Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File:                     ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier:          b8jYgDweWl31YP7RP/2ruo6lGXtWkzIMzi/pvVo6mtU=
Subject key identifier:   FB:F9:B1:92:5C:5C:50:15:B3:1F:31:09:54:7F:2B:20:29:11:D9:A8
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer:       /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number:          05D5
Signing time:             Sat 26 Apr 2025 22:39:50 +0000
Manifest this update:     Sat 26 Apr 2025 22:39:49 +0000
Manifest next update:     Sat 03 May 2025 22:39:49 +0000
Files and hashes:         1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: 3R0zJgAFz8vmhvm/LrWQ+iEGEOfcHgdcXqpMGVganmA=)
                          2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: 9tQnJbgHn9CXIDaZmtJ4XxjigORNQV18RL9rnYpJw1M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
                          rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
        Validity
            Not Before: Apr 26 22:39:49 2025 GMT
            Not After : May  3 22:39:49 2025 GMT
        Subject: CN=680d60b6-a0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:f8:ff:d6:d9:df:b8:7e:38:22:85:78:96:
                    0c:09:2f:79:df:e0:6d:a8:63:49:d3:a6:6e:84:c1:
                    79:57:96:93:f6:2a:c2:23:2f:2f:1c:11:35:03:04:
                    f1:29:24:6f:83:85:4c:89:58:45:61:07:a9:fd:e4:
                    6d:2b:c1:bf:98:6b:e2:b9:82:79:b8:36:12:fa:86:
                    3d:5a:6e:11:46:ac:30:8a:ff:6c:87:62:be:12:21:
                    a3:eb:46:b3:de:e8:38:dc:b6:d6:46:79:16:ba:6b:
                    a5:1d:8e:6e:de:69:77:09:56:c2:93:75:ff:74:04:
                    78:6f:e8:65:7b:6f:b3:13:64:bc:7e:6e:eb:30:dd:
                    ab:9c:67:71:4a:8b:05:b2:c0:c6:46:5e:75:42:42:
                    3c:22:d9:fe:69:f4:89:95:fd:4b:12:68:24:74:9a:
                    59:4c:8e:21:9f:7a:91:a3:e6:5e:b1:c1:e6:20:11:
                    c9:10:19:cc:78:52:28:d1:f9:d9:74:03:f1:37:9a:
                    84:6a:1e:9b:89:f3:1b:56:e2:cd:86:42:4c:89:cd:
                    6a:c6:97:93:52:00:9c:31:bf:b5:82:e5:43:7e:d7:
                    41:3b:4b:59:ce:df:f6:d8:02:84:8a:0b:ac:99:fa:
                    56:16:d2:f4:1b:b5:3b:6b:0f:cb:6f:ad:de:a3:a4:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F9:B1:92:5C:5C:50:15:B3:1F:31:09:54:7F:2B:20:29:11:D9:A8
            X509v3 Authority Key Identifier:
                keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:52:ea:27:12:c9:6d:39:c9:51:7b:a6:46:ca:e6:52:4a:
         ff:15:b2:75:40:18:20:4b:7e:9f:00:dd:8e:26:8e:e2:e0:0d:
         c2:87:26:65:da:5d:11:a6:7c:81:1b:3a:be:70:ef:b9:29:81:
         b2:c0:d8:7d:50:1e:16:f6:bb:1f:3e:76:f2:de:51:b7:e7:21:
         b8:10:2d:bd:4f:8e:1a:70:25:51:fe:be:26:f2:c3:3e:8e:8e:
         29:60:52:5f:dc:22:05:0e:67:20:23:4a:0f:99:18:2e:7b:8d:
         61:29:dd:87:f8:bf:e8:73:9c:fa:c7:1b:4a:8a:6c:c0:e1:45:
         28:3c:ae:9e:33:d4:4a:85:ee:6d:05:7f:e0:09:29:ad:a0:cf:
         32:c8:e2:71:b2:26:3d:30:42:2e:72:db:93:02:87:a8:52:c4:
         87:95:eb:1b:23:f4:f5:10:89:e7:72:d1:ba:40:e1:13:1f:8f:
         ce:cc:14:a1:e6:8c:ad:21:f5:4c:5b:61:71:23:ac:29:c3:8e:
         78:f0:58:a3:f7:08:2a:77:78:45:e4:46:ec:0e:7a:35:52:66:
         c1:da:16:d3:9b:d9:1e:3a:33:8e:49:17:79:19:b7:c1:0c:ea:
         63:95:8d:ad:7a:d2:4f:b0:6b:23:a3:fd:bf:6b:ca:d8:b4:20:
         45:e0:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:37 2025 by rpki-client on console.sobornost.net