Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File:                     TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier:          37aTfdiaUDuAhAAn+FNOxQAhKhEVhrrn8KvnnhxlWdY=
Subject key identifier:   18:0E:65:BF:93:46:4A:AC:F2:D5:57:6B:2C:F9:80:A0:1B:50:0B:47
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       1869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number:          17EF
Signing time:             Sat 26 Apr 2025 16:32:36 +0000
Manifest this update:     Sat 26 Apr 2025 16:32:35 +0000
Manifest next update:     Sat 03 May 2025 16:32:35 +0000
Files and hashes:         1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: GTPITz6JTapXWQj8U6J7f/bWbaSwe8TUk/THXZHleCQ=)
                          2: 414EA464DE1F11EF81B4222BC4F9AE02.roa (hash: F3q7PP72llFH8+z4VF0oeanHuy8uPccB2DCFCidTstA=)
                          3: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: G2dT/aqsMx0KoCwmXvgkhmTnoPOvK+397UePsMgxeC8=)
                          4: 2F268460A40311EFBD995535C4F9AE02.roa (hash: plcbQlBVFl3gRXe4zLArG3hwdoRGSGYn5vJ4S+Zw6kI=)
                          5: 2F903356A40311EFBD995535C4F9AE02.roa (hash: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ=)
                          6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: pLQhbQ0mTRBssMztKv86DK/TOvY561i4aTIXdGlEvzU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6249 (0x1869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Apr 26 16:32:35 2025 GMT
            Not After : May  3 16:32:35 2025 GMT
        Subject: CN=680d0aa4-3356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:cc:b7:a3:3c:11:2d:06:50:8a:a4:40:91:
                    5e:2d:6b:c7:f2:c8:7a:19:c9:96:63:57:8e:22:35:
                    d5:7c:b2:e9:b5:c6:ed:7c:9d:2f:56:9b:c9:fb:7d:
                    34:3d:70:ae:8c:6f:fe:cb:fb:57:36:25:2c:e4:fa:
                    fe:f4:ad:52:60:0c:27:49:15:b3:11:7c:3f:d7:7c:
                    15:fc:dc:90:36:dc:63:22:cb:25:0b:bb:ed:b2:62:
                    10:ea:74:c3:c3:c2:9c:60:85:d0:6c:58:10:8a:ab:
                    90:d5:18:8c:a8:4a:3e:f7:eb:fa:19:ae:e0:7a:93:
                    a7:5f:08:86:dc:31:1c:3f:71:6c:5f:40:cb:82:04:
                    dd:19:03:18:86:1a:fe:7c:bb:b8:c0:78:5e:25:fe:
                    0c:6e:cc:2f:65:01:fb:2d:6b:4b:de:2d:3a:ba:68:
                    27:f0:8f:a7:3f:44:16:46:1c:ba:a0:01:f0:0c:97:
                    f6:3f:ac:6d:c5:52:30:4e:86:55:bb:a1:46:c2:93:
                    8e:ed:5a:cd:d3:a7:e7:0b:88:b3:8e:19:f7:70:d3:
                    10:ae:99:ae:a5:5c:13:01:93:45:ae:f3:04:0b:7a:
                    98:d0:3a:b8:6d:9f:77:b4:da:31:11:19:b0:60:3f:
                    ca:1a:84:41:8e:14:88:26:1b:a9:ad:db:dd:e1:f5:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0E:65:BF:93:46:4A:AC:F2:D5:57:6B:2C:F9:80:A0:1B:50:0B:47
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:a2:2d:bd:23:67:b2:1a:99:9c:f8:ae:95:a2:64:3c:72:
         0a:f0:af:ab:15:ad:40:30:71:1c:87:77:a1:66:ca:3e:f0:c6:
         20:c9:40:85:c7:32:f0:8b:b1:b1:da:88:98:99:73:e6:c1:a0:
         5b:e2:8c:33:d9:0c:dc:26:ac:5d:1f:34:65:f2:16:a8:10:25:
         53:23:59:1f:79:6d:09:b5:6f:36:13:da:f1:6a:08:f9:60:eb:
         99:bf:f7:b8:10:ff:fe:e2:b0:e5:38:43:a9:be:aa:3a:09:51:
         c1:8f:22:7f:fb:94:87:32:b9:81:24:98:75:2a:a4:9a:7f:ff:
         1b:9d:46:e1:fc:05:73:75:67:58:2b:24:fe:3d:ca:5b:a1:98:
         a2:ea:b0:12:02:42:6a:52:ad:c4:a1:d8:4a:ca:8a:fb:ff:26:
         65:73:64:ef:b4:00:74:c0:01:54:52:72:6b:d2:f0:65:d5:1b:
         38:fe:d2:26:cd:54:4d:2c:47:9e:e9:5c:3d:93:53:b7:94:86:
         85:5d:73:14:a3:27:8c:05:88:6e:30:de:a1:2c:7b:48:5f:42:
         d6:3d:da:8d:f5:e2:df:47:08:50:09:57:62:eb:17:f1:2b:e0:
         4e:aa:79:2b:74:87:75:71:74:23:83:71:5d:ab:3a:04:d7:a1:
         c8:f8:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:19:39 2025 by rpki-client on console.sobornost.net