac:a6:ae:b4:3e:0e:15:
         fa:ed:c8:c4:7d:40:f2:fb:fc:0c:aa:43:58:af:71:9b:51:f4:
         a2:f9:d6:60:5f:d5:7e:46:bd:f0:59:4b:b9:7b:8e:16:cf:75:
         3a:07:e0:e4:ee:3d:83:88:ef:bd:25:c6:45:8c:d1:f1:bf:46:
         29:ee:0b:e4:a7:46:a9:c6:57:e8:2b:f3:44:fd:cb:75:ce:b4:
         3e:75:3b:1b:87:cd:25:3b:4d:c4:44:8a:28:ca:4e:3b:a1:7a:
         bb:7c:56:dc:3d:69:5f:63:32:7d:f3:e3:c3:3c:2b:92:f7:be:
         ac:0a:7e:82:ff:73:91:d6:12:26:84:39:5f:8d:9b:ba:98:44:
         79:a5:e8:09:55:d5:c4:61:d6:a5:14:d6:2e:0c:7c:1e:80:5a:
         c2:c2:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:07 2025 by rpki-client on console.sobornost.net