Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          Ifn6svVWiEodAXrRYBFvsorZpI8EQ1V4QM5JgOQja9A=
Subject key identifier:   52:19:4E:D3:9A:33:85:4F:D0:DA:10:F0:D5:9F:43:D4:59:98:03:9D
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0143
Signing time:             Sun 27 Apr 2025 03:20:28 +0000
Manifest this update:     Sun 27 Apr 2025 03:20:27 +0000
Manifest next update:     Sun 04 May 2025 03:20:27 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: 0aUet1ioETF67vZCs2oMoQOd8/41PP7ILh4tUmD3x9I=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Apr 27 03:20:27 2025 GMT
            Not After : May  4 03:20:27 2025 GMT
        Subject: CN=680da27c-8957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:e6:f6:b9:68:1e:8d:5f:26:2e:75:4d:e7:
                    31:15:43:58:09:2f:b2:9f:4a:cb:68:ab:1a:00:84:
                    ec:01:24:5f:e7:58:05:22:ee:7b:ae:5b:b0:2c:85:
                    89:06:79:14:cc:54:9c:94:95:4f:56:db:9e:9a:e1:
                    4d:cc:03:90:65:30:9e:43:ab:f7:a5:18:23:18:77:
                    a2:32:1d:fc:55:60:f2:a8:65:41:02:4a:04:8e:45:
                    23:56:23:c3:b3:e1:92:e6:a6:e6:07:a3:95:9c:ab:
                    4c:a7:b8:be:11:95:22:7d:ba:1c:66:28:5e:f2:89:
                    ef:a4:67:49:ec:f4:df:04:68:e3:47:91:70:8b:56:
                    3a:e9:0c:54:fb:48:fe:15:6d:a4:8d:c5:7a:aa:24:
                    d4:a5:e5:95:bd:60:e2:1b:b8:fe:08:73:52:d0:ec:
                    c3:46:af:90:80:1e:87:81:3c:5f:17:46:80:2d:03:
                    85:f3:52:5a:38:61:fa:51:33:56:27:80:f9:2c:15:
                    9e:d4:1c:97:a3:ed:8f:85:a3:f9:63:71:1b:f1:e0:
                    99:c8:34:c6:67:e2:29:eb:a3:9f:4e:21:65:fa:d1:
                    f5:17:81:d2:70:84:82:78:52:2c:9e:ed:27:c0:a8:
                    d7:05:76:39:57:12:73:5c:1b:2b:02:a3:83:dd:3f:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:4E:D3:9A:33:85:4F:D0:DA:10:F0:D5:9F:43:D4:59:98:03:9D
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f6:40:36:e1:1c:9e:98:3a:4e:9a:1c:cd:6a:e1:d4:4b:78:
         98:ae:96:41:c1:72:c3:23:16:61:82:eb:59:63:aa:9c:0b:61:
         f6:4e:85:3c:38:49:57:98:b9:21:5b:82:3a:e8:41:13:e0:36:
         8b:1e:69:6d:ce:82:54:de:79:0d:03:3a:be:5c:a2:d9:71:d9:
         e9:05:fd:59:32:5f:1d:c4:70:be:90:66:ae:40:0d:9e:be:27:
         04:cc:58:d1:80:db:55:8a:8d:28:bc:aa:b9:2c:a6:a2:65:1f:
         af:75:9a:8d:49:e0:e8:14:ad:89:2c:45:97:43:95:b8:98:9a:
         fa:93:f6:f9:5c:e8:26:40:1d:0d:0b:18:28:8e:1b:20:25:c7:
         99:a5:04:e9:ad:a5:9d:66:23:a6:00:14:71:4a:04:ab:e3:e5:
         af:a7:8a:f3:a0:a8:84:bd:6b:f6:4a:9d:61:e6:9f:03:62:c9:
         62:2b:7d:7a:ae:dc:a0:4f:1d:26:5c:b0:91:2e:ef:fa:6b:2a:
         b5:58:67:e8:d7:e8:1a:1e:7f:22:81:f1:1a:42:58:5f:46:43:
         4f:b3:a9:1c:b4:f6:6b:9c:1f:30:fa:d3:9b:3d:09:2e:22:cf:
         98:23:97:f8:63:0f:70:ff:ca:cd:5c:d0:7c:e5:40:ab:ab:1a:
         78:ed:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:56 2025 by rpki-client on console.sobornost.net