Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          cupNYJuhonHkfOUXm1oqLkcigRfyk6uOWUdzbXWWIIg=
Subject key identifier:   75:E4:EF:A5:FA:FA:44:FB:1B:84:C0:8E:4F:57:5A:F2:BC:13:5B:6E
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          01C0
Signing time:             Sun 27 Apr 2025 02:05:32 +0000
Manifest this update:     Sun 27 Apr 2025 02:05:31 +0000
Manifest next update:     Sun 04 May 2025 02:05:31 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: 0IWt82C0ibVVChRgafbpQuXA4wZVfhLbCIVK2oe7Y6w=)
                          2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=)
                          3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=)
                          4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Apr 27 02:05:31 2025 GMT
            Not After : May  4 02:05:31 2025 GMT
        Subject: CN=680d90ec-edc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:49:ce:fc:6a:22:d9:f8:0d:9a:69:90:23:
                    ca:bb:21:e6:1b:38:c7:09:c7:79:28:bf:92:12:35:
                    1f:1a:7a:94:0b:f7:b7:43:50:ed:e2:44:1e:96:57:
                    37:6c:db:4e:27:73:58:53:b4:a0:9f:32:3c:23:27:
                    a9:80:73:0e:03:e6:65:a5:cc:cc:b8:85:cc:d5:70:
                    0b:fe:74:9a:38:d1:39:df:57:46:d9:a5:26:b9:15:
                    f9:bc:e3:f2:a7:1e:e1:c5:e1:8a:c6:32:c8:ac:00:
                    17:30:e4:88:78:b3:9c:ff:ef:41:9b:64:ab:44:45:
                    96:64:c2:d7:98:4f:6b:a9:5d:59:1b:f9:b2:0c:2e:
                    cf:c1:cb:02:b7:95:cb:da:d5:ab:be:33:5e:d8:6f:
                    e7:e2:ea:2e:26:69:11:4c:3a:c1:5e:1c:f5:38:3c:
                    7c:bb:e0:d0:a6:af:67:7e:12:f0:66:f1:50:76:6e:
                    69:08:20:6d:4b:b5:fe:cc:32:a9:41:ff:8e:bb:d0:
                    a3:7b:be:35:c6:4f:3f:00:97:97:13:70:0c:6a:1e:
                    eb:cd:bc:79:83:1c:84:fa:94:c7:76:8a:cb:83:6c:
                    e5:01:8a:68:af:1c:e4:1f:06:bc:e7:56:b9:30:f6:
                    5f:33:fa:67:61:da:0c:c6:d7:0f:11:02:81:20:b0:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:EF:A5:FA:FA:44:FB:1B:84:C0:8E:4F:57:5A:F2:BC:13:5B:6E
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:9f:68:ff:fc:b4:ae:fd:cb:cf:c1:a0:1a:86:bd:44:10:63:
         6a:d4:5a:6d:94:66:8c:41:de:06:35:7f:d8:ec:0e:8a:7b:e9:
         89:65:9b:ac:94:3f:b2:aa:21:c4:f6:42:8f:ed:ee:4a:08:48:
         5b:94:ad:e9:6b:0f:17:c8:42:cb:9a:25:04:25:c0:bc:cc:24:
         6d:9f:4d:a0:d7:9d:71:0e:92:d9:11:b0:14:75:7c:27:11:9e:
         e0:a7:fc:28:63:02:5b:47:3d:05:d1:ae:9f:23:fe:f2:cc:55:
         44:8d:d6:63:59:4d:23:a3:f7:5b:6d:49:9c:00:8a:78:17:df:
         21:d7:e5:75:8a:64:d6:e9:0d:2d:ef:92:78:4c:83:bc:c0:da:
         ae:49:d0:25:02:e3:74:14:6c:ee:35:82:77:3e:a1:32:20:29:
         3c:61:2b:aa:4f:56:e5:56:04:e6:36:d4:1b:70:a7:11:e6:7b:
         d1:73:35:53:4e:b2:d9:9a:c1:6b:58:20:88:82:62:88:19:a4:
         a7:d8:63:a9:4e:ea:2b:30:75:ff:9f:5e:9f:e5:1b:30:85:23:
         96:c1:86:94:6a:f0:41:4b:65:7e:73:93:60:11:05:60:db:3c:
         de:c7:da:d6:46:fb:69:f6:3b:95:e2:3b:bf:9d:08:fb:42:0f:
         dd:85:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:21 2025 by rpki-client on console.sobornost.net