Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
File:                     2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json)
Hash identifier:          sSp0Fx3xDA2mbwDw22n8k1X9dDD4d/e854t+Ut9rjHo=
Subject key identifier:   CB:B6:97:90:40:89:C2:7A:79:6B:F6:8F:3E:9E:52:0F:C8:43:D1:86
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Certificate issuer:       /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
Manifest number:          05
Signing time:             Sun 27 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:15 +0000
Manifest next update:     Sun 04 May 2025 07:01:15 +0000
Files and hashes:         1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: msFApqvga8nmJVD6dlD99P3ge6mzVHAMF3IygBMp+yk=)
                          2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
                          rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
        Validity
            Not Before: Apr 27 07:01:15 2025 GMT
            Not After : May  4 07:01:15 2025 GMT
        Subject: CN=680dd63b-4c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:07:6c:05:95:8a:95:18:6a:53:cc:47:2d:be:
                    9e:c8:d4:e2:5a:5e:3e:8a:6c:da:ce:a5:d8:de:9c:
                    92:82:57:1b:7a:21:eb:2e:06:e4:37:4c:cb:0e:4c:
                    93:32:ff:d6:fa:7d:a0:e8:9e:ca:82:62:e8:fd:05:
                    f6:70:ed:46:b3:55:be:70:d3:d3:4b:da:95:cd:fd:
                    38:d8:03:f2:6e:79:9f:d2:ec:c9:39:90:c2:c0:21:
                    9c:88:fa:4d:1d:84:5f:f7:bb:00:9b:5f:1c:0d:a8:
                    ff:08:84:c7:fa:4a:89:2a:0c:2f:ea:44:d6:e6:17:
                    96:77:cf:2e:46:2f:2a:bb:4b:3b:e8:f0:51:94:e4:
                    77:98:2c:46:19:9d:15:c2:f3:03:26:52:7e:33:9e:
                    5f:87:99:5e:b2:df:ef:f2:d1:d2:7b:69:5e:74:23:
                    d3:99:d6:98:f1:8b:d7:85:28:90:13:62:04:48:15:
                    b7:a2:a2:2a:3f:e3:ff:d5:48:2c:ab:9c:6a:dd:dc:
                    4d:a1:f2:d6:c3:1c:0e:d6:31:e9:23:cc:73:c5:ac:
                    d2:9f:2a:d7:fd:6e:ea:06:2a:65:fe:d8:e1:2d:e3:
                    ac:fe:23:c1:21:d6:b1:cc:6a:d3:37:f5:1b:53:42:
                    b8:71:3e:ca:90:de:3c:aa:51:b7:d1:da:20:a4:e1:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B6:97:90:40:89:C2:7A:79:6B:F6:8F:3E:9E:52:0F:C8:43:D1:86
            X509v3 Authority Key Identifier:
                keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:5d:28:83:2f:e4:9e:44:19:73:43:e6:91:70:9f:e8:ec:
         db:3b:4a:e3:b7:d5:58:de:58:09:bb:e0:22:99:07:be:2a:ce:
         23:58:a9:8a:5f:f6:41:7f:3d:e7:e4:51:ed:7e:04:3b:a3:20:
         cd:d8:bd:11:e7:35:dc:e1:04:99:4f:65:da:eb:a5:43:95:69:
         7a:0a:99:6a:6d:83:a4:5c:b7:ff:dd:a6:3c:7a:ba:fc:47:3f:
         05:85:4f:31:2a:64:a2:e5:e6:d6:cc:22:cb:64:78:23:fb:a2:
         80:84:24:7e:4a:32:5e:5c:66:a7:f1:d3:42:14:f7:30:f0:cf:
         f6:44:35:ba:22:9b:b3:8b:25:11:5c:60:56:57:26:80:4a:0d:
         fa:21:42:15:3b:ce:95:06:a1:2e:3e:6f:96:3f:47:32:18:cf:
         db:a3:dc:06:49:55:5b:9a:ac:a0:72:ed:04:69:f8:ba:55:c6:
         6f:f4:a1:07:a3:21:bc:73:af:47:a0:e4:42:af:ad:91:7f:d3:
         c3:21:7e:c2:8f:2a:8f:16:68:83:50:1b:bd:11:05:3e:80:82:
         6c:92:01:8f:1f:3b:36:b3:bb:f4:d5:88:54:e5:60:39:a0:71:
         04:30:a9:87:7c:5f:f9:26:b8:55:aa:69:4c:38:1a:f4:92:2f:
         07:8a:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net