Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          jKQK2MEwjyYKDvTmzLDGj1CA00qsrKExAV+hItEolXI=
Subject key identifier:   FD:5E:39:48:B6:4A:E4:81:27:71:78:CC:5A:23:B8:AA:7F:00:B4:DC
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0B0A
Signing time:             Mon 28 Apr 2025 19:44:29 +0000
Manifest this update:     Mon 28 Apr 2025 19:44:29 +0000
Manifest next update:     Mon 05 May 2025 19:44:29 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: hxFrB14tIVueXrhEgJhqys86/B8gmeAOH2X+uibqAiQ=)
                          2: 155B355E414311EE8E969116C4F9AE02.roa (hash: AEcrtgaYcC8nxcIlLTbTydLAoyadUjgPoburPHCFpuI=)
                          3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: ZuckVDBkHWjtjgORAisHfpeFoPo31ZjupHmSg5374TY=)
                          4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: L1V702IcrknjYj/1v+mu1+mrKPDiKzApod7Zc+hqR3w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
        Validity
            Not Before: Apr 28 19:44:29 2025 GMT
            Not After : May  5 19:44:29 2025 GMT
        Subject: CN=680fda9d-4c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:07:7a:f9:33:e9:d0:6c:1e:88:8c:b7:05:
                    ee:79:1a:fe:6b:97:1b:cd:71:62:56:e0:33:74:d8:
                    9c:b2:51:cf:7f:d9:2d:2e:29:65:c4:38:3f:61:95:
                    7d:57:7e:23:64:06:a9:bd:0f:ec:be:76:1a:ae:ce:
                    9f:4c:48:74:8d:11:cf:af:5e:b9:d0:b7:df:db:55:
                    b3:d3:1c:81:a4:ab:fc:24:37:3a:39:7f:77:dd:e7:
                    72:3b:7e:d8:12:dc:fc:d6:a8:bc:78:96:33:57:ca:
                    90:e0:00:33:42:a2:c5:44:e6:c1:b1:47:b0:2c:49:
                    62:7f:ba:a5:3c:31:85:79:fc:53:18:1d:00:47:ee:
                    ec:6f:58:61:ca:f7:62:40:df:69:4a:86:c1:32:4a:
                    a5:11:ab:4b:0c:35:e7:a9:05:98:99:cc:d0:c9:5a:
                    bd:94:56:9e:a4:de:f3:57:3b:09:f9:77:31:f6:d6:
                    8d:74:f2:8b:62:01:d3:2c:50:4d:00:33:43:f2:9f:
                    d6:87:4f:75:fc:99:51:e1:d9:f7:21:ab:42:38:29:
                    9a:c8:ae:00:b6:17:26:ee:e1:1b:68:76:8c:3a:cd:
                    a8:3a:6f:5f:80:af:74:70:ec:fd:63:84:a1:62:28:
                    43:a8:10:34:be:24:b3:8e:07:2e:97:7a:16:82:6b:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:39:48:B6:4A:E4:81:27:71:78:CC:5A:23:B8:AA:7F:00:B4:DC
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:65:dc:05:90:67:55:d4:2e:2f:db:fe:9e:be:8d:4a:d9:
         a6:2d:b2:2d:d0:42:4a:99:7a:0e:53:68:5a:da:b2:05:ff:3c:
         7e:72:75:3f:fa:23:54:03:f5:5f:2e:32:f3:e5:b0:8a:f8:4c:
         65:91:6a:fa:af:be:2d:cb:06:41:4c:95:80:96:c0:31:d0:02:
         6b:da:1e:e3:78:4e:f3:66:8a:c3:b0:48:87:fb:47:04:0e:1f:
         c0:b6:df:a1:3e:76:ce:76:26:7d:3a:c6:41:22:08:14:0f:63:
         2b:fc:75:56:b4:02:91:51:b3:34:6d:6a:be:0c:87:d7:e9:8f:
         5d:8b:32:4d:cc:27:f1:b3:ae:09:77:37:5b:f1:c9:cb:75:8d:
         80:d0:9d:7f:0c:fb:4b:48:4c:84:53:28:18:92:d1:27:6d:0b:
         7e:a8:9d:7f:d2:ba:2b:16:fa:dd:33:09:6c:45:c2:ee:ae:6e:
         7d:8d:79:c4:ea:f9:d5:f7:2e:d7:ff:24:8a:9c:e4:7c:73:38:
         a6:ed:58:a5:6a:77:0a:1a:4a:8e:6b:5c:27:1c:32:f7:60:3b:
         39:ca:1c:e7:38:80:e7:8d:00:ed:41:72:05:89:4d:c7:09:2a:
         a3:fd:08:98:d6:90:f0:63:8a:3e:6a:94:a0:8e:b1:69:71:26:
         9b:65:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:38 2025 by rpki-client on console.sobornost.net