Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          gtNpqyWeGl8Vh2QV18xZR4VlEjRdL3z2joaGwcv50fM=
Subject key identifier:   03:92:43:B9:6C:6F:C2:71:81:52:A1:B0:6D:20:FF:B5:E4:E9:27:8E
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          5C
Signing time:             Sun 27 Apr 2025 05:57:10 +0000
Manifest this update:     Sun 27 Apr 2025 05:57:10 +0000
Manifest next update:     Sun 04 May 2025 05:57:09 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: vZuVi7NKSy0lNJuRPMUY/gf0LFM5X9O9Y6dS0UEFpO0=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Apr 27 05:57:10 2025 GMT
            Not After : May  4 05:57:09 2025 GMT
        Subject: CN=680dc736-9640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:8f:17:ea:ba:0f:22:1a:41:dc:ed:44:ac:
                    b1:82:66:2f:9a:f3:f8:b2:52:34:b6:20:52:c2:94:
                    41:57:3d:65:db:1b:a6:32:96:d8:55:df:b7:ea:cb:
                    d3:52:5c:61:57:ab:ce:7c:78:c5:ad:f0:39:40:06:
                    1b:e0:c3:9c:36:0c:3e:da:31:4c:74:7c:19:dd:43:
                    1d:83:d0:8b:8d:6f:5c:40:22:fd:f7:15:38:58:d1:
                    cf:8a:5d:b0:70:f9:c9:76:80:2e:af:ef:71:11:6b:
                    9f:cb:b2:a6:55:2c:94:12:76:2c:ab:b3:30:1f:49:
                    0d:47:c4:12:09:39:3c:d5:70:fd:6a:b4:76:ec:bf:
                    e5:aa:98:0e:82:89:97:c3:d3:b6:87:bc:1b:78:09:
                    ca:c7:36:b8:9c:a9:37:95:03:3b:02:a4:f9:68:bf:
                    74:4d:18:0c:7f:24:3a:05:9a:eb:4d:75:a2:6f:9d:
                    22:d0:4b:3c:cd:98:35:47:01:f0:2a:a7:35:d8:fb:
                    95:7e:ec:cf:ac:be:54:ec:2a:2e:18:bc:0e:b8:77:
                    ea:2a:70:49:54:fd:52:3d:46:9f:b5:4e:2a:56:d1:
                    41:3d:d3:1f:91:30:af:9b:73:c8:a9:cf:be:bb:33:
                    55:f2:72:85:9e:8f:09:f5:4d:4c:71:37:0b:99:7a:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:43:B9:6C:6F:C2:71:81:52:A1:B0:6D:20:FF:B5:E4:E9:27:8E
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:c7:2a:80:e7:1f:a5:3b:d9:63:2b:d5:fd:7c:d2:06:8a:
         c3:db:bb:a6:30:75:c5:92:4e:79:ed:3b:13:cb:8b:7f:6a:e3:
         25:ba:a4:bc:8f:8f:6f:ec:9f:56:2e:50:28:0e:9e:b8:35:ab:
         1a:7f:27:9d:3e:b0:94:c8:69:1e:12:d6:02:eb:95:ba:71:1d:
         c2:5a:4a:24:0c:c4:d1:15:14:d2:3b:41:41:c9:eb:40:8b:a1:
         be:6f:6d:a0:c8:79:70:23:4e:cb:be:d0:be:f6:47:8f:16:18:
         58:66:e5:d7:54:a9:38:3b:ac:b2:24:e1:55:9f:23:4a:d2:c0:
         5a:cf:14:80:ce:ad:30:64:d3:c8:57:92:da:74:b3:a2:8d:30:
         8e:6f:63:75:74:89:9e:f0:e2:04:ea:e0:54:1e:3f:68:c8:9c:
         21:fc:36:2d:86:40:ea:07:4c:86:6e:fb:c8:e6:0c:86:8b:76:
         b6:b6:19:b8:41:ac:2a:fe:07:eb:91:c9:52:78:fe:ba:7b:c1:
         29:b6:cf:d5:0e:05:ab:87:21:1a:c0:cd:bf:27:c7:ea:2a:94:
         02:f9:e2:15:f6:15:3a:cb:97:cc:a9:1c:4e:8c:5f:85:c4:b1:
         eb:11:7d:04:ed:6b:35:cf:08:09:d3:91:c5:ea:67:16:ff:7c:
         1d:e3:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net