Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
File:                     J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json)
Hash identifier:          v7IU+NRlHNevgP3J6FuArE2iSdO4i2qpD+JiQLxipaw=
Subject key identifier:   B9:BC:A5:B2:B7:FF:1E:CC:6A:E9:F3:06:CC:58:2C:DB:B1:49:A9:37
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Certificate issuer:       /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
Manifest number:          19
Signing time:             Sun 27 Apr 2025 06:49:09 +0000
Manifest this update:     Sun 27 Apr 2025 06:49:08 +0000
Manifest next update:     Sun 04 May 2025 06:49:08 +0000
Files and hashes:         1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: LwKDxpZu3nPT/m8J+03DywRCaMJbxhe6dBLPTP/q+Zs=)
                          2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=)
                          3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
                          rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
        Validity
            Not Before: Apr 27 06:49:08 2025 GMT
            Not After : May  4 06:49:08 2025 GMT
        Subject: CN=680dd364-9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:ce:bb:29:79:de:19:05:f1:ba:fd:8c:49:
                    5e:db:ad:de:e3:a5:98:f2:d5:31:59:cd:00:3a:cb:
                    b6:b9:0e:01:65:62:f2:32:cc:0e:46:fc:c1:87:1a:
                    e1:36:e4:30:b7:a4:42:c5:96:6b:4f:15:27:94:92:
                    f1:e9:9c:b3:6b:b4:67:b3:e1:a1:7d:79:d1:d1:65:
                    5a:88:1c:ee:c5:17:50:c6:0e:74:1a:98:16:50:c8:
                    7d:01:7d:1d:2a:9a:78:13:57:54:e8:05:6c:77:37:
                    9d:76:56:5e:b7:1c:31:2a:25:23:4f:9a:3f:d9:0b:
                    23:ee:bc:d9:54:c2:a0:32:64:70:56:5b:c4:ac:d9:
                    fb:1b:48:02:5b:59:43:f3:3a:63:b6:a6:7e:e3:d8:
                    36:01:de:91:9d:95:2e:22:60:5b:df:8f:87:44:ea:
                    bf:1e:cd:a5:ae:7e:a2:5c:c3:eb:3c:40:09:6d:41:
                    c6:1c:04:27:a9:87:ea:98:19:68:b6:17:df:94:18:
                    16:4d:5e:b0:af:c1:ab:00:6e:14:a1:af:b4:f9:33:
                    0b:12:6f:35:6a:62:f1:8f:e0:8f:7d:46:b1:fc:e6:
                    5a:c9:c9:85:64:c3:87:b7:e5:22:59:21:dd:8d:61:
                    ec:14:83:5e:3b:ce:21:f3:17:0b:4c:66:7c:f7:c8:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:A5:B2:B7:FF:1E:CC:6A:E9:F3:06:CC:58:2C:DB:B1:49:A9:37
            X509v3 Authority Key Identifier:
                keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:37:48:b1:9a:94:a4:00:47:06:18:a7:4b:8f:8d:74:c4:1d:
         e1:8b:0a:52:87:e4:80:65:45:e0:d5:47:4a:a8:32:e3:ff:41:
         78:bb:2a:c9:04:7b:67:aa:4f:d3:79:15:f1:90:ec:06:c3:d9:
         15:bd:a7:66:77:08:0a:66:66:85:4b:e3:d8:d4:1e:dd:9e:8e:
         64:af:75:25:76:c0:39:23:c9:38:c1:d6:29:1b:61:aa:fd:6e:
         6b:a6:bf:b2:ca:3a:cd:11:cf:0d:44:9f:63:c1:82:33:98:b1:
         9b:79:01:d9:21:8a:82:a1:9a:fa:a7:07:97:c2:24:18:96:3b:
         ed:80:2e:1c:26:d3:56:af:31:87:b9:aa:eb:49:0f:9b:82:c7:
         0e:f2:72:c4:e8:c7:0d:4b:17:4a:ae:78:90:f0:e8:0d:10:8a:
         91:f9:bc:c7:90:dd:b2:82:e0:84:68:68:d2:02:a2:9e:55:2c:
         c0:42:2b:b7:4c:3d:88:5c:3c:0b:eb:8f:15:90:11:f2:54:fc:
         04:d8:74:3e:c6:d0:02:0d:a5:94:6f:36:a7:be:9a:e8:09:53:
         46:82:64:4e:c8:5e:b0:53:a4:ac:7f:c4:0a:6e:23:00:8c:09:
         e2:e9:96:f7:94:c0:4f:34:8e:b5:f0:a9:18:7e:73:93:d2:d4:
         3a:a6:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net