Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          zeXv2PY9jQMxkL/+HPu3AJZROJfhwEbzo3P5+5ulOvc=
Subject key identifier:   2B:74:14:0C:73:09:1B:E3:95:32:2E:01:E1:CC:70:63:7C:68:33:06
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          0266
Signing time:             Sun 27 Apr 2025 01:20:40 +0000
Manifest this update:     Sun 27 Apr 2025 01:20:40 +0000
Manifest next update:     Sun 04 May 2025 01:20:40 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: Dt0Y8KrUf07psqdblPcmb9xgFSoKsS2r8w459+jynI0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Apr 27 01:20:40 2025 GMT
            Not After : May  4 01:20:40 2025 GMT
        Subject: CN=680d8668-ff80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:e6:cc:35:dd:45:1e:05:c0:99:3d:e7:69:
                    61:a4:cc:ba:65:32:10:a8:02:7a:0b:cb:e1:74:43:
                    65:96:d6:5a:0f:1d:25:43:b1:53:1f:d8:a7:01:cd:
                    65:f9:7a:b3:92:77:6a:83:0e:10:3a:ba:28:8a:e5:
                    e4:c0:6f:27:5e:2d:08:d5:3c:97:11:10:e3:52:f0:
                    86:ff:80:c3:dc:a3:ce:9e:a7:c1:a4:32:0f:15:af:
                    a9:a4:75:30:b9:13:da:5b:c2:c5:a2:f2:4b:05:c3:
                    fe:fc:65:9b:75:35:c6:e9:41:15:f4:8b:ad:68:d2:
                    a4:12:34:09:48:9a:a7:22:4b:86:d7:a6:0f:bb:62:
                    fe:7b:85:82:3a:b0:e6:94:73:8e:c0:2e:ee:14:8a:
                    2c:0c:33:2b:ca:01:5e:2b:f4:e9:79:e9:44:1b:a9:
                    32:b4:b2:08:23:94:1b:22:54:54:fe:cc:5a:83:ee:
                    fc:6e:97:bb:d1:c7:cc:e2:fb:2f:5d:3e:7c:55:d5:
                    27:21:e9:7f:e5:cc:51:17:f6:b1:04:31:c7:f5:ca:
                    bb:9b:f9:14:22:51:53:a1:07:74:a2:87:4b:67:cd:
                    29:33:22:c6:03:79:c3:8b:a7:a4:3e:5d:d6:39:88:
                    36:80:4a:65:71:5e:a1:2b:6d:bb:82:a8:86:84:87:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:14:0C:73:09:1B:E3:95:32:2E:01:E1:CC:70:63:7C:68:33:06
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:16:fb:1c:c2:99:96:39:ab:83:09:b3:5f:b8:7c:2c:e6:73:
         25:f0:ee:f2:fa:dd:ac:72:f5:ac:cc:63:83:02:2d:2a:8e:fa:
         08:70:95:89:a5:20:ad:b9:7f:14:18:a8:93:ad:8f:d4:8a:9a:
         c9:10:d9:fc:a3:ec:d9:87:c0:47:75:b1:7d:7d:34:71:59:ee:
         94:64:26:cd:f7:1b:18:f2:8b:27:35:40:b5:3a:98:be:e9:60:
         55:d8:98:87:a5:d0:ea:f0:bf:99:87:8b:22:3f:cd:41:40:44:
         73:05:81:2a:e5:dc:87:53:22:c0:04:8d:07:1a:2e:d5:1f:bf:
         6a:d2:8a:30:a5:95:b5:c0:78:51:18:bd:1b:e0:8d:a8:d8:e9:
         07:51:fd:85:bb:5c:44:ad:7b:e9:eb:ea:fd:65:61:85:05:31:
         ce:4e:d3:0e:3b:ae:0d:96:24:93:c1:34:10:83:a6:91:1d:73:
         cc:c4:c5:0f:50:ca:b8:77:96:33:d0:3e:8a:42:c8:71:d9:52:
         4d:e9:5b:1a:f6:a1:9c:0e:a1:8d:11:5c:82:e9:3b:d4:e0:13:
         54:25:66:de:ea:0b:ea:bd:71:14:29:6f:e1:71:d8:66:f6:48:
         ca:9d:b4:9e:2c:81:fd:cd:02:22:e2:03:5e:c7:30:58:15:4f:
         fb:f7:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:48 2025 by rpki-client on console.sobornost.net