Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          w6FL3wE+lgcTBj0J9wgH1pUZ0Tl5h9aNeWrvHOamxvI=
Subject key identifier:   CA:6D:F3:4A:95:8A:63:12:13:A0:D6:0D:4D:07:B8:50:D9:D9:6F:7A
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          A6
Signing time:             Sun 27 Apr 2025 05:00:55 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:54 +0000
Manifest next update:     Sun 04 May 2025 05:00:54 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: rZTLBe32arXHnLUqEjoVAwin9tO5HYimw4BZAMLCUNw=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: LuOXDNonR3GEQAX6Ae//YPTmZrxLa+xdQ9eXFVMZLeI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Apr 27 05:00:54 2025 GMT
            Not After : May  4 05:00:54 2025 GMT
        Subject: CN=680dba07-2d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:fa:02:45:1a:d8:3f:a4:14:73:c7:e6:96:
                    2c:7e:f7:fb:ea:09:9c:72:60:fb:f8:68:3d:99:64:
                    3c:8e:ff:e0:7a:64:f1:c7:9c:96:a3:e8:bb:43:9c:
                    ed:38:de:9a:7d:c8:1c:ee:e5:e2:8f:a6:f7:bf:2e:
                    f2:fb:b7:68:51:6f:c9:26:e3:e4:80:44:65:39:df:
                    73:fe:59:28:e6:9d:1c:d4:b4:df:d9:94:a8:e6:10:
                    ac:1d:21:aa:ce:14:44:01:a3:88:38:cc:15:76:6e:
                    6e:d0:6f:cc:b5:91:82:c2:22:04:4b:af:84:44:0d:
                    05:08:f3:38:b4:7e:e9:d3:98:9c:a6:fc:09:7c:25:
                    77:34:ba:78:7f:19:19:c6:19:2c:03:6a:f7:ba:25:
                    fa:8c:2f:9a:1a:4e:0a:4c:c3:63:c8:5f:5c:ce:c1:
                    e4:a6:62:6b:3c:44:c6:87:07:01:49:44:0c:2e:ec:
                    fe:ac:01:73:4a:c9:f2:4c:00:8c:a9:5c:11:77:70:
                    42:f9:4e:62:8e:b7:57:30:67:6b:7a:1b:c4:5f:f7:
                    35:c5:2b:a5:cf:d4:f0:86:92:41:23:59:fe:44:fa:
                    f5:73:e5:d8:41:f2:92:23:f1:57:02:a9:1c:3f:81:
                    f6:04:41:13:75:e5:d9:4f:80:57:89:84:06:1e:39:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:F3:4A:95:8A:63:12:13:A0:D6:0D:4D:07:B8:50:D9:D9:6F:7A
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:b8:8c:62:21:cf:41:94:e4:3b:c2:d8:9b:bc:e3:da:5c:
         5e:c5:a4:2e:77:4d:d3:a4:63:08:b6:c2:cb:25:b6:c5:f2:e7:
         00:c7:2e:b2:ab:b4:c4:fa:e9:4c:9a:b6:53:7f:80:98:20:c6:
         bb:50:6c:fa:5e:8e:15:df:e7:1e:9e:35:80:5a:6c:62:6a:d7:
         38:40:d1:21:00:c9:bc:3d:52:49:2d:23:6a:13:f4:b7:13:71:
         50:b1:d3:90:34:c4:c2:e8:96:57:fe:30:b8:df:38:6e:77:aa:
         c3:f3:68:a5:6d:b6:24:98:e9:03:9b:ba:01:90:45:f5:5e:b2:
         a0:78:44:30:cd:e8:8a:e8:6e:7f:56:62:d2:00:56:97:b1:c5:
         a4:08:05:a3:1c:a1:3a:d2:37:8e:f0:f8:b8:ff:44:4e:32:ad:
         49:20:55:3b:38:95:b0:53:42:b3:a5:64:0b:18:ae:67:b8:29:
         06:d8:92:4f:87:75:0b:8c:28:2d:6f:a4:0e:e2:68:8e:f7:38:
         ae:8a:25:6b:03:e6:d9:2f:8c:0c:a0:79:93:7e:da:16:8d:77:
         86:1a:36:64:df:ae:66:71:d5:67:5c:5e:75:e7:d9:c5:38:94:
         3d:fa:c9:4b:6b:1e:e1:fb:51:f0:4a:05:d8:69:e0:bb:52:91:
         bd:d3:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net