Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          +tQbwhQYxAqSjVJS73pEW6fGQnS4y/wadHQrQSQw9Z0=
Subject key identifier:   93:DA:F5:3F:33:5C:23:FE:40:32:57:FC:94:81:D2:5B:72:7B:96:B1
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       349A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          3485
Signing time:             Mon 28 Apr 2025 14:41:54 +0000
Manifest this update:     Mon 28 Apr 2025 14:41:53 +0000
Manifest next update:     Mon 05 May 2025 14:41:53 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: t+0zGDFw8k1/CpFaAFdep2S4xoOj/AwBtdg/V/Bh3Qs=)
                          2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13466 (0x349a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Apr 28 14:41:53 2025 GMT
            Not After : May  5 14:41:53 2025 GMT
        Subject: CN=680f93b2-0262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:eb:d5:0a:d1:bc:46:ec:12:f3:32:d9:b2:
                    e5:e1:34:7d:2c:af:25:ce:6a:5f:93:1d:19:01:bf:
                    68:b2:44:d2:19:a1:89:01:f8:50:cc:3f:91:f9:76:
                    1c:fd:d3:ac:66:98:38:0b:2f:b3:34:04:c1:b1:9e:
                    fc:c7:70:80:79:9d:20:48:c6:60:ec:82:e4:61:09:
                    88:e4:7c:6b:a1:ab:a2:d0:ee:b3:66:73:48:a0:eb:
                    f6:c9:f9:95:72:dd:ba:45:31:4c:33:db:cf:8a:50:
                    e4:dc:81:ef:e8:ce:df:b5:6c:51:dd:42:52:8a:18:
                    67:ea:ca:eb:90:60:9f:e3:d4:13:c0:c2:b0:5d:c1:
                    7d:c8:b7:97:bd:2b:05:c3:ea:1e:97:0e:03:ee:79:
                    24:9b:49:af:58:4f:50:49:6d:50:d9:9b:ae:18:8e:
                    75:01:32:06:6c:b6:23:f9:6e:2f:a2:b0:54:60:8e:
                    a1:fe:74:7a:af:02:65:8e:b2:99:20:c9:08:7b:58:
                    c0:f5:a9:d8:e8:33:7b:d6:e2:c8:61:1a:5e:db:68:
                    30:cc:e8:47:79:bb:46:8a:a4:c4:6c:d2:c4:7a:34:
                    ac:df:68:fa:09:e8:f4:69:12:eb:fe:a4:84:15:58:
                    75:12:4c:90:29:96:cd:4e:d8:63:0d:ae:43:8c:6e:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:F5:3F:33:5C:23:FE:40:32:57:FC:94:81:D2:5B:72:7B:96:B1
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:cb:59:e4:7f:7f:73:07:d3:1a:64:f2:54:8d:f6:00:37:
         73:11:2f:80:ae:59:60:b6:cc:24:55:70:30:5f:fe:19:fa:4d:
         30:3d:53:28:c0:b5:3a:db:93:8a:a9:a2:a0:ac:e7:eb:c9:f6:
         7c:c4:df:0e:10:fb:0e:0c:e8:4c:72:72:b0:dd:4f:24:d1:b6:
         31:87:34:25:89:4b:85:dd:45:15:44:a0:9c:5b:90:eb:46:14:
         0d:b7:1a:86:87:37:1e:05:80:4a:36:36:df:ca:7a:8b:5f:e6:
         c7:86:64:53:ab:7b:a6:ac:dd:09:23:4f:42:72:e6:b4:5e:25:
         2c:b6:3e:3c:10:e1:e7:51:94:f2:c1:09:b0:ba:50:25:e6:90:
         1f:a7:71:4d:17:31:0f:2d:d2:25:2a:14:2d:9e:99:ab:2d:23:
         72:65:45:b9:4f:4b:0d:a8:23:03:9e:13:d4:89:58:26:88:eb:
         ad:e3:7d:52:2c:3d:ff:51:fd:1c:f9:98:86:3d:ab:57:58:4f:
         b9:4d:80:64:bb:1a:6c:31:03:b5:2e:55:f8:a4:77:59:ec:ee:
         49:bb:e9:b1:df:6a:c7:9f:27:ac:88:ac:0a:10:bb:4e:77:e7:
         e4:bf:0b:be:4a:1f:1a:e2:a5:0c:59:d6:31:f4:c4:70:7f:95:
         b6:6e:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net