Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          up1EKRThKx3VdQ7m37/zGoWMir4uKfQAcAU51/Ih8qQ=
Subject key identifier:   B7:D8:16:82:39:28:EC:15:6F:9B:87:B4:F1:EC:89:4D:D4:65:34:41
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          01C9
Signing time:             Sun 27 Apr 2025 01:56:29 +0000
Manifest this update:     Sun 27 Apr 2025 01:56:29 +0000
Manifest next update:     Sun 04 May 2025 01:56:28 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: MyIqoTQZcxOsITmPBlKdtejFB5jk+6Ut14vO9XqjFOw=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Apr 27 01:56:29 2025 GMT
            Not After : May  4 01:56:28 2025 GMT
        Subject: CN=680d8ecd-d86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:a6:c6:aa:a6:35:6b:40:9f:d8:25:22:74:
                    3f:85:bc:27:f8:ef:10:6c:57:07:16:36:fc:d7:8b:
                    ee:f4:64:0d:17:c0:27:0d:de:de:2b:89:1a:9a:f4:
                    3c:db:3c:03:f8:b6:db:3f:d5:1a:bc:b5:b8:72:d3:
                    fc:cb:f2:41:56:4c:06:e0:36:f4:30:a9:ab:3b:57:
                    5a:10:2d:2e:2e:19:2a:a3:07:58:92:3d:59:31:13:
                    5e:c2:3d:21:b5:9a:1e:5c:4e:67:d6:69:be:da:bf:
                    eb:ea:4e:fa:55:e6:4a:7e:96:42:69:f8:f3:9a:44:
                    ee:38:ee:30:94:be:e6:37:24:7a:90:6d:fe:22:cc:
                    d3:50:89:42:24:ad:f6:d1:86:33:62:58:87:05:f2:
                    6b:45:3e:10:7e:15:bb:55:97:82:5e:01:9a:03:c0:
                    56:60:4c:32:36:05:1e:aa:11:1e:0b:4a:6d:96:b6:
                    d2:89:46:e5:0f:b7:a8:1d:40:e2:ab:90:6f:45:52:
                    de:1c:7d:0b:04:e9:ce:17:4d:3d:63:96:62:58:84:
                    dd:b4:14:6a:89:35:73:db:56:d2:29:ea:77:bd:81:
                    8c:da:29:f1:da:47:6c:81:5c:1f:1e:b9:63:2c:74:
                    52:e5:76:af:57:2d:57:0f:93:60:f9:00:cb:c7:6b:
                    10:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D8:16:82:39:28:EC:15:6F:9B:87:B4:F1:EC:89:4D:D4:65:34:41
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:70:27:a7:58:79:e4:73:9f:aa:23:5c:99:1a:15:ea:b1:3b:
         12:3c:60:b8:ba:36:53:eb:c2:e9:03:36:da:a6:3e:81:8b:bc:
         7a:a3:53:02:3a:65:76:47:66:c2:ea:91:cf:17:87:02:5c:43:
         2c:09:e2:c2:c2:cb:0c:15:8e:9d:cd:9e:56:d5:a7:9d:bb:c4:
         90:b1:e0:35:ca:30:ec:b8:32:f7:f3:f7:b7:e6:12:b2:24:64:
         c9:42:3e:a3:d8:e5:b0:56:42:ce:f2:d9:36:3b:32:5d:8f:7f:
         6d:6e:b6:dc:36:b4:cd:3a:20:02:e5:94:33:6c:d2:82:15:b5:
         2e:b3:fd:ad:7a:4b:5f:84:b6:dd:c5:c3:0e:50:81:5d:ad:46:
         e7:40:8b:e1:eb:06:76:6b:13:ad:3e:6a:37:a0:ce:9a:a1:9e:
         78:5e:5d:82:6e:a0:09:b9:c0:76:7e:d8:91:dc:4a:4b:37:9b:
         19:79:e8:86:00:e4:c5:30:12:3f:65:d8:09:5f:ca:9a:e4:f9:
         dc:cf:14:9d:4d:fb:31:60:e3:68:11:89:e2:28:aa:d5:05:83:
         21:40:33:f8:f6:1f:2c:1d:ce:91:e8:c8:bd:6b:7f:0d:06:34:
         49:0a:8e:80:61:dc:94:44:cb:40:b8:1f:e3:b9:b9:9f:4a:ea:
         6c:bc:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net