Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          7NTEL8tU1XVNpkamLhziUYUUGyW+L4wTu6T2nO0CkFM=
Subject key identifier:   5F:97:27:22:D6:18:94:47:86:61:B6:6B:67:C4:F9:B5:23:38:C0:99
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       0611
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          060B
Signing time:             Sat 26 Apr 2025 22:30:37 +0000
Manifest this update:     Sat 26 Apr 2025 22:30:37 +0000
Manifest next update:     Sat 03 May 2025 22:30:37 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: zOCze9cM4hOJLU3jT7t5f3IppZUC3XpVXAuSHSW7DsI=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: 3i3Obqp5nv0g5N9cz3IbC+KBKlhtiXr0r1G3L5MWY/w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Apr 26 22:30:37 2025 GMT
            Not After : May  3 22:30:37 2025 GMT
        Subject: CN=680d5e8d-2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:7e:c0:a5:62:b3:12:ac:a9:3d:cc:0d:65:
                    00:f9:51:f9:67:23:d4:53:92:c8:eb:e8:1e:15:7b:
                    99:08:49:fc:9e:ce:f7:27:e7:3b:63:ac:03:06:04:
                    8a:9b:55:cc:f2:0f:78:96:44:22:6f:e4:c5:9b:49:
                    dc:a0:9f:be:64:fb:05:92:7b:0c:a8:19:00:3b:0a:
                    29:85:86:11:14:b8:28:62:2a:f8:2d:c2:50:41:3f:
                    cd:08:63:6b:26:f7:f4:06:60:3e:33:c7:3c:cd:68:
                    6e:19:af:c0:98:78:d3:a7:70:33:c6:db:61:07:77:
                    91:24:f8:4b:6f:53:10:87:c8:9e:35:f8:d7:c7:3a:
                    03:70:e5:d6:8d:f8:32:95:9a:f5:06:00:80:1e:8d:
                    5b:95:6b:9a:fe:f5:90:37:67:c9:48:ba:c5:e0:e1:
                    94:de:eb:bf:09:ac:12:2b:19:ed:09:d2:c0:13:69:
                    d3:5e:98:4e:65:0a:95:63:2b:05:ad:a3:f9:72:b3:
                    c3:61:d1:7a:18:14:60:a4:32:8d:96:5f:30:d3:8b:
                    f9:c8:0c:2a:d0:0b:1d:7b:ba:e0:70:f7:43:bc:31:
                    3b:4b:5f:39:4f:0d:74:1e:01:d0:26:40:8f:ce:66:
                    dc:25:56:4f:95:3a:8c:a6:90:77:f4:e9:87:a8:5b:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:27:22:D6:18:94:47:86:61:B6:6B:67:C4:F9:B5:23:38:C0:99
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:2c:f6:6a:37:60:3b:53:60:fd:84:ac:65:9f:63:fe:87:
         09:6a:60:57:d7:96:00:bd:87:40:84:3d:06:c0:b7:d4:c0:8b:
         62:13:6b:22:24:d1:07:0f:e5:1b:63:d3:d7:d1:6f:58:b1:64:
         e1:02:28:42:a7:e1:5a:98:62:ab:df:24:be:e9:19:3c:58:de:
         33:a7:04:8f:2f:2c:e2:2f:6b:92:b6:98:4f:86:6e:a4:81:6e:
         0d:29:b3:1c:54:19:d6:e7:d2:ac:c4:42:1f:da:2b:b8:88:1e:
         16:be:68:7e:0f:9e:c0:77:33:cb:5c:39:21:31:fe:78:52:68:
         d1:f4:c4:28:c9:12:8e:d8:6a:80:dd:13:de:7d:30:10:e1:96:
         ce:62:a0:62:6c:29:9d:15:80:bd:84:a5:39:d0:db:a2:4f:6d:
         19:5b:96:21:8e:ec:88:fa:1b:62:c9:6c:e8:59:3e:89:34:5a:
         61:35:7b:5e:8b:bf:d6:53:b1:dd:5a:12:eb:a9:aa:e1:eb:0e:
         0f:e2:3f:75:e6:e6:48:ec:3c:32:5c:f2:6b:8c:a6:eb:4a:98:
         63:23:f1:dd:88:79:0d:bd:55:07:34:3a:38:57:20:53:84:91:
         14:07:ae:71:d3:0f:d3:6a:a4:31:32:6b:d5:02:94:f2:7a:cf:
         0e:20:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:27 2025 by rpki-client on console.sobornost.net