Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File:                     CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier:          JwsF+ecgxttQow6F1OnHKjwkbX7us+/iWH7wtCRKbpU=
Subject key identifier:   4F:E2:51:F9:B5:76:E6:84:22:AC:0F:5B:EC:7D:81:D2:4C:50:EC:CB
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer:       /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number:          0107
Signing time:             Sun 27 Apr 2025 03:57:34 +0000
Manifest this update:     Sun 27 Apr 2025 03:57:33 +0000
Manifest next update:     Sun 04 May 2025 03:57:33 +0000
Files and hashes:         1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: /XV/LF/25203Sv2wUNzC3uCTGC9trIUoZ/gbAKH8RWM=)
                          2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
                          rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
        Validity
            Not Before: Apr 27 03:57:33 2025 GMT
            Not After : May  4 03:57:33 2025 GMT
        Subject: CN=680dab2e-494b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:f1:ab:dd:90:6c:20:7c:37:77:3c:e5:43:
                    e6:77:dd:3e:e4:1d:7e:aa:43:70:92:a4:34:93:e4:
                    4e:25:00:02:3c:d8:17:9b:d5:70:43:fe:43:75:8e:
                    bf:b5:7d:4f:cc:23:9c:5f:1f:bb:b8:5e:7d:6d:2d:
                    63:69:23:35:8a:06:12:62:73:e7:79:d0:c3:43:ff:
                    eb:d2:32:01:2b:b8:b8:9c:04:ff:e4:ef:92:a5:25:
                    68:62:a0:7e:b9:e5:99:c6:85:6a:46:9e:08:42:1d:
                    7b:ee:58:6c:a1:37:ce:cc:e4:b3:47:1c:b3:ab:48:
                    04:ca:32:59:e1:68:80:85:78:1b:40:bf:81:49:96:
                    7d:24:f9:b4:6b:95:5b:87:ff:0c:1d:61:5c:cd:41:
                    d3:50:20:c7:2b:0c:1d:06:29:3f:fd:27:8f:50:dd:
                    cb:e1:b2:c2:3d:76:8f:6e:a6:32:4f:30:79:89:30:
                    ac:16:83:a8:89:a3:a3:32:05:2d:62:01:81:64:7c:
                    2a:c1:ab:36:93:0b:b4:2d:65:5a:13:b1:5d:9a:5e:
                    b0:e5:df:61:85:10:c3:b3:f8:0e:e2:63:77:32:4c:
                    5b:9c:6d:3f:05:88:d9:25:41:06:da:5c:af:f5:2f:
                    68:b0:b1:a9:4b:49:1f:73:72:0d:13:60:87:fb:34:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:51:F9:B5:76:E6:84:22:AC:0F:5B:EC:7D:81:D2:4C:50:EC:CB
            X509v3 Authority Key Identifier:
                keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:6c:f2:5f:77:ff:fc:89:d7:7d:f4:9f:05:16:e7:1d:af:
         73:60:c5:28:7f:e2:c4:c3:f1:c5:08:1f:4f:51:08:f2:1f:51:
         d0:ca:6c:f1:7f:80:18:ae:f3:0c:b1:2a:fc:20:f5:2f:62:27:
         73:25:69:69:1f:8e:84:08:22:c2:3d:37:05:b4:06:b3:55:43:
         6c:f5:cf:0f:4f:cc:89:da:9a:60:66:b5:20:e2:bd:db:70:5b:
         db:65:41:5a:a9:c5:04:11:85:54:e3:d7:a8:2e:6e:ee:3b:c8:
         04:f2:fe:8b:05:de:e2:17:37:e8:76:b1:55:5d:eb:ed:ac:cf:
         ba:91:e6:3e:4d:97:ba:ab:98:cd:4f:1f:c3:d0:0a:7a:f7:c3:
         9f:70:2c:ef:45:fb:95:e1:c0:54:ad:0f:88:9c:81:cb:f0:1f:
         08:90:65:da:29:1c:ec:db:80:6c:2f:29:6e:7a:82:19:f1:02:
         6c:e4:db:ef:b7:e4:3d:ff:27:90:8d:4c:53:cc:fd:88:96:01:
         a2:1b:84:30:b5:f1:dc:1a:23:e1:a8:ef:d7:c9:c6:2a:5b:48:
         42:6a:31:83:89:c4:cc:e9:a4:23:9a:b6:7e:76:d4:34:0f:a1:
         11:cd:ab:62:b2:12:55:7f:09:4e:d1:40:1e:ec:a9:ac:1d:9d:
         10:b9:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:22 2025 by rpki-client on console.sobornost.net