Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          5pA3TFE5eA1e6zqn52xXFKGxckjqr3MFL4XjkhO1q5g=
Subject key identifier:   11:A2:94:6F:A9:37:4B:A0:E7:2A:E6:11:C3:4E:10:BC:38:89:45:09
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          0151
Signing time:             Sun 27 Apr 2025 03:09:07 +0000
Manifest this update:     Sun 27 Apr 2025 03:09:06 +0000
Manifest next update:     Sun 04 May 2025 03:09:06 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: V2oizijq2KWH6HPGIbw0EBzYi4kh2x3mHAk575qEFoc=)
                          2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 1McoUaNADtVmxnwjUYo0/yr8ZNju9sl8ZAS30i7LT7Y=)
                          3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: BmCmwmrfy1CENmrxL9jjUF6CdXOsP2Ds7n3Ty7zfap8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: Apr 27 03:09:06 2025 GMT
            Not After : May  4 03:09:06 2025 GMT
        Subject: CN=680d9fd2-e41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:8c:a7:f7:21:f6:12:ac:21:cf:95:dd:6e:
                    58:10:5c:67:d5:23:2c:97:6d:38:53:cb:24:8a:f7:
                    4f:88:f4:5a:a8:8e:f4:c7:4d:fc:49:d1:5f:78:c4:
                    13:31:ad:10:b4:36:51:9f:d7:a6:91:79:44:28:fe:
                    bd:9f:45:cb:00:01:87:96:2a:ae:be:1d:e3:bd:e8:
                    c7:d8:ac:b4:3e:88:d5:67:ba:56:aa:66:bf:3b:f5:
                    00:6b:cc:53:a7:ba:65:4e:58:6c:30:b6:41:04:b0:
                    33:83:7b:1f:79:f9:59:14:ae:ea:f7:8d:ec:7b:77:
                    f1:3a:ee:b6:c5:94:cd:8e:de:2c:0d:f2:0e:db:3f:
                    02:c2:88:3f:02:10:65:6a:6b:c1:39:f8:ea:68:67:
                    2e:87:90:69:29:56:0c:05:55:7e:1f:aa:c1:f3:4e:
                    6e:57:aa:7e:c1:e8:12:a9:b7:c4:96:47:96:e6:23:
                    41:7c:7f:b4:c1:f6:6d:8c:ec:44:25:38:ad:fe:f5:
                    7f:c5:cb:e8:62:32:8b:40:bb:76:47:22:d8:47:89:
                    37:c8:a1:a0:37:c7:9b:52:7d:cb:61:8a:7f:8b:89:
                    81:ae:1c:e7:46:85:a0:14:a6:2c:83:42:a1:8d:8f:
                    5a:9e:f3:23:7e:e7:d9:ca:6a:20:da:89:a9:ce:70:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:94:6F:A9:37:4B:A0:E7:2A:E6:11:C3:4E:10:BC:38:89:45:09
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:6a:cb:11:39:65:f7:58:bf:de:68:ad:93:c3:7f:e8:0e:
         50:33:c0:9d:76:2b:e7:58:c6:66:e5:a4:67:59:68:78:42:c5:
         32:6d:51:f9:b1:b2:01:43:72:83:6f:dc:e9:ca:2e:25:19:f7:
         4c:18:97:07:82:0f:f2:e5:ed:11:7e:9a:dc:66:37:ed:cf:79:
         7a:6b:46:02:d2:de:a8:0b:eb:d9:4e:ff:3f:ec:19:87:30:5b:
         5f:1c:92:9f:ed:5f:1c:83:84:29:b7:4e:36:2e:41:36:c6:31:
         6b:e1:d0:c8:ab:3a:a0:18:df:fb:39:d1:d3:f2:95:e3:f2:85:
         6f:cf:4e:13:e7:f7:d3:23:80:fe:81:1c:4f:2a:2d:e1:43:4d:
         06:3d:79:66:4c:68:c7:06:f3:d7:a4:cd:32:aa:b2:98:95:c3:
         b4:35:7b:a9:a8:af:fc:29:fa:74:af:db:66:f3:6b:46:df:8c:
         cd:04:50:11:00:53:bf:45:ac:45:a8:2c:28:c8:7a:47:b3:4e:
         8d:78:80:2d:42:46:e5:31:fb:a7:e1:95:fa:cf:63:ec:a7:e9:
         99:2f:f1:16:7c:02:d6:83:d2:82:01:c2:c9:d3:36:15:43:21:
         b3:96:97:b4:c8:04:0c:c9:8e:1d:4c:17:72:16:0f:c1:8a:35:
         6f:1c:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net