Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File:                     XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier:          fLQfnH6BTtEcaph7bGdhV/wxPc55rCi6LkWmBn1TwEs=
Subject key identifier:   5B:18:5D:45:EF:3D:2E:00:EA:14:52:5B:BE:1E:31:6C:29:8B:31:36
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer:       /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number:          0736
Signing time:             Sat 26 Apr 2025 21:24:40 +0000
Manifest this update:     Sat 26 Apr 2025 21:24:40 +0000
Manifest next update:     Sat 03 May 2025 21:24:40 +0000
Files and hashes:         1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: 0lF3VZxfnltPZvpwIFSPYeTaDujjdSpgi9FbY8bzDiE=)
                          2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
                          rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
        Validity
            Not Before: Apr 26 21:24:40 2025 GMT
            Not After : May  3 21:24:40 2025 GMT
        Subject: CN=680d4f18-0795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:ba:2e:a4:9f:ed:d6:36:0c:d5:af:16:74:
                    42:15:c0:07:b0:eb:17:60:d9:d0:94:89:70:71:03:
                    15:df:4f:70:bc:fd:fc:02:fa:98:8b:07:3b:b7:4b:
                    ce:7c:d3:f4:3d:f1:43:3c:62:40:4e:f6:5e:9f:0c:
                    02:8c:7f:47:56:b2:84:5c:b3:18:7d:4f:fb:11:22:
                    00:51:50:b1:60:ae:44:6f:f5:5e:97:43:2c:d3:96:
                    b2:cc:e9:62:0b:34:8d:0d:43:9e:e8:03:a7:54:86:
                    92:36:8d:68:89:06:ed:76:ed:4b:47:f1:ac:40:55:
                    ed:74:3e:1d:b8:33:07:ea:83:4f:dd:e3:e3:09:69:
                    e7:e7:65:e1:72:58:02:3d:4f:ca:f0:bd:6f:c5:8a:
                    fc:b2:df:bd:64:7e:6a:b3:81:8d:30:48:77:69:01:
                    a7:13:a8:8f:29:61:9e:6f:cc:ce:4b:fb:6f:a4:c6:
                    77:c3:34:92:46:85:fd:aa:dc:0b:88:64:8f:60:d8:
                    0a:13:1a:cf:de:0c:23:ac:13:73:e0:e0:d1:a2:48:
                    37:af:0c:74:a5:08:9b:82:20:3d:40:61:3d:0d:f6:
                    75:cd:7e:cf:b8:38:11:34:b0:ab:66:c9:ed:6c:50:
                    8d:e9:9d:2d:d1:00:0d:e6:2a:f0:20:ad:ad:d9:fa:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:5D:45:EF:3D:2E:00:EA:14:52:5B:BE:1E:31:6C:29:8B:31:36
            X509v3 Authority Key Identifier:
                keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:29:a1:19:25:b1:cc:1b:48:e8:47:95:f9:d4:42:4e:c4:
         81:bb:54:40:37:1c:77:80:a0:bc:c8:10:74:a6:dc:0a:c2:e6:
         63:74:37:b5:fb:43:32:1e:76:e3:3f:f6:37:50:a7:c4:a3:dc:
         69:3f:73:b8:2b:30:64:c5:8d:23:4f:41:2d:a4:4d:36:58:d5:
         28:d0:a4:41:33:d9:36:60:84:39:ec:a9:db:33:bf:88:78:4a:
         70:0e:6b:36:d7:68:af:26:ac:ac:8d:c4:dd:83:9a:da:96:dc:
         9b:04:76:4a:bd:de:95:35:5e:4a:36:73:b6:26:09:f1:fb:f9:
         a0:ac:be:53:31:1d:78:b3:da:fc:c5:31:57:0a:c7:02:0d:37:
         54:27:35:89:a6:08:ff:c4:3b:77:15:3b:1d:af:3a:a1:4c:75:
         29:8a:68:f9:9b:43:e9:e7:73:c7:04:6e:73:42:e5:63:59:a6:
         12:1f:30:6d:ed:af:89:e4:07:2c:92:b0:f4:fb:3e:fb:62:d7:
         91:86:ad:f8:41:3e:e4:b4:e5:54:a7:65:1d:bf:57:22:75:f8:
         cf:6c:0b:d6:1a:f5:49:c6:3b:52:40:ef:2d:51:fe:d8:a1:71:
         cb:03:0a:48:17:0d:08:fd:46:48:08:69:c8:ab:25:d4:39:18:
         8a:16:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net