Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier:          ALPaNLqhtN82JmHmkFZFqTu7nCZ9s0z0thzNkiud/yw=
Subject key identifier:   C5:5F:38:77:74:74:4C:CA:1B:D3:50:AD:F7:FD:5C:E7:6D:2E:23:02
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number:          0113
Signing time:             Sun 27 Apr 2025 03:48:46 +0000
Manifest this update:     Sun 27 Apr 2025 03:48:45 +0000
Manifest next update:     Sun 04 May 2025 03:48:45 +0000
Files and hashes:         1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: H2Uxiyee0GSV8sGJX6nV+vJaLzK+2edfE5xLrxk3Hh0=)
                          2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=)
                          3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Apr 27 03:48:45 2025 GMT
            Not After : May  4 03:48:45 2025 GMT
        Subject: CN=680da91e-a3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:30:8b:19:29:fc:c9:3f:b4:b9:1c:05:57:
                    ae:7b:4d:b1:04:2e:3e:7e:e7:57:f2:f3:d0:49:e7:
                    59:49:24:7f:59:12:a4:4b:17:44:64:b3:7a:59:4f:
                    75:0d:20:0c:e2:06:40:6d:08:20:23:2e:89:c8:51:
                    6a:dd:d2:22:36:70:5f:0f:2c:73:13:cb:c3:9f:ed:
                    f4:55:ed:13:98:38:bb:5f:c4:88:54:57:8d:18:e9:
                    22:a1:f4:c0:6b:43:31:a0:f4:ce:ed:23:dd:f6:60:
                    85:ce:77:8b:1a:d0:7d:dc:4e:62:71:42:55:8f:83:
                    d3:a2:2b:5b:fc:fc:41:bf:d4:76:f6:c6:7d:29:62:
                    5c:d6:01:db:90:a3:a5:c8:a8:58:1b:a5:2e:69:6d:
                    7a:e5:77:13:4c:ec:39:27:d0:12:f5:05:65:34:19:
                    ef:e1:6f:e9:50:29:46:51:c8:dc:d2:44:2c:81:4a:
                    2d:06:9b:e5:29:4a:8e:6c:cc:8c:24:65:b5:bc:44:
                    21:81:3d:65:aa:7e:06:0f:e1:a9:56:ee:21:df:e7:
                    19:6d:1a:c9:20:cb:47:d8:1f:24:36:23:da:d9:93:
                    7b:de:b2:4c:dd:21:a5:a6:22:26:60:6f:09:31:cd:
                    58:79:fa:48:7e:02:80:cf:50:04:b7:2c:41:bb:33:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:38:77:74:74:4C:CA:1B:D3:50:AD:F7:FD:5C:E7:6D:2E:23:02
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:f3:e4:c2:e1:06:f3:81:c9:1c:71:10:93:b9:a2:80:26:
         9d:f7:1b:6a:45:f4:e0:9f:43:73:c4:4e:2d:10:3a:61:b7:5c:
         5c:cb:8a:d2:6f:d1:74:6d:a1:56:00:0a:a9:43:23:ae:8e:8d:
         54:b3:7b:ef:ec:3b:a4:26:4c:61:60:1e:0e:53:21:25:b0:73:
         f4:17:94:a7:90:3f:65:93:88:7c:94:be:cf:71:a6:cc:56:4d:
         3a:aa:b1:2a:a9:29:b0:81:90:47:1c:ae:e0:bd:78:fb:0e:59:
         80:98:91:f5:d3:ad:b1:a9:c6:39:a9:d1:33:4f:a4:93:1d:bc:
         61:44:4f:a0:de:76:0b:48:74:9d:93:49:1a:8f:76:a9:e0:f3:
         95:88:49:1f:7a:86:c9:b8:b7:f7:fc:6d:88:10:8f:9d:a9:7c:
         95:ba:12:36:d8:a2:d6:7b:17:b3:b8:ee:93:c7:92:0b:b8:f3:
         8c:f9:1a:bb:6a:6d:dd:18:c1:30:08:4b:a1:4a:be:c5:7b:f4:
         d6:21:72:8d:c4:a7:d8:df:f9:9e:3c:c2:fe:fa:d6:50:1e:e3:
         eb:be:4e:cc:98:8f:e1:6b:b8:99:3b:4e:56:9b:bb:6a:7a:d6:
         28:e9:f0:a3:7f:00:9c:a5:9e:b4:e6:e2:be:47:e4:79:74:12:
         72:58:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:33 2025 by rpki-client on console.sobornost.net