Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          AcopvvSjYfFlGn/05ls812r0F5RRRw7anN62wuKhP4U=
Subject key identifier:   23:6B:10:44:A5:78:C5:DE:E8:B2:0D:50:27:FF:A3:AD:11:B4:05:3F
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          0138
Signing time:             Sun 27 Apr 2025 03:21:41 +0000
Manifest this update:     Sun 27 Apr 2025 03:21:41 +0000
Manifest next update:     Sun 04 May 2025 03:21:41 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: 9jL5CYkA/TJeBI68PEUT5qDy3tIl3vQTncTbk3090tc=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Apr 27 03:21:41 2025 GMT
            Not After : May  4 03:21:41 2025 GMT
        Subject: CN=680da2c5-22e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:d3:d7:46:ac:75:f7:a6:45:39:76:92:e8:
                    aa:d9:f1:3e:49:75:79:50:76:50:0b:81:87:12:e4:
                    9c:33:ec:8c:03:22:4f:0c:70:40:e7:b7:d2:e3:aa:
                    5d:43:c0:6d:ca:ab:35:bf:3b:d5:14:84:e2:23:94:
                    30:8c:f8:2b:af:57:0b:da:7e:eb:18:8e:dd:88:97:
                    dc:34:e0:9f:d8:67:6d:a8:48:71:78:6d:b6:b3:56:
                    2e:b1:19:94:af:e6:6b:31:31:8b:69:c2:12:3d:59:
                    c4:11:6a:d9:d7:1e:f7:ec:76:37:16:d1:17:f0:1f:
                    1f:d0:e3:b6:c5:ac:2f:c4:9f:a1:5d:eb:16:bd:b8:
                    a4:f9:71:1c:2f:5d:d3:82:da:bb:2d:c0:e0:3b:49:
                    e7:6e:ee:a7:e4:90:3e:cd:86:5b:58:c3:ad:37:8a:
                    49:2e:5f:1a:86:89:3a:cf:aa:ee:c9:35:ca:5b:d3:
                    a8:06:a4:46:13:88:7e:24:2c:bb:e7:7b:5f:98:2e:
                    d3:9b:be:da:04:ed:01:52:e4:a2:cd:c9:2b:ef:7f:
                    46:ad:df:a8:a0:3c:e0:d1:4f:65:01:1d:21:32:4e:
                    9c:b1:ec:9b:fc:b5:7d:22:16:e1:b3:42:49:41:03:
                    45:4e:47:48:41:8a:ff:dc:88:a7:d6:da:af:6c:8e:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6B:10:44:A5:78:C5:DE:E8:B2:0D:50:27:FF:A3:AD:11:B4:05:3F
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:b1:a3:d8:4c:50:ee:f0:11:81:d7:bc:6d:d9:77:36:e3:
         2e:64:2d:e3:b9:53:a9:f9:fd:2f:39:a6:26:3c:87:fb:7d:61:
         2c:e8:73:7f:87:86:2b:36:d7:a5:27:0a:ef:c3:7b:01:06:93:
         09:43:79:91:b0:28:16:83:c2:3d:60:45:5a:93:a3:60:b1:f3:
         8d:fb:59:0a:1e:b9:55:3d:05:77:b5:60:0f:f6:dd:34:b1:36:
         bf:a6:ff:c8:3b:50:06:76:9b:6c:49:ad:c3:42:4d:a8:98:04:
         0c:cd:64:a8:35:82:86:d0:af:e6:2c:43:5e:2e:eb:a2:06:56:
         02:3d:75:fc:8a:2e:2e:ed:7a:14:10:0a:2a:4c:8e:25:6f:76:
         90:79:20:52:ec:8d:5b:08:3d:ac:3b:fb:50:92:98:a2:f0:2d:
         46:a5:5e:89:4d:12:ef:2f:c6:46:fc:3f:7e:74:d4:80:52:8b:
         8c:c1:0d:21:b5:8f:4f:00:cc:b8:c8:bc:d4:1f:88:c8:ff:59:
         86:47:e4:79:10:be:50:d1:2c:39:0c:3a:37:ce:31:c1:5f:04:
         19:35:3b:f3:ec:be:0b:a8:d4:17:74:84:40:96:90:7d:64:63:
         91:49:43:62:5d:d2:ba:46:f3:27:b8:6c:9f:6c:8b:fe:61:b1:
         fc:da:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net