Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File:                     _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier:          7idxNkmabOFtAgWSsWUiWv0I4htKVRUwFYjYI0hcP3U=
Subject key identifier:   E0:85:47:3F:AC:03:E6:49:EE:44:00:EC:FC:F1:23:72:84:7F:ED:5A
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer:       /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial:       0449
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number:          0439
Signing time:             Sun 27 Apr 2025 00:01:39 +0000
Manifest this update:     Sun 27 Apr 2025 00:01:38 +0000
Manifest next update:     Sun 04 May 2025 00:01:38 +0000
Files and hashes:         1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: MyK1oVhGnW4RvH9MIAIPNAd4bAbysKLmJvRkeGWtB/8=)
                          2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=)
                          3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
                          rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
        Validity
            Not Before: Apr 27 00:01:38 2025 GMT
            Not After : May  4 00:01:38 2025 GMT
        Subject: CN=680d73e2-fd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:95:13:6b:68:50:27:2a:f5:47:3e:01:79:
                    cc:56:13:8c:f0:8b:48:a1:1b:a6:d0:b2:b4:cb:0e:
                    a7:c2:4e:fe:9d:8c:f6:fa:f1:bc:06:39:99:03:fd:
                    67:55:4e:17:31:19:c5:e7:e1:22:71:fc:e2:67:aa:
                    00:9b:fa:d5:08:d5:16:7b:9b:91:c3:0d:7c:5d:60:
                    5a:d4:d2:b6:94:3a:09:6b:11:20:e5:af:42:62:35:
                    fd:77:70:a6:c8:b6:69:9b:81:8b:fc:a0:ec:c1:d0:
                    28:cd:43:c7:32:ca:98:93:12:b2:0e:bf:42:23:52:
                    a4:cd:6b:e4:47:65:22:2e:95:b2:de:c5:c0:a0:6c:
                    b9:be:7c:9e:28:e5:c7:05:23:11:e6:d7:41:4b:b5:
                    ae:d8:96:af:c5:ca:8d:ed:dd:eb:8b:59:43:69:96:
                    9d:10:7d:ef:d4:ac:b4:62:9c:95:4f:23:1d:57:2b:
                    6b:a5:28:7f:87:d4:23:61:fa:3d:6a:68:46:c9:08:
                    8d:6a:7c:8e:05:d8:34:32:d8:d0:4e:41:f1:41:e2:
                    48:e3:fd:e2:7b:bf:a7:89:1a:60:12:3f:44:00:39:
                    d6:f6:a5:88:aa:b8:bd:ba:14:21:4b:de:f8:8b:41:
                    9c:d5:b9:d1:3d:2d:ae:1b:14:e4:22:5a:75:bc:9d:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:85:47:3F:AC:03:E6:49:EE:44:00:EC:FC:F1:23:72:84:7F:ED:5A
            X509v3 Authority Key Identifier:
                keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:ef:f1:2f:48:a8:b9:db:cc:33:15:23:2b:6d:5d:49:3d:
         83:7b:da:7d:d2:96:49:79:bc:e6:6c:f1:be:9d:6f:87:18:02:
         6b:ea:47:1d:23:80:d7:46:8a:38:18:4d:fc:54:3f:34:a3:e6:
         70:4d:a2:be:0e:32:95:a5:ff:bc:4d:4d:e9:8a:8e:b7:d7:77:
         91:17:fd:e0:15:72:d7:99:db:6c:06:9c:9b:2f:71:1f:2e:d6:
         a6:7b:f5:6e:b7:f2:5e:7d:00:a8:dc:3c:27:b8:f9:94:ab:c8:
         b9:ee:f7:c6:54:55:7b:4c:6d:0c:d2:96:9d:02:83:53:86:be:
         2d:47:96:e6:9e:22:34:a7:1b:2b:e7:e4:9f:c1:61:c5:aa:94:
         02:46:c2:f5:c9:60:64:29:40:77:df:52:94:ae:0b:df:2c:3f:
         16:dc:4d:2a:e0:7c:ff:c2:08:11:65:2c:39:fb:8e:8e:4c:5a:
         3a:56:d7:ce:35:96:03:83:fa:08:3b:4c:25:48:e6:cc:99:2c:
         96:48:8b:21:6c:77:3c:a6:da:ee:d0:77:9b:cd:2e:80:73:15:
         04:1f:d4:50:6b:66:a7:e2:b1:79:92:62:2e:4c:f4:1d:22:a7:
         85:d4:f3:54:fe:64:e6:c7:7d:0a:eb:d2:24:60:86:d9:f2:c0:
         2e:2c:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:35 2025 by rpki-client on console.sobornost.net