Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          rszygceTnBdDS+KPhgk6KkI2IkuhZ2AzS4NEuDAdOjw=
Subject key identifier:   CE:A9:1F:73:E5:28:68:19:95:06:6B:6A:32:B6:B5:57:B5:BE:07:F4
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          3C
Signing time:             Wed 07 May 2025 06:44:26 +0000
Manifest this update:     Wed 07 May 2025 06:44:26 +0000
Manifest next update:     Wed 14 May 2025 06:44:26 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: EkV9Nos2wBn/y76XzyR6LaBBnLJr95XmkyGym4ZgHjs=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: May  7 06:44:26 2025 GMT
            Not After : May 14 06:44:26 2025 GMT
        Subject: CN=681b014a-40ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:23:ca:92:dd:d2:28:c2:7e:dd:57:ea:20:
                    54:9a:39:7d:e7:7a:2e:28:16:08:9c:4d:d1:07:31:
                    d5:ac:ee:3f:52:27:b4:26:64:19:d3:49:4a:95:02:
                    3a:36:2a:93:b7:31:1b:c4:cd:4a:9e:fc:8b:fd:48:
                    89:67:05:cd:ea:a3:0b:13:23:fc:0d:c2:51:72:1c:
                    cf:e3:2c:2c:2c:84:52:d3:a6:d3:f9:27:e9:bf:5a:
                    4c:4c:f1:e0:7b:98:24:ec:84:88:0d:d0:0e:96:ef:
                    bc:7f:33:33:ad:dd:b5:43:e7:ba:68:a5:aa:07:8b:
                    cb:a4:81:bd:20:f2:9c:69:3a:c8:6d:e4:2b:d2:80:
                    bf:83:d2:ff:62:04:4a:19:c0:1a:3b:5e:87:b6:fe:
                    81:d7:9d:a6:51:34:d5:6d:15:e1:03:f2:0c:54:fe:
                    e8:6d:65:98:c8:22:ad:4e:57:29:4c:1f:d2:43:d3:
                    04:cf:d5:19:69:da:88:ad:e0:05:88:ff:74:23:94:
                    5d:d9:ce:15:11:d2:f4:04:12:06:09:98:54:52:19:
                    f0:53:1f:02:5c:6e:39:f4:5e:31:69:07:65:46:5e:
                    4b:2d:fd:7e:4e:cb:df:3f:4c:86:b1:35:ee:f3:9c:
                    c5:0d:ea:ad:5c:b4:ff:dc:a8:5e:1f:19:93:97:38:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:1F:73:E5:28:68:19:95:06:6B:6A:32:B6:B5:57:B5:BE:07:F4
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:41:f5:30:ac:11:fb:85:67:ad:cb:a6:f6:8a:f7:e4:64:34:
         af:a2:31:21:3c:39:67:95:06:11:47:45:9d:c5:16:ed:1f:57:
         cf:27:87:9f:68:af:08:6e:6a:15:9c:1f:1d:28:8d:75:86:a3:
         44:63:3f:c2:ae:fd:4b:f1:1f:5b:6a:db:52:45:a8:ed:c2:a7:
         df:24:a5:9d:a8:96:3c:f9:0f:02:c9:00:5b:03:fc:83:d3:e4:
         48:8b:da:e6:f7:36:d4:40:6e:3e:ac:27:14:bd:36:f8:cf:2c:
         f5:41:33:3c:a9:0c:db:92:c5:a7:6d:06:d6:66:a2:b0:92:a7:
         a5:54:a5:7a:54:2b:cc:60:0e:6a:df:c4:89:7d:38:03:4e:7c:
         fd:8a:ee:ef:14:c9:dc:be:0f:9c:3f:e9:e6:26:a2:df:9b:ba:
         fa:8b:ed:1d:a4:fd:50:22:dd:2c:b2:b7:47:70:ef:78:53:27:
         ad:25:f1:2c:23:1c:9b:62:cd:07:7a:45:09:74:4d:ba:e9:b3:
         33:0c:f7:17:b5:83:c9:9f:c9:53:14:e9:af:6a:f6:ae:b8:11:
         1a:94:13:c7:b6:3b:2e:9c:32:87:e6:e8:3a:fe:e9:b0:78:5f:
         ba:b3:67:3c:6c:06:58:28:c5:e3:24:c2:df:ee:b1:8a:d9:28:
         6f:23:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:01:32 2025 by rpki-client on console.sobornost.net