Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          BM0JkihIJNvGAYlN3i/SDFXtQBhQ7BZub3IncBEc+KU=
Subject key identifier:   B4:F3:B7:7E:9C:DD:DF:3E:2D:66:FD:0B:E7:40:AF:33:E0:98:FD:CE
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          3C
Signing time:             Wed 07 May 2025 06:39:21 +0000
Manifest this update:     Wed 07 May 2025 06:39:21 +0000
Manifest next update:     Wed 14 May 2025 06:39:21 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: OlMnLyZ0sMzw/WORxG7XUW0/KqtbRhEF2wAUnM0ycms=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: May  7 06:39:21 2025 GMT
            Not After : May 14 06:39:21 2025 GMT
        Subject: CN=681b0019-302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:e6:28:37:08:7f:1e:cb:82:6a:28:bc:f4:
                    60:a6:9b:9a:0c:e0:b3:ab:92:35:6b:f5:51:0d:53:
                    21:6f:c8:ee:14:31:7f:02:12:bb:7b:3a:3a:d3:aa:
                    96:fe:70:2b:5c:00:13:f5:0f:9e:8c:c7:1f:3c:60:
                    32:05:c8:3e:4b:c3:4d:6f:c6:7f:8f:b6:cd:cc:de:
                    21:96:ca:e9:f2:04:1e:f5:85:8f:09:73:af:08:13:
                    66:15:da:8b:07:e0:38:b0:e4:2b:ba:9f:d7:04:6a:
                    79:08:02:f2:97:d9:89:49:b1:e7:59:18:36:dd:ed:
                    27:08:f6:8d:e5:3a:ac:41:2d:e4:c8:27:3f:54:06:
                    14:0b:11:66:dd:eb:bd:13:57:be:28:e1:07:a3:aa:
                    ed:a8:a0:12:90:ad:87:04:42:c8:63:ec:a9:a1:b5:
                    d2:f4:a1:28:cf:16:a6:6c:76:5b:0e:6d:93:27:6b:
                    37:f6:5f:ff:85:9f:35:11:08:c2:bb:41:02:bc:b6:
                    2a:5f:28:a3:94:a7:e7:0b:71:2c:27:67:fd:28:da:
                    1a:ac:55:bd:7d:95:e2:e8:26:a4:11:29:38:f1:ec:
                    be:b1:dc:38:3f:c9:ab:b9:f9:3f:9e:0f:6a:68:9d:
                    c9:c2:ea:6e:5f:86:01:90:d3:40:84:60:b6:c3:bc:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:B7:7E:9C:DD:DF:3E:2D:66:FD:0B:E7:40:AF:33:E0:98:FD:CE
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:28:ba:79:05:e1:aa:08:90:74:3c:a0:f9:0c:e0:2a:05:aa:
         8d:21:0b:44:09:4d:89:0f:a3:0f:52:be:ce:38:b0:43:37:be:
         4f:e6:08:96:54:20:95:4e:40:31:c1:2b:40:03:3e:05:d6:7b:
         17:49:bb:41:48:e5:a2:a3:3d:a4:30:69:0d:28:71:8e:20:cc:
         c7:a0:54:84:0c:89:65:4d:57:46:aa:c1:15:b0:bc:32:4d:b3:
         cc:c6:ce:dd:1d:f4:94:24:2a:3e:03:23:7c:4b:6b:7f:77:3e:
         29:7b:fd:86:67:20:8c:84:81:2a:11:55:a2:3e:4d:64:23:72:
         f3:e2:b3:91:9c:83:4e:c5:c1:11:07:31:d6:21:20:46:ca:cd:
         17:75:ed:21:db:51:ef:eb:0a:db:9d:d1:49:77:4a:cb:db:7b:
         24:eb:76:cf:59:d1:c1:94:3c:72:d3:6f:5f:83:44:cc:fb:fb:
         98:19:3e:5f:7e:4f:b3:09:22:09:cf:b5:33:d3:1b:32:91:e8:
         eb:f5:a1:c4:ca:b3:39:2c:1c:3f:bc:61:ff:55:fc:74:2f:33:
         16:50:ef:0a:74:c2:78:a9:99:91:05:f0:b5:fc:b7:76:7d:3a:
         ed:db:23:5e:45:75:56:f0:34:3b:ef:73:ee:15:b4:7f:17:c8:
         04:94:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:00:32 2025 by rpki-client on console.sobornost.net