Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
File:                     svirANV0ZN1dBaRaR8Qg9fiWuPw.mft (raw, json)
Hash identifier:          X55muuS5k3ajsSas4oHmuThbIYwpTcm6KjCXaAQS6CU=
Subject key identifier:   E3:93:C4:91:21:F1:94:EA:34:38:1B:9D:26:B2:92:7A:19:7C:58:3D
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       13CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
Manifest number:          1384
Signing time:             Sat 26 Apr 2025 16:57:22 +0000
Manifest this update:     Sat 26 Apr 2025 16:57:22 +0000
Manifest next update:     Sat 03 May 2025 16:57:22 +0000
Files and hashes:         1: svirANV0ZN1dBaRaR8Qg9fiWuPw.crl (hash: uFm6gOPDFMIkpKeMyRUHGwXdh8UHDfkj6xOVoVGmxsI=)
                          2: ECC070D01A0A11F0AEC42962C4F9AE02.roa (hash: zPt3WaZB55oiJiagWNoB0U+AQGeypkiLTjNNKfKGqH4=)
                          3: F67928B2607211EFADFDA31CC4F9AE02.roa (hash: GgjTm2foJy13YqAGAhvufjFQnhTuEPbAqgibT/4+/5c=)
                          4: 3C916EA69A7D11EF8450BB33C4F9AE02.roa (hash: QCeXDt33Z8DjsOtSegI4RttXe/W4ZRgrAJu/NqehdQE=)
                          5: 24D4478E774611EFA3ACCD6AC4F9AE02.roa (hash: RMEd5XMiiZ2qHrEfTZXxo60gqzZs/KrE41SmTIZdOU8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5071 (0x13cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Apr 26 16:57:22 2025 GMT
            Not After : May  3 16:57:22 2025 GMT
        Subject: CN=680d1072-a27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:8a:a6:45:91:f3:57:08:78:64:ce:1a:fb:
                    ed:54:fc:37:41:9a:ed:ea:5c:28:6e:6a:d8:30:cb:
                    37:3c:a5:93:46:11:16:48:21:8b:7c:ae:23:ae:90:
                    c2:d2:6c:82:84:cc:ad:ca:8c:9d:f8:35:35:07:8a:
                    83:8a:90:5d:3d:30:77:14:d7:18:52:db:1b:5c:e7:
                    8a:de:d4:8a:39:6d:12:fc:e2:dd:41:a2:b9:d5:3d:
                    60:c8:4a:53:c6:86:54:e8:79:ca:1e:5a:06:36:69:
                    62:26:4a:c1:d6:21:b7:e2:7a:94:d2:b0:3b:65:7b:
                    16:19:ac:39:9c:b5:50:cf:96:2b:7f:49:4c:56:e7:
                    b4:8e:4f:2f:d2:8f:16:c0:8f:2d:80:5e:4f:50:e0:
                    60:10:5a:fe:07:7d:e1:ec:42:27:10:b7:49:9f:93:
                    ab:3e:c1:10:b9:c6:d1:f4:ed:7d:8f:da:9e:a9:3a:
                    38:ec:5f:f4:92:9c:28:9e:7f:04:53:7e:db:97:80:
                    67:0b:b1:ea:7c:99:52:44:5a:f2:70:36:00:11:71:
                    35:1b:15:67:aa:05:fe:03:9c:ff:14:c1:a5:f3:5c:
                    52:a5:e7:4c:86:8a:5c:46:de:5a:db:40:a4:96:c4:
                    d5:2d:d0:8c:51:e0:bc:a4:06:3a:a5:5d:18:13:1c:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:C4:91:21:F1:94:EA:34:38:1B:9D:26:B2:92:7A:19:7C:58:3D
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:83:80:83:ac:47:b3:4b:99:5c:79:55:9c:0c:72:60:f1:74:
         77:f1:e4:aa:b2:a5:36:bb:82:47:25:20:37:8c:1e:15:16:23:
         e6:fe:a1:dc:f8:b7:12:ed:fb:65:32:19:c5:9a:63:8b:a1:51:
         55:9b:1d:aa:7a:24:a3:e7:7c:85:42:95:34:55:71:6d:11:9a:
         d2:ef:13:58:88:c5:05:d5:d0:f4:b5:78:9b:d8:c9:7a:56:29:
         c5:fa:ea:83:e9:d0:55:ee:5f:6c:54:d7:f3:26:00:96:40:7d:
         f3:fd:6f:fc:90:60:1a:36:f8:79:5f:88:75:39:f5:ef:49:59:
         17:87:76:4b:75:c6:b6:e8:59:f6:e5:10:74:f7:54:c4:14:46:
         02:48:89:0b:1c:9c:d6:42:d6:8d:54:cd:47:ba:2b:fe:79:d7:
         dd:b6:80:df:20:c9:4e:32:f4:85:30:83:d8:da:6d:b8:53:99:
         ea:f7:72:3c:68:57:a8:c6:ab:bb:33:a1:5d:40:87:82:56:29:
         80:92:37:10:7a:b0:9b:73:f9:83:67:bb:c2:45:9e:2d:1a:ef:
         d4:ae:23:82:83:39:37:be:0f:ba:f0:81:01:c0:ad:73:83:98:
         6f:78:eb:be:2a:2f:48:98:a4:c5:5a:6b:12:4d:8c:b6:5e:b7:
         7d:ba:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:52 2025 by rpki-client on console.sobornost.net