Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File:                     tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier:          ZQnu5FvwHq1Rhc7y3wDsqOWJbKG+ehmAIG/PdUUrBUQ=
Subject key identifier:   6D:5C:1F:BC:A8:B1:28:B6:AD:E4:BC:6B:EE:35:4D:B7:1F:DF:F5:ED
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       071A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number:          0704
Signing time:             Sat 26 Apr 2025 21:38:34 +0000
Manifest this update:     Sat 26 Apr 2025 21:38:33 +0000
Manifest next update:     Sat 03 May 2025 21:38:33 +0000
Files and hashes:         1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: PV031p26K9gPYCcAH8heStWEmWRS7pSOcN+eaaVQXSU=)
                          2: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: UEeWCT6ImEaxx6DYiNNHxE3gZPCQQ4xS1glK4ixz1u8=)
                          3: 74AB6A4A69A311EFAAE0FA5BC4F9AE02.roa (hash: /0w41HOsNlcXpRWlzhILaNzRflWr6eesavXYpteo0zE=)
                          4: C1770D5A499811EFBB8C701EC4F9AE02.roa (hash: bRXM6aO12Du5rWWxHCAs6gVAFfbVxDg0k7dT/XJ9KEE=)
                          5: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: fjb9xxIvXmy/Q4aA7zhlhVkljXVrUMNfVIOWbyyneP8=)
                          6: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: agCGjmWYmlY22GfNRQLo7JWrox6fkhHy906PQcOJAjM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Apr 26 21:38:33 2025 GMT
            Not After : May  3 21:38:33 2025 GMT
        Subject: CN=680d525a-2467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:0f:c2:57:28:4d:41:f4:03:44:a9:1f:da:
                    23:49:52:b2:bb:51:99:21:d6:ba:c3:8e:51:b8:c4:
                    f5:18:6f:c6:9d:c6:76:cb:f7:ea:73:89:b6:ec:51:
                    6d:48:a5:dc:8c:54:48:4d:29:f0:47:d5:f1:fb:80:
                    ec:59:c8:3d:7f:22:81:89:e2:e5:37:5f:30:b9:d4:
                    a8:d8:42:59:1c:58:b3:b4:79:23:c7:31:3f:03:9b:
                    e9:52:cc:97:13:96:b6:14:68:12:97:6f:b3:40:c9:
                    0e:2e:b9:af:5c:98:01:6e:af:36:ea:ef:7c:89:88:
                    ef:9f:3a:a1:40:c2:8b:c0:bb:19:24:94:9d:d4:0c:
                    d7:c5:15:52:bb:e1:cf:5e:04:b8:b8:ba:6a:23:ad:
                    37:b0:8c:2f:f4:07:b1:c0:c7:3f:dc:ef:3d:fe:5d:
                    96:44:f3:ba:03:77:88:2f:85:59:10:57:94:6d:77:
                    b9:62:35:a9:dd:94:2e:fe:79:9d:a9:2c:ab:e2:48:
                    57:78:3a:95:c6:dd:a3:17:8d:ab:9b:63:20:44:b8:
                    57:b9:bc:e6:0a:31:3a:28:36:68:60:46:1f:e9:d5:
                    a0:02:9a:86:08:b2:46:00:a5:7e:0f:8f:73:88:4b:
                    7f:70:5b:98:fe:d2:9b:9f:db:0f:87:11:b2:90:5f:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:1F:BC:A8:B1:28:B6:AD:E4:BC:6B:EE:35:4D:B7:1F:DF:F5:ED
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:ac:ed:22:e4:f0:1e:b9:ff:08:1b:be:2b:a7:d5:ad:f7:
         e9:31:d7:2b:75:24:64:23:9b:4d:66:48:c7:6f:3e:42:48:1f:
         38:69:0e:7c:2e:9d:34:78:ab:98:3b:e5:3d:f9:af:da:bb:71:
         23:25:a2:0a:b4:48:34:b5:5d:39:6b:55:fa:dd:02:4c:ba:2c:
         2a:90:b5:34:fe:d7:a6:df:ba:ff:33:7d:75:df:29:24:10:74:
         91:55:9b:f8:a3:81:f7:1a:cc:02:41:31:61:5d:3a:8e:0a:4e:
         c0:d0:01:ca:d0:02:fe:e1:77:76:ed:24:7c:38:b0:27:a4:40:
         0e:f0:ea:bf:9f:06:32:54:ab:0a:84:59:b8:ff:0c:03:33:99:
         f5:90:83:22:ed:a9:fa:b9:68:4f:6c:f7:b8:ed:5e:40:76:ff:
         4b:0d:29:1f:34:67:ec:54:71:06:a8:d2:87:d6:82:3f:fe:5a:
         83:a3:71:dd:b8:cd:bc:23:d5:c3:37:1f:40:5f:aa:d1:1f:c9:
         60:4f:4e:8c:0c:20:f9:09:88:41:79:62:89:6d:b9:3c:67:33:
         1a:43:08:2f:c8:50:75:3b:7d:82:9a:ad:ca:04:19:bf:eb:e7:
         76:e5:8e:a8:df:a2:c6:8f:9a:e3:b8:f5:f8:a4:5d:fd:df:74:
         ed:06:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net