Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          p6v1UbwMY+snYaLxqv8axHgwEzu7ggPyUE3vWOGT6OU=
Subject key identifier:   7D:71:71:94:D0:C9:F3:A5:70:F6:2B:DB:95:88:65:44:B0:D7:48:7F
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0339
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          0316
Signing time:             Sun 27 Apr 2025 00:56:19 +0000
Manifest this update:     Sun 27 Apr 2025 00:56:18 +0000
Manifest next update:     Sun 04 May 2025 00:56:18 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: FQ3btH2oAit2B9i2iRuPITPm+0yXUAudFDg0YV9Z0r4=)
                          2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: BKZDdCu5I5Bny2FjLb1mBVpCgzMTIVhQtDH+2UKX5kU=)
                          3: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (hash: HyDmzwiWOExy2YJsgokVPHZS5Evkr13x2XepJOzvoNk=)
                          4: 748FD068C11011EFB6161F67C4F9AE02.roa (hash: 1JpkCoiTyutFLV6xbj39GXkCqodZPTBI6jWeSNGeps8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Apr 27 00:56:18 2025 GMT
            Not After : May  4 00:56:18 2025 GMT
        Subject: CN=680d80b2-8735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:14:ff:b2:fa:0a:83:22:2b:25:ea:66:71:
                    b6:b6:56:3f:04:46:ac:09:f6:83:77:36:75:65:fd:
                    5a:b4:17:bc:9c:d5:ed:4e:c9:b0:a7:66:bb:4a:98:
                    b3:18:e7:9e:52:2a:82:84:21:3c:de:ef:85:35:20:
                    61:a0:e0:ef:39:70:a6:ca:70:be:cc:dd:50:33:8c:
                    48:4a:b8:a5:5f:25:b1:12:df:69:36:75:33:bf:10:
                    c8:41:2d:48:c7:e6:60:ea:05:78:c3:fd:85:be:68:
                    96:9f:c9:0c:b2:a3:16:3a:87:be:3d:dc:f6:b9:6d:
                    3e:d0:b8:e2:7d:0e:23:88:ab:ff:6a:56:83:0f:08:
                    77:df:4a:ab:3a:e5:19:39:01:01:df:41:3b:ab:f1:
                    81:8e:7b:6b:32:b6:a2:2a:bb:29:3d:6f:c1:e8:c9:
                    d7:df:bc:3d:e8:63:96:0b:10:b4:54:11:86:43:fc:
                    51:e1:16:8e:07:fc:58:91:84:f5:dc:7c:29:d1:74:
                    da:63:00:c3:5b:2a:f2:6b:cc:d7:92:b2:d2:16:74:
                    53:86:34:3c:d0:c7:4a:99:cc:8e:1b:54:87:a2:04:
                    ac:e1:6e:ce:cf:c6:1b:7a:02:64:86:45:cc:e5:f1:
                    a9:4e:91:9b:a7:f9:f2:3d:09:cd:54:2b:87:3e:0b:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:71:94:D0:C9:F3:A5:70:F6:2B:DB:95:88:65:44:B0:D7:48:7F
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fa:b5:74:1b:4b:8f:8c:88:98:fa:81:9c:a9:16:be:ba:39:
         e8:b7:a2:11:77:b7:82:33:5c:d0:5c:92:0b:5a:81:98:16:c2:
         d3:58:ff:ea:0a:b4:3f:e0:4a:f5:a6:62:63:95:bf:d7:ef:bb:
         6d:8d:2d:0d:d7:03:6f:c7:f9:7d:53:4c:1c:0b:c2:fd:6c:09:
         0b:85:68:03:c4:8b:45:69:78:15:bc:1e:dd:8e:4c:0e:54:54:
         a1:60:de:b4:45:75:cc:db:ba:ff:a6:4d:94:46:07:c8:2b:a7:
         e8:33:9a:9b:0b:8d:b7:21:28:9c:f4:0d:29:60:21:56:d2:ad:
         7d:12:46:c7:7e:2e:21:a3:57:3b:36:8d:d2:ca:af:71:bd:45:
         1f:26:8f:fd:e7:47:13:66:d0:47:54:d9:c7:32:d4:16:43:fa:
         8a:e0:4c:e8:f3:1b:60:13:f7:36:03:75:36:5a:f1:0c:a9:5b:
         80:9b:a5:c3:87:e1:56:50:16:0f:d5:9a:6e:04:bf:4d:a3:3d:
         17:67:0b:f0:fb:57:ec:3e:a4:d4:ae:be:fc:2c:00:a0:fb:1e:
         5f:56:a9:c1:c9:95:0e:e7:2b:b2:8a:5b:f6:64:72:b7:1d:d7:
         4f:10:15:23:f0:06:d3:cb:9d:96:56:8a:b1:4f:95:1d:39:00:
         39:ba:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:50 2025 by rpki-client on console.sobornost.net