Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
File:                     ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json)
Hash identifier:          JiMfLDYxRvSExx2unmQjfbIvaguOxr5pBgEVqnrKl1A=
Subject key identifier:   F2:3F:06:6E:20:4D:01:30:1A:2F:55:A2:45:45:92:EB:3F:BF:2F:75
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Certificate issuer:       /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
Manifest number:          5D
Signing time:             Sun 27 Apr 2025 05:57:28 +0000
Manifest this update:     Sun 27 Apr 2025 05:57:27 +0000
Manifest next update:     Sun 04 May 2025 05:57:27 +0000
Files and hashes:         1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: JYBZ+sVJ1Je4zTOMD0h58WTN+i3w0K6QvoEHI01La30=)
                          2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
        Validity
            Not Before: Apr 27 05:57:27 2025 GMT
            Not After : May  4 05:57:27 2025 GMT
        Subject: CN=680dc748-dbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:62:21:fc:c5:ad:47:5f:4b:cb:e8:07:2c:1c:
                    61:49:f7:ef:b4:e1:13:33:87:f5:ee:c9:5e:40:5e:
                    b2:fa:85:1f:76:80:9c:21:f0:11:53:23:96:d1:7d:
                    de:42:0d:b3:43:56:e7:62:66:ee:8c:87:c9:07:6b:
                    6e:c4:a9:a4:62:1c:27:5c:65:80:9f:c8:50:90:b1:
                    66:4c:aa:cb:a2:23:68:dc:bc:76:4b:6e:bc:f4:c4:
                    81:28:1c:0f:d2:8c:72:6f:de:07:1e:fc:71:9f:8c:
                    7a:26:a0:47:68:be:64:64:fe:4b:2d:52:75:c5:6e:
                    05:a4:cf:08:08:0f:d4:33:cd:19:41:1e:fb:b8:37:
                    1c:ba:21:2e:a3:a9:d8:4a:9b:ed:d2:2a:5d:ac:99:
                    cc:ea:f8:6b:6e:70:cf:76:03:cc:b2:9b:8a:cf:9e:
                    d0:4e:0f:75:04:02:42:6c:f3:98:e1:1c:56:84:b9:
                    3a:4c:df:27:90:24:10:25:43:6a:17:04:e2:ec:51:
                    ac:cd:3b:c0:b0:10:ac:93:6d:16:c5:29:f7:cc:73:
                    db:f9:e9:33:d0:8a:2a:e3:2b:75:8d:44:12:fa:ca:
                    0e:c6:98:9b:19:07:82:e9:90:b5:f3:f2:9d:9c:ed:
                    a2:a4:80:4f:96:05:87:f8:0e:4d:09:0d:e2:f4:d9:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3F:06:6E:20:4D:01:30:1A:2F:55:A2:45:45:92:EB:3F:BF:2F:75
            X509v3 Authority Key Identifier:
                keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8e:56:e6:25:bc:39:c5:9a:1c:94:34:b1:5f:31:17:3e:3f:
         fc:98:ce:0b:b3:08:65:81:c0:76:f0:6b:8a:29:8d:1e:79:33:
         51:0e:28:9f:a9:da:08:1b:4b:c3:d2:91:6c:7e:45:f8:d4:78:
         29:6a:f2:76:aa:75:c6:46:af:f1:2a:6b:05:6d:54:ec:9e:36:
         38:ee:35:56:e0:af:c6:dc:1c:48:8a:05:d2:47:f8:11:07:6a:
         be:4d:2e:f5:e7:88:67:83:ef:08:4a:ae:1a:64:a9:64:90:8f:
         c2:f3:8d:e4:43:7d:80:ea:ac:c4:90:7d:6e:59:ba:31:8b:02:
         f6:42:ea:05:ae:97:c7:76:91:3d:b0:e7:f0:ee:9b:0d:e1:23:
         e2:32:70:61:fc:a8:43:2b:cb:03:52:ed:48:1b:dc:23:20:e6:
         0b:a8:95:ed:77:2f:8f:a8:1e:79:1a:17:8b:5c:66:74:d6:6d:
         0a:76:ab:95:59:4d:5c:36:d9:6d:5a:7f:c3:14:5e:b7:98:fa:
         7e:c7:74:36:a7:3f:69:85:b6:fe:71:5f:e3:68:b0:77:84:c2:
         71:4a:30:f2:7d:3d:a5:a8:85:39:8c:ed:4f:11:b2:73:cd:48:
         1b:b6:34:12:37:1e:d3:7f:25:63:c6:fb:9d:cf:0f:7a:c4:7f:
         82:cf:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net