Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          05Oe7m4AK/WHa4ZAtFU/8oVi/LtKSHll2zAp02Pr8D0=
Subject key identifier:   B5:08:9F:75:1C:94:C8:E9:85:1E:1E:B7:D4:C9:4A:2C:01:F6:95:D3
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          E0
Signing time:             Sun 27 Apr 2025 04:24:36 +0000
Manifest this update:     Sun 27 Apr 2025 04:24:35 +0000
Manifest next update:     Sun 04 May 2025 04:24:35 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: 0p/9YJlXRzVNQQpqNJUzb425jrr184MEkDZ2zjwHiTg=)
                          2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: GLQc94rusVtQbATmFzKX5DyXm0E80+RpBsTaqBZ5TIc=)
                          3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: g+h2X039YfWFdq3nneNF8fX2UZhaS8/1cDtSjJwB84Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Apr 27 04:24:35 2025 GMT
            Not After : May  4 04:24:35 2025 GMT
        Subject: CN=680db183-83a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:5d:48:eb:93:16:28:04:cb:d6:dd:85:6e:
                    9c:e8:0b:44:c5:4a:ed:7a:da:e3:89:58:ef:37:ab:
                    cc:13:1e:e6:f3:02:9a:65:16:24:29:46:9a:d9:04:
                    39:f3:40:e6:da:62:3d:61:c9:73:56:c1:fa:6c:7f:
                    c1:10:da:dd:16:3d:05:9b:d4:b2:d0:79:b6:fa:4c:
                    2c:33:b7:5b:88:f8:0a:bb:d7:57:cb:d1:2e:43:77:
                    8d:6a:1b:1a:ab:9f:6f:b1:20:03:ad:d2:37:26:79:
                    71:88:d3:5b:19:13:45:d7:7f:c8:3e:29:40:10:01:
                    80:1c:e0:07:07:d3:30:a7:00:cb:d6:1b:a8:a2:de:
                    83:26:4e:aa:d7:53:2d:2d:63:81:d3:05:87:2c:50:
                    5e:fc:f4:f5:39:3a:0c:84:11:52:88:b9:a2:e9:7b:
                    a2:43:d1:f9:29:fa:25:21:77:30:2c:a0:34:22:40:
                    a5:a9:21:38:90:93:93:ff:6d:6e:1a:bf:d5:b2:7e:
                    0d:b2:56:20:d6:6e:3d:50:b1:0f:45:d7:30:89:7e:
                    e3:f0:9e:89:2d:20:61:fe:fc:71:40:5a:6d:93:0c:
                    ae:54:d4:af:f8:55:93:1d:88:18:30:a9:f0:61:e4:
                    f7:45:11:b4:2f:e6:7c:40:f7:74:f9:bf:2e:85:26:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:9F:75:1C:94:C8:E9:85:1E:1E:B7:D4:C9:4A:2C:01:F6:95:D3
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:cd:4f:06:58:7c:6c:bb:92:5d:5f:9f:c0:d8:41:7c:f6:bf:
         ff:48:7f:0e:bd:bf:b7:a0:f1:b8:a2:65:67:59:9c:0f:eb:4b:
         3c:e9:5b:8e:69:09:f4:e9:82:73:d5:10:84:94:da:17:ac:d6:
         11:95:be:62:0a:23:8d:ac:58:41:36:d8:4f:fc:4c:0f:93:e1:
         ed:5b:1e:a4:71:aa:29:df:46:f0:2c:de:05:00:56:51:f7:22:
         31:c1:6c:95:49:93:c2:f8:de:10:d6:32:25:6e:4f:3f:56:65:
         26:0c:6e:cc:61:fd:71:4a:a4:e1:97:32:ed:26:c3:e8:57:7a:
         20:c7:4e:e8:ac:80:76:9f:45:77:ed:6b:6d:27:47:8b:8b:d5:
         92:0c:79:44:cd:e6:12:bb:fc:2f:ae:7e:16:5b:53:c3:bf:d4:
         2e:1b:4a:96:98:be:b8:85:47:f8:95:0a:24:e6:0c:85:c7:4f:
         58:02:fc:89:d5:3d:6a:c4:0c:94:dd:0c:1d:27:12:af:54:0c:
         f6:c3:9e:a9:01:ed:c8:9a:c4:8a:e8:b6:4b:27:b4:2b:b1:4f:
         49:07:2c:77:a3:7a:9e:e5:0d:a8:48:2b:46:57:58:8d:bd:24:
         92:73:02:18:91:af:66:8b:89:74:9e:d3:99:b7:de:56:60:0c:
         d2:17:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net