Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File:                     O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier:          Ot2TUkOjazrO+vwo5mXnnViNvygCaBTk8JKFLJe1nds=
Subject key identifier:   63:B5:F5:73:CB:61:89:29:40:7A:BB:F3:68:A4:86:5E:24:E7:33:EC
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer:       /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number:          01EB
Signing time:             Sun 27 Apr 2025 01:47:09 +0000
Manifest this update:     Sun 27 Apr 2025 01:47:08 +0000
Manifest next update:     Sun 04 May 2025 01:47:08 +0000
Files and hashes:         1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: 1phvLFFuhGnCMd0eM3KmuzUva/ftkAyxQpQstj9LvPg=)
                          2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=)
                          3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: oSZdhfGWwwKdH63s+SExbmyRtKVUZJS009bBjLK65o0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
                          rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
        Validity
            Not Before: Apr 27 01:47:08 2025 GMT
            Not After : May  4 01:47:08 2025 GMT
        Subject: CN=680d8c9c-2107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:c6:f2:e6:4f:9f:e6:19:dc:dd:92:dc:0f:
                    93:b3:7c:43:30:67:18:b0:a0:79:7e:7a:d3:46:40:
                    36:d4:b5:bf:ee:dd:7d:df:08:01:36:97:2d:01:13:
                    c1:89:79:db:80:7a:ea:fe:b2:60:ca:f4:98:a2:45:
                    00:73:89:54:e4:80:af:c7:b6:47:99:57:61:9d:1c:
                    4b:55:ec:36:a1:ee:76:83:3b:69:ce:2a:45:de:60:
                    73:19:7e:e8:45:af:01:75:1c:d2:95:cc:fc:3a:ba:
                    c8:a6:34:6f:ac:c8:25:50:fe:80:0a:e2:fe:ec:1c:
                    17:19:d2:e9:e8:80:65:90:24:4f:95:8c:a3:e7:a0:
                    a7:b3:fe:41:4d:ef:ea:c9:36:f1:c2:5c:0a:57:0e:
                    0d:c3:69:1d:71:7a:43:54:a7:a6:b9:d9:8a:e9:14:
                    2f:b6:30:a7:ca:0a:d4:67:46:5d:ec:fa:fa:42:c6:
                    9e:ec:ea:e9:8e:ab:06:fc:32:83:56:12:15:1d:35:
                    8c:f2:9e:2b:2e:0d:2a:4a:1c:4c:13:40:69:08:ba:
                    6e:14:c1:f0:96:15:85:ba:45:03:26:4c:c3:f6:27:
                    54:c1:f6:1d:7d:44:d0:47:d3:47:12:99:be:b5:9d:
                    7a:f3:1d:fa:5e:2a:c7:1f:31:c5:f5:b5:d5:bb:44:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:F5:73:CB:61:89:29:40:7A:BB:F3:68:A4:86:5E:24:E7:33:EC
            X509v3 Authority Key Identifier:
                keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:c1:20:2f:36:df:8e:52:0b:6b:12:14:c6:79:65:31:ca:
         b2:b8:13:05:ee:dc:cf:8c:a4:26:0c:e3:80:98:e5:e1:1d:e2:
         41:4b:15:76:8d:1b:c8:b7:e4:88:dc:be:5f:b4:74:06:19:f8:
         19:20:a0:cb:cb:ab:83:9f:4c:e8:bb:6e:16:fe:91:d8:c3:73:
         9a:18:da:ff:d4:74:b4:20:26:14:d0:f4:34:b1:9f:c2:0e:b5:
         69:5f:d3:71:fb:94:59:e0:59:19:66:36:59:4b:9a:7f:7e:c4:
         02:c6:8d:79:1d:85:d5:df:1e:21:64:72:01:b4:08:8b:45:9f:
         cb:32:a3:06:95:8d:c3:d0:a2:5a:9d:e5:c1:44:83:52:c9:f1:
         56:31:d8:b1:6a:59:38:c0:b1:08:ad:1c:02:2e:e2:b6:46:89:
         11:b5:f1:1b:81:e9:35:47:db:2d:f4:9a:77:56:8e:17:be:74:
         cb:c1:62:85:d8:29:67:1e:3d:c2:cd:67:be:96:77:2d:fc:bc:
         93:07:8f:d3:ab:7f:c6:b1:a5:d3:9d:50:d2:8d:4a:08:2d:32:
         d9:0d:97:1f:54:87:cd:85:34:e5:d2:1e:fb:39:4f:a2:a5:01:
         03:15:c2:b3:b1:68:b4:57:a9:47:15:45:95:5f:29:bd:33:b4:
         e8:e5:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net