Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          EIBQuDrzi8XNUIMmfs72jWd9Zfmt3EkcdHWbaXaR/3U=
Subject key identifier:   AB:02:2A:05:3B:03:A9:A6:62:D2:4A:B5:18:31:57:B0:F4:5F:85:BE
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          E0
Signing time:             Sun 27 Apr 2025 04:25:30 +0000
Manifest this update:     Sun 27 Apr 2025 04:25:29 +0000
Manifest next update:     Sun 04 May 2025 04:25:29 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: 8njUSRNynUyLjprw8wDysQtSpVCNvN0V5WdQUA4P9cg=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Apr 27 04:25:29 2025 GMT
            Not After : May  4 04:25:29 2025 GMT
        Subject: CN=680db1ba-2a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:07:a7:25:c5:17:94:ea:29:49:c6:de:12:
                    db:a2:6d:e2:a3:d9:80:99:a2:ac:ab:38:8f:9f:75:
                    f8:21:8b:87:be:ce:96:93:05:5d:bd:69:64:f9:af:
                    87:26:96:18:10:8c:f4:48:c8:40:8f:16:77:34:60:
                    ed:20:5c:d2:de:77:cc:5c:81:87:df:36:8a:67:20:
                    b9:61:f3:22:2d:c3:14:e4:5c:41:fb:46:da:d2:46:
                    b2:cd:89:b3:43:3f:48:92:64:42:a5:d3:0f:52:ff:
                    9b:b3:b3:a7:aa:c8:9e:b4:06:7a:7f:64:42:2b:e9:
                    e1:d8:b2:0a:2e:d4:f2:12:32:f9:8c:48:a3:e5:88:
                    5a:fa:c7:18:3d:45:a9:3d:69:9f:39:62:ec:33:ba:
                    c8:67:9f:6a:73:94:31:06:5a:f0:38:92:8c:61:6f:
                    a2:1b:69:a7:a4:63:b3:2e:91:ac:2d:69:e3:fb:e6:
                    d5:f8:e1:1c:86:6c:33:d2:b3:e3:69:b9:dc:32:b5:
                    99:d0:6f:89:b5:bf:1e:1d:26:49:3e:cb:1e:cb:be:
                    c4:6b:5b:c4:a2:fa:58:b0:b4:1f:0d:11:54:b4:2d:
                    e6:2d:dc:5a:b1:0e:9a:a8:78:b5:4b:68:c9:a1:bf:
                    18:a5:82:55:bb:1f:f8:90:cd:97:95:25:59:5d:f1:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:2A:05:3B:03:A9:A6:62:D2:4A:B5:18:31:57:B0:F4:5F:85:BE
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:71:4f:8f:d3:53:5a:54:bb:a1:f7:3f:f6:fb:8a:33:9d:
         8a:c6:0b:a1:b0:b9:4a:42:41:f9:19:84:63:80:a6:39:d3:30:
         67:c9:fd:d6:6b:00:a1:33:30:7a:56:4a:b4:ab:99:de:f8:95:
         91:32:72:db:97:f6:0c:26:f5:ea:7f:f8:a6:66:1c:41:d5:48:
         49:8c:fb:60:59:1e:54:9f:83:46:95:8c:1c:11:32:cb:59:84:
         3f:40:ed:df:ee:ff:7e:e7:d5:78:e1:42:b4:2f:e0:71:a7:82:
         71:dd:1c:cd:ae:ec:d3:8a:9b:f2:5c:99:7d:2b:e1:cd:4c:6c:
         6d:81:ad:5d:e0:47:2d:16:de:a7:3d:b8:04:cb:07:ed:84:91:
         32:46:18:0a:d4:ac:cc:a0:8a:fd:cf:c7:91:45:2d:38:75:0b:
         b4:e4:37:ea:55:cc:cd:fa:9e:c4:ea:7b:72:58:1e:75:a2:15:
         b4:7e:f5:cf:b2:45:9e:ae:ee:8b:2d:fa:5d:63:ec:65:f8:b3:
         81:1c:da:b1:12:ce:5c:88:54:d7:94:16:53:ed:26:4d:6b:10:
         7e:87:c8:48:c3:de:9d:f2:5b:2c:fe:6e:c4:1f:54:c7:a0:3a:
         fc:fb:19:51:14:2e:dc:6a:2e:b8:ad:04:30:65:dc:94:25:23:
         dd:13:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net