Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          JVaTrRy38Ev/jBEojKoJgj0UbGkuaZQx2mPRlWcd/G4=
Subject key identifier:   F4:4F:E3:03:07:1E:6C:A2:F3:97:46:78:D8:BE:5B:7F:29:14:1E:04
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0B23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0B03
Signing time:             Sat 26 Apr 2025 19:09:21 +0000
Manifest this update:     Sat 26 Apr 2025 19:09:20 +0000
Manifest next update:     Sat 03 May 2025 19:09:20 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 173CbQr+uFxggmLlWxbov0m+TuvozcekQdXhPoviu+A=)
                          2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SZfy2lzYI9darSjsTQEqARyS5q602BqtO3JRbHOsq3g=)
                          3: DE437646F8A911EB98242219C4F9AE02.roa (hash: ttCm1MPGwsxBxNTAWbkYeii7tkd0QoF3neo8cMILzsE=)
                          4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: SP/lqoxG8K385fFbiDzYapHGnCnV/BlNMKEYD/Qv8r8=)
                          5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: Ge3sA9vn4z8DktPLvZxRP3By2hr88qUHgnXklAjEj/I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: Apr 26 19:09:20 2025 GMT
            Not After : May  3 19:09:20 2025 GMT
        Subject: CN=680d2f60-cdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:83:f3:d1:1f:6b:b9:dd:16:14:b2:68:c0:
                    0c:7e:ab:1d:45:6b:b7:d6:05:88:2d:19:96:e3:db:
                    f9:6a:49:07:6b:08:4f:fd:f2:e7:6a:36:ba:7f:ce:
                    ce:1b:e4:8a:52:3f:58:0d:96:eb:44:7a:7c:da:99:
                    46:34:8d:29:7a:e7:3e:79:59:b9:f4:57:d6:38:a8:
                    cc:7d:b3:b3:0e:09:82:97:b7:32:dd:cd:4b:b7:ee:
                    68:b1:27:f7:95:6c:fc:8d:eb:9d:81:d1:d1:b0:af:
                    61:30:6a:15:ef:46:5a:e5:4c:2f:42:c5:4f:c2:b5:
                    ce:97:c1:13:3a:58:aa:d4:8b:f5:d3:75:78:58:58:
                    d9:26:6a:10:d8:1a:2e:97:59:5b:33:26:21:18:fc:
                    c7:25:51:30:00:63:af:53:4a:08:39:45:27:ca:3a:
                    e0:fb:28:ef:a4:25:b8:9f:bf:30:b4:59:23:04:1e:
                    88:ff:8c:af:c6:38:6d:ca:a0:7b:a5:50:ae:68:c7:
                    3f:b0:ab:9b:77:2c:8e:93:f3:1d:d1:37:ee:fe:16:
                    62:c7:1e:f6:e0:9d:61:c8:ba:66:35:ca:84:8a:14:
                    99:8a:6a:a7:49:da:fa:64:d2:48:c2:49:9d:88:6c:
                    0f:04:1a:8d:94:ff:fe:ba:cf:4f:22:e2:54:fe:f3:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:E3:03:07:1E:6C:A2:F3:97:46:78:D8:BE:5B:7F:29:14:1E:04
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c0:12:c4:04:f3:f5:e5:d8:c3:1e:5b:44:fa:23:0a:09:11:
         e6:95:32:91:10:9b:af:0d:16:4b:38:8b:67:46:d1:6f:6d:0c:
         d9:3e:e2:ad:71:53:a1:f2:01:68:c7:f9:1f:dc:59:f6:b7:18:
         10:3e:00:ae:b3:32:86:cb:cf:e5:e8:8d:62:61:dd:46:46:08:
         f2:c3:ba:d5:60:3b:23:f1:91:ad:a7:7d:71:91:0e:ed:7d:1f:
         52:53:bf:7f:cf:45:fa:9f:bf:46:3c:77:03:42:4d:a0:1c:ae:
         8f:1d:82:fe:46:b5:a1:fe:df:28:0f:88:b8:68:64:ee:5a:61:
         51:cf:fa:0a:74:e8:a4:c5:ac:cc:54:1c:61:31:a2:ff:56:a2:
         71:29:b9:1a:18:6d:5d:1f:0e:16:26:c3:c8:59:90:3d:19:8d:
         89:f0:59:cb:4a:ff:47:3e:70:a2:47:82:d2:e4:3e:0c:d2:76:
         9d:a6:cb:a3:0c:29:67:c0:f7:9a:e8:43:88:10:68:45:a7:32:
         76:27:4d:8e:10:dc:00:02:9f:91:5e:c5:5f:11:83:94:31:ab:
         66:57:20:d3:c2:06:e7:69:4d:07:c5:49:da:f3:c6:f2:36:fb:
         82:d3:34:53:27:54:67:aa:19:45:17:54:bc:9a:b4:d7:c0:ee:
         b8:87:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:58 2025 by rpki-client on console.sobornost.net