Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File:                     CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier:          bhhjQrcbJwt7MGpDD+29+ln4OU0HJHfu10D8+1EzsfQ=
Subject key identifier:   3F:E3:86:76:BF:F0:09:51:4D:C6:90:FE:AE:68:DA:25:DA:C6:1D:0B
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number:          FF
Signing time:             Sun 27 Apr 2025 04:04:07 +0000
Manifest this update:     Sun 27 Apr 2025 04:04:06 +0000
Manifest next update:     Sun 04 May 2025 04:04:06 +0000
Files and hashes:         1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: OeuxAU4fDXjopTFAVUDJGGKbyNSBCI7ynhmrAQWsliQ=)
                          2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=)
                          3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Apr 27 04:04:06 2025 GMT
            Not After : May  4 04:04:06 2025 GMT
        Subject: CN=680dacb7-8ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:b6:01:a6:e4:28:74:4c:14:44:56:46:a7:
                    2b:61:39:e3:0f:b9:cd:44:fd:a4:15:be:7e:1c:ff:
                    fb:e8:9d:54:c7:4d:c4:39:49:d6:a0:be:fc:93:03:
                    2a:ce:95:9a:93:5c:a8:fe:c4:6f:bc:ab:97:d0:31:
                    b1:bb:99:74:d2:92:47:37:89:fa:a1:77:bc:bd:f2:
                    4c:a4:97:93:fb:3d:32:66:72:da:e6:35:ab:b5:85:
                    cd:99:30:2f:fd:53:5b:85:10:99:fd:37:ff:39:4e:
                    18:cd:83:dd:cf:6b:f4:5b:ad:73:6d:6c:f3:0d:39:
                    f1:7e:ff:80:0d:a7:1f:43:83:5e:48:92:4b:17:45:
                    78:0f:68:a4:2c:bd:0b:15:18:aa:ef:a8:ee:50:b1:
                    f6:ef:f3:af:3d:dc:1a:31:c0:8e:10:ac:41:bf:00:
                    1c:f6:3f:3f:26:80:e4:da:1e:b2:8a:44:bc:85:fb:
                    b1:cb:51:1b:fb:36:ad:b4:fc:e9:3e:c1:a9:55:16:
                    6d:5a:5a:62:a2:3e:62:b1:a0:aa:b9:e8:71:88:6a:
                    3d:4f:f9:5c:bd:b3:46:97:74:ca:eb:27:21:a1:36:
                    44:a0:64:ac:79:a4:26:5b:b2:e1:e1:53:20:ab:99:
                    8a:6a:45:7b:5e:0a:03:88:90:a3:3d:3d:80:98:a9:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:86:76:BF:F0:09:51:4D:C6:90:FE:AE:68:DA:25:DA:C6:1D:0B
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:03:50:2a:4f:d6:55:9a:4e:2b:dc:41:a5:e8:1f:f7:8d:c7:
         8f:e0:08:19:bb:97:65:2e:8c:31:8a:45:c6:cb:05:31:f3:a8:
         67:4d:93:ba:04:c9:9d:be:fb:d1:8d:57:a6:15:c3:e6:e8:34:
         36:d7:1c:58:8c:35:53:9f:72:8e:a5:b6:54:ce:1a:32:14:c7:
         8e:66:c2:96:15:30:a4:7c:32:75:cb:a7:4f:d1:82:89:56:d1:
         25:c9:79:9f:29:e1:89:2d:4f:9e:ad:bc:51:45:39:ed:2a:39:
         4d:82:8d:c3:0a:78:14:7a:1e:98:f9:20:0d:da:de:a9:d1:29:
         61:ae:35:40:96:32:2f:6b:c2:53:55:5a:eb:dd:4c:17:bc:1a:
         73:98:3f:11:69:85:09:e5:0f:45:37:30:a4:81:89:83:a6:25:
         dc:02:f0:9c:a0:36:fc:5c:cb:60:ca:22:c8:b9:09:f4:e6:7d:
         16:1f:bf:64:9b:83:6d:e2:70:f0:2a:0a:d3:19:b8:dc:27:15:
         64:bd:54:92:a1:e7:25:0f:ec:e7:69:db:b5:4f:c9:d8:7a:34:
         c2:26:b5:8d:21:3d:f1:ab:82:eb:c6:27:a2:e8:85:82:e2:25:
         57:ca:32:c9:a6:27:a5:d1:02:5c:1f:01:09:b1:23:02:32:0c:
         ef:bb:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net