Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File:                     3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier:          nDDY9KCHre9Ar4+qca7wHqXmEITN/rB0g6gL7aSVZUo=
Subject key identifier:   C6:F0:99:6C:77:DE:A0:37:DC:CE:D9:AB:16:3A:B2:75:F3:6C:61:F9
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer:       /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial:       0378
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number:          0374
Signing time:             Sun 27 Apr 2025 00:33:53 +0000
Manifest this update:     Sun 27 Apr 2025 00:33:52 +0000
Manifest next update:     Sun 04 May 2025 00:33:52 +0000
Files and hashes:         1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: rZfGyTOR/IY9e9YWGIoykAke21MNS+lh+u55FlaiABI=)
                          2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vvesGwwdw13pevInYyT24HAMslE/0OP0vxw1abDxLHE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
        Validity
            Not Before: Apr 27 00:33:52 2025 GMT
            Not After : May  4 00:33:52 2025 GMT
        Subject: CN=680d7b70-4694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:6c:23:d4:c6:a0:7d:14:ae:5e:70:ae:aa:
                    bf:99:6a:a4:72:8b:08:27:d2:0a:9a:0b:54:ab:ee:
                    0c:94:62:5c:cf:08:65:15:55:06:20:f8:20:bb:d9:
                    06:17:9e:75:9b:6d:a9:f4:23:df:e1:57:ae:51:f7:
                    01:84:bc:46:84:68:97:d6:a1:2d:96:0f:aa:2f:a8:
                    17:a4:a8:c1:e6:92:13:c2:d5:66:61:ad:b6:30:d2:
                    89:f3:a9:e6:a2:59:9c:8c:87:32:7d:63:b0:18:e7:
                    62:39:c9:a4:f3:d8:c3:69:ff:ae:94:d0:b6:e4:96:
                    3c:c2:b9:d2:3a:11:49:2c:24:28:a2:83:ba:36:79:
                    5e:35:ef:31:ff:c1:d0:f7:71:5b:33:8d:41:b7:5c:
                    b3:6e:4e:7f:58:de:82:0b:f9:82:71:de:1a:a9:bf:
                    38:d1:1b:13:16:ee:ff:3b:78:50:84:ca:aa:1c:41:
                    75:65:b8:71:af:5b:97:c0:8e:fa:45:37:d7:90:bc:
                    99:26:68:5c:fb:a8:24:c2:fc:fa:8a:01:22:cf:06:
                    cd:16:71:b8:b7:36:2b:f6:24:2d:fa:d8:5d:6f:c2:
                    97:4a:02:15:1a:1f:8a:b0:20:40:ce:68:4e:4b:e7:
                    87:1f:03:df:57:7c:b5:f3:16:82:4b:5c:3b:37:cb:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F0:99:6C:77:DE:A0:37:DC:CE:D9:AB:16:3A:B2:75:F3:6C:61:F9
            X509v3 Authority Key Identifier:
                keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:af:3c:a0:2e:b7:33:ba:c6:7d:19:a6:bb:7e:26:8a:fc:
         61:4e:3d:6c:b6:f6:78:f5:5f:3a:97:0b:3d:10:2e:ac:4b:af:
         ce:3f:f3:23:f9:f3:d5:1e:98:d4:a5:cd:98:e8:62:b1:36:42:
         08:55:bc:e8:64:8f:8a:d5:11:44:de:55:e1:7e:27:f3:d9:16:
         69:d8:40:96:26:8c:0e:67:6f:85:00:d5:1b:80:86:34:82:a6:
         bf:dc:2e:57:e3:90:f8:c8:2f:19:b1:4a:ee:3e:00:4c:03:d7:
         e1:01:b5:36:d4:7b:5d:4b:15:64:2c:6b:b7:52:c7:77:f3:60:
         4e:fe:51:0d:8d:64:d6:35:21:0e:6b:51:9d:d3:2c:f2:8d:ae:
         cc:d1:49:7f:2f:8b:f9:6b:37:de:2b:0a:ee:d7:4c:00:6d:d8:
         56:73:8b:08:d2:e8:8a:9d:a8:f4:68:37:68:b7:56:a8:42:e9:
         bb:08:42:d6:be:76:ec:70:db:94:39:42:4c:d8:8a:fa:7f:64:
         6d:9d:0f:27:99:1b:4d:df:94:b2:54:51:16:b5:42:03:9e:b1:
         24:c0:d4:13:26:16:3c:d5:8f:00:4a:c8:05:78:6f:70:c8:d7:
         17:d7:33:bc:98:5f:22:f9:13:e4:ff:16:ff:37:28:14:53:0f:
         fc:95:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:32 2025 by rpki-client on console.sobornost.net