Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          5/jwOvkBtZljovwyLOS4na61zcbRTdTr+O8zQ4fRv4o=
Subject key identifier:   FC:C4:DE:1C:5D:63:D3:97:21:74:9E:52:2C:E7:42:00:B3:C4:F4:F5
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          B4
Signing time:             Sun 27 Apr 2025 04:56:57 +0000
Manifest this update:     Sun 27 Apr 2025 04:56:57 +0000
Manifest next update:     Sun 04 May 2025 04:56:57 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: DpcU3DuCCDakXw7hqoi9gYo6pL6LnfZAUUUx7Ref9Bc=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: Ie9Y5pCGNtZspU9t66mnmp1QTKLtQUg0jtZnjasjHa4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Apr 27 04:56:57 2025 GMT
            Not After : May  4 04:56:57 2025 GMT
        Subject: CN=680db919-99c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:91:21:ac:f2:d4:8c:58:e7:04:68:28:04:
                    12:2f:b5:96:d6:ce:d5:52:ef:b4:1b:f2:54:eb:b2:
                    7d:e0:fd:72:4e:6b:1d:92:6b:2b:18:a7:de:8a:9d:
                    71:12:cf:60:1d:8c:99:55:7a:19:16:08:31:aa:cc:
                    66:2c:2a:82:2f:3a:2c:19:59:22:af:56:c0:b6:8c:
                    ae:8d:a3:9d:07:4b:05:27:fc:0c:07:58:d6:03:73:
                    4c:16:7a:79:cc:e1:4d:c7:b3:96:2c:d1:10:b9:29:
                    94:cd:ad:b8:e0:eb:e2:02:3e:cf:a3:2b:fb:95:6f:
                    c2:41:0b:e1:5a:7c:6c:ef:4e:19:aa:30:3e:eb:42:
                    31:b8:85:f6:ea:c4:2f:0b:8d:a5:60:0b:ed:47:a8:
                    a1:2a:b1:fa:fe:32:50:37:85:2d:d1:31:ea:79:7c:
                    78:99:6d:ad:31:12:3e:2a:78:bc:db:ea:fc:78:47:
                    ca:21:3d:e4:1e:41:7f:bd:29:63:8e:10:25:bc:16:
                    6c:50:a5:e8:78:2c:99:6f:39:15:d2:79:80:88:87:
                    d3:56:c1:34:fb:c7:a6:0c:89:94:6d:f8:ee:4a:8f:
                    57:7b:2c:7e:41:17:b4:02:f1:c3:da:b5:71:da:4e:
                    84:8c:a4:03:c1:07:db:f4:c5:5d:34:28:42:81:97:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C4:DE:1C:5D:63:D3:97:21:74:9E:52:2C:E7:42:00:B3:C4:F4:F5
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:98:21:1d:09:ec:80:0a:ad:5e:b0:3d:e9:04:f3:b5:8b:ce:
         be:7d:ca:d4:b3:2a:c1:ab:77:5c:d8:b6:22:75:20:7a:38:03:
         ce:33:49:a0:62:ab:47:cb:da:70:40:29:21:a4:d9:a8:16:eb:
         4c:ff:60:68:79:c4:80:9e:65:cc:27:c0:2c:a8:50:b0:1b:16:
         6a:ab:13:ad:5c:e1:2d:4f:17:1b:85:6c:6f:dd:d7:13:b6:d6:
         7b:75:2a:3a:8e:4a:8b:72:c1:29:3f:0e:4c:65:8f:8d:c0:cb:
         97:4d:f3:31:7a:b9:4d:41:f3:e4:c8:97:c9:40:3c:7d:f9:52:
         c3:7a:e9:cc:20:ac:ea:ca:7e:4e:2e:fd:03:e2:c7:c3:2e:aa:
         b2:df:5b:0f:99:47:e9:c5:91:32:0d:eb:a2:8e:80:5e:17:c6:
         3f:9e:f8:f1:79:7e:19:41:ad:63:1b:b8:a4:d1:fa:72:45:04:
         07:39:8b:3b:44:e4:f3:7a:f7:05:f8:fd:cd:bc:0a:d0:7c:4a:
         a2:ab:c2:11:57:29:3a:67:be:98:c0:2e:d9:8a:d5:77:0a:ee:
         3c:2f:50:23:c8:b7:b1:01:5b:6a:59:15:79:ba:b0:db:17:e6:
         a6:af:eb:84:3e:91:7e:1b:24:9f:1e:e7:97:20:6c:52:34:c9:
         b0:43:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net