Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          X+Uay1uFx4LOUmrKz1pD+hzt5fF3EEJMV1oukoUsXXg=
Subject key identifier:   5A:17:00:55:9F:AD:86:65:53:38:F8:47:A8:72:A0:52:A9:42:20:C4
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       0744
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          073B
Signing time:             Sat 26 Apr 2025 21:27:13 +0000
Manifest this update:     Sat 26 Apr 2025 21:27:12 +0000
Manifest next update:     Sat 03 May 2025 21:27:12 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: SWfM/xKuvD85WODYmmQhvClexJKs1cHgOeFMZPGThmM=)
                          2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: DvUe9tlMP9l91/7mh7+Tetbprk3jQc1ROYqAjOky4yU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Apr 26 21:27:12 2025 GMT
            Not After : May  3 21:27:12 2025 GMT
        Subject: CN=680d4fb1-5e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:b9:61:00:fa:5d:1f:95:ef:ed:75:96:6e:
                    96:25:bb:8e:4f:88:f7:3a:1c:73:b5:60:45:5c:f2:
                    f2:3f:10:22:51:fb:e2:fe:a8:6e:56:5e:21:75:a5:
                    b3:8e:95:4f:da:aa:19:fd:55:b0:90:a8:33:19:0d:
                    c9:d0:9f:fb:98:e9:46:00:ba:5e:8a:f0:48:72:1a:
                    b5:ce:30:68:09:31:4d:be:8b:74:a5:e3:1e:1d:c5:
                    b9:a0:2c:db:94:76:1a:41:26:a8:d1:32:92:e4:d9:
                    dc:59:56:06:6d:11:3f:d5:c0:84:c3:13:64:70:74:
                    65:dd:56:3b:76:2c:cf:a6:20:76:a4:cd:57:40:0f:
                    da:e4:f5:29:e8:2a:1d:cf:3a:08:4a:e9:f8:6d:9e:
                    fc:3c:ed:6d:c1:80:84:1e:7b:34:77:0a:b7:0a:da:
                    ea:ab:6a:38:2c:c0:dd:a5:8e:55:fb:95:b9:40:5e:
                    30:2b:34:fe:2d:6e:7b:af:f5:37:97:57:10:61:ab:
                    c1:14:a2:e2:46:f6:f1:ac:89:a3:38:46:8f:84:cd:
                    42:bb:2b:83:3d:f1:b4:43:59:a1:2d:98:24:88:81:
                    bb:86:63:1c:e5:d5:0b:84:e0:bf:f2:81:c8:70:5f:
                    f3:3e:da:22:17:65:34:89:47:c3:9e:e1:89:c9:26:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:17:00:55:9F:AD:86:65:53:38:F8:47:A8:72:A0:52:A9:42:20:C4
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:21:ac:57:e9:0f:c3:00:17:2d:9f:79:78:3f:ec:3f:b9:c0:
         21:f0:64:6e:98:af:0f:c5:64:ef:6e:f2:73:eb:20:2f:85:65:
         10:c0:8c:af:0f:13:6b:64:c6:f2:15:b8:58:93:45:a6:10:e5:
         53:00:ec:eb:da:a0:84:5b:ea:67:01:a4:23:b3:a9:b4:4e:e0:
         13:c1:91:47:7d:9f:2b:32:fe:96:c6:42:7b:ec:d3:d7:85:5a:
         69:b6:d9:75:0b:70:cf:12:10:f1:5e:d6:81:d6:81:68:27:4f:
         c2:3c:40:b7:92:43:45:01:d9:b9:fe:1d:e1:7f:5a:81:6a:e9:
         c0:c4:58:7b:4a:c6:d4:17:29:49:47:01:54:e8:b3:d9:79:65:
         56:01:6c:76:52:64:53:50:bf:58:54:ca:db:06:54:3b:5a:e2:
         2c:a1:b2:5c:db:d9:1d:6e:3d:9f:36:ed:ff:11:5f:7b:0e:d1:
         ba:56:81:e1:61:86:cc:bb:10:3b:93:2a:ee:99:8b:1c:93:16:
         36:38:c9:ce:01:be:db:f9:1c:ca:96:3a:23:48:c3:50:8e:2c:
         06:41:29:ea:8d:ed:7e:b5:87:e3:a8:10:32:d9:50:51:bf:dd:
         c4:aa:7a:58:f8:54:49:a1:b9:5b:09:33:9a:4a:36:a0:1a:a5:
         3b:bc:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net