Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
File:                     RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json)
Hash identifier:          Alw49TQadgKW2Ia6lualbbLRmt+qx8QgcnzO8H/RFjQ=
Subject key identifier:   10:3C:7B:0A:0F:99:C3:8C:B4:E1:C5:C8:BA:D2:0A:41:EC:9C:03:8C
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
Manifest number:          0621
Signing time:             Sat 26 Apr 2025 20:29:07 +0000
Manifest this update:     Sat 26 Apr 2025 20:29:07 +0000
Manifest next update:     Sat 03 May 2025 20:29:07 +0000
Files and hashes:         1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: E6ePwm7G2W0pcmyXT0bz/YPQvtxd+GWn6tK6bw90Eww=)
                          2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 8e05gzQi7pUAaZxz5oxTvUQfM0A7KbTjJTrGpKehcUY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: Apr 26 20:29:07 2025 GMT
            Not After : May  3 20:29:07 2025 GMT
        Subject: CN=680d4213-3060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:8d:fb:3d:33:43:55:08:79:03:95:61:1b:
                    ba:01:59:9c:dd:58:b6:64:67:da:b3:b1:a0:00:08:
                    9f:4c:c4:e3:33:93:c9:57:4a:3c:5c:51:ae:8f:db:
                    ec:08:8b:ad:12:49:d7:96:5a:77:66:5c:b1:df:d3:
                    bb:a4:40:51:f2:ff:ad:ab:9a:0e:df:60:46:db:42:
                    16:af:cf:be:9c:ea:d6:75:3d:6b:4b:d4:07:fc:08:
                    a7:19:a9:6e:83:3e:e7:26:b4:c1:e0:9a:0f:a7:57:
                    d8:62:01:06:dd:74:04:58:5b:7b:67:97:6d:04:d3:
                    5b:39:94:8e:b9:d0:11:e1:d2:94:bb:09:17:5f:64:
                    0f:53:70:43:d9:3e:80:8e:da:10:7b:86:d5:00:20:
                    11:76:ec:51:34:a9:f4:57:d3:8e:12:34:9c:8d:33:
                    b7:f5:fb:77:f2:a1:4a:de:21:f6:e5:3a:66:db:79:
                    64:8b:9a:da:d8:a7:c2:48:cc:34:c0:db:03:03:87:
                    3c:2d:2e:29:77:26:86:f5:8e:f0:e5:76:b1:13:43:
                    4c:5d:07:f6:44:a6:0e:5b:64:ed:27:6d:8a:2e:1a:
                    95:42:37:e2:d4:94:6d:df:52:d7:05:96:4c:1d:2a:
                    7d:fc:59:c3:46:ed:12:4b:4f:9c:5a:ef:31:57:ee:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:7B:0A:0F:99:C3:8C:B4:E1:C5:C8:BA:D2:0A:41:EC:9C:03:8C
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:8e:c6:45:77:0c:35:ef:3a:19:44:73:49:a4:a6:ea:c0:
         c9:b3:b9:bf:4f:39:af:71:39:2d:25:55:e1:c5:85:f5:91:38:
         9e:10:39:ec:1e:f4:46:7b:3c:25:58:76:70:b2:18:a3:c0:b7:
         e1:0d:63:ad:2a:9d:74:2a:10:1b:4b:02:76:3a:48:91:b6:09:
         7e:f2:74:04:1f:1c:41:09:34:a1:7a:5a:5d:4d:d6:54:76:96:
         a9:9f:f6:c7:94:e9:33:6a:8c:1a:3e:93:26:35:3a:fc:2d:6e:
         72:e2:69:17:3a:78:11:cb:44:51:cb:cf:ca:c4:5c:de:1e:8f:
         41:ef:37:4f:a2:52:fe:15:96:8c:63:b3:40:92:b3:38:fe:19:
         f8:5c:04:09:97:de:24:f1:63:4a:b9:5a:d0:7a:e1:e4:1b:21:
         5d:5e:f8:b2:8c:68:aa:eb:88:1c:07:d6:7e:0c:ee:ce:d1:79:
         b7:f0:5c:b8:0f:2b:89:1f:3f:2b:34:3a:7f:a6:41:22:b5:36:
         39:e6:7c:a2:06:36:73:c5:a8:44:d8:ef:8b:d3:55:55:3e:e3:
         16:99:ee:8d:25:83:48:5c:11:a3:fa:0b:f7:39:6d:a0:26:dc:
         4d:12:27:7e:26:34:cf:c6:83:11:85:03:6c:4a:9f:77:5a:71:
         bd:2e:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net