Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File:                     joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier:          txsA0vBJvQ5bsd9ppZjpF6iZJBffQ6wv4QlUB3lms0c=
Subject key identifier:   EB:D0:BF:0C:68:C2:60:06:C0:F9:15:35:03:77:29:FA:A6:A2:E6:65
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1ED6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number:          1EAB
Signing time:             Mon 28 Apr 2025 16:09:37 +0000
Manifest this update:     Mon 28 Apr 2025 16:09:37 +0000
Manifest next update:     Mon 05 May 2025 16:09:37 +0000
Files and hashes:         1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: tNUQgCnKS37SXpB5C/znUUZwI/ayuyCJzNbKqTL/QZE=)
                          2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=)
                          3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=)
                          4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=)
                          5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=)
                          6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
                          rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7894 (0x1ed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
        Validity
            Not Before: Apr 28 16:09:37 2025 GMT
            Not After : May  5 16:09:37 2025 GMT
        Subject: CN=680fa841-34bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:db:83:b3:f2:cb:8f:b5:e4:53:0d:86:8a:
                    ef:ad:de:bc:0d:b4:dd:43:2d:4d:62:d7:a6:8b:87:
                    eb:11:eb:75:49:08:76:ae:e2:bd:6b:16:d0:c3:50:
                    33:2d:43:37:df:03:c9:2b:ba:56:0e:9a:cc:ad:8e:
                    dc:0d:f9:e0:22:4b:70:e2:f4:90:7f:38:7d:89:4f:
                    ea:86:cc:22:84:55:31:37:01:c7:e8:46:b4:2d:4d:
                    d6:73:d0:39:bf:04:d9:86:46:93:b6:e1:92:e0:c1:
                    37:16:90:58:46:b3:fb:ba:7f:16:8e:e4:5b:49:12:
                    ee:6f:70:a4:61:5c:53:60:97:d7:a7:43:36:7c:46:
                    f3:97:8e:4d:79:a1:1d:31:3b:ff:45:6b:82:ec:97:
                    3f:c1:9d:56:40:81:75:33:00:6b:ca:5c:f7:20:f6:
                    55:fd:75:bd:ff:44:33:99:74:1a:fd:60:b3:75:10:
                    b5:e2:5a:32:81:1e:d1:28:91:dc:f1:10:a5:60:02:
                    a9:e3:a4:5b:27:70:a7:30:c6:86:8d:bd:de:0f:41:
                    9e:b7:80:e2:f9:82:25:4c:7f:89:c0:04:99:f4:5a:
                    83:04:d0:43:3a:ba:3f:16:fd:7c:8d:2c:95:6c:50:
                    cb:e3:f1:74:31:82:af:4d:40:c4:fa:45:e8:38:05:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:BF:0C:68:C2:60:06:C0:F9:15:35:03:77:29:FA:A6:A2:E6:65
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:4f:43:ee:b3:61:38:ed:ec:49:ca:63:ff:bd:f7:a6:45:
         1f:ba:05:2a:3d:c9:d8:3a:3f:cc:b5:15:69:f1:0b:27:a9:af:
         9f:bb:1a:c8:18:20:f6:9d:11:a7:2c:1d:8b:2e:24:39:72:4f:
         b0:1f:56:50:f3:12:18:ce:70:81:9e:f3:43:b3:34:a2:8d:61:
         78:78:4d:a5:28:38:33:ea:ad:15:69:51:81:8e:8a:8a:30:88:
         50:df:54:0a:8a:69:49:90:b2:0b:6e:07:c3:81:19:14:97:66:
         9a:7c:bc:5e:6a:78:76:c6:fc:53:91:24:55:a9:1d:7f:1a:c5:
         df:b3:d7:c7:73:69:3c:37:ee:92:6a:52:a6:bd:9f:1a:40:2e:
         95:e5:dc:d6:3c:72:6d:02:1e:f6:3e:48:59:50:0b:d6:69:23:
         9e:7d:f4:23:a7:ce:ce:20:45:7d:1e:d8:fa:0e:65:28:3f:39:
         72:9c:a6:f4:22:80:a6:65:18:f5:c9:f0:9c:e9:9e:d6:9c:25:
         d7:87:a8:75:3e:c3:63:3c:27:4b:29:4c:f5:5a:0f:9a:fb:94:
         18:34:7f:15:06:dd:76:b6:ff:5b:2e:fc:4e:34:e3:76:9c:94:
         0d:1c:4c:2d:af:31:cc:ab:26:22:e5:df:5c:18:42:84:02:2a:
         54:27:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:30 2025 by rpki-client on console.sobornost.net