Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
File:                     CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json)
Hash identifier:          ZNnItBkEYDfjxtz8EM5KroQy7o5zdchecAWe4s3tLzg=
Subject key identifier:   50:BD:70:F8:F1:6A:F5:86:BC:E9:FD:BA:8D:C8:03:F0:6D:17:41:42
Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21
Certificate issuer:       /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
Manifest number:          E4
Signing time:             Sun 27 Apr 2025 04:19:08 +0000
Manifest this update:     Sun 27 Apr 2025 04:19:07 +0000
Manifest next update:     Sun 04 May 2025 04:19:07 +0000
Files and hashes:         1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: 9P1Iz2RpUrD8sumJOiXhdNzqQeyJDqcSW3ZK4WOrVrA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21
        Validity
            Not Before: Apr 27 04:19:07 2025 GMT
            Not After : May  4 04:19:07 2025 GMT
        Subject: CN=680db03c-ed06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:93:41:c3:47:f8:5a:61:5b:ba:e8:63:bf:
                    47:ea:71:02:dc:1b:9d:b9:55:39:64:a9:03:5a:e2:
                    36:56:67:ec:d9:ec:e5:23:67:d2:ae:64:e8:c6:6f:
                    ff:4a:31:dc:d9:58:ed:32:0d:fa:a4:ea:63:2b:80:
                    86:47:47:dc:17:95:05:8d:41:da:0b:68:e1:14:ca:
                    36:3f:bc:99:f6:e1:7e:b8:0e:31:88:c0:6e:8b:e6:
                    32:8c:84:51:9e:2e:ec:97:05:a8:ef:65:f0:6c:7c:
                    ff:87:fb:f3:87:9d:ca:29:fd:73:f7:49:b8:bf:ac:
                    4d:ae:ad:ab:74:f8:a0:df:cd:b9:f4:9d:da:d0:f3:
                    5e:d5:63:91:36:82:41:27:e8:15:56:77:9d:87:ee:
                    ee:ed:28:56:73:5c:3a:80:54:52:c1:25:59:ee:9f:
                    0e:10:60:69:00:d6:d8:5c:7a:db:96:e5:cf:37:56:
                    c2:fa:ef:02:da:f9:6a:7a:89:33:d5:20:00:7b:bd:
                    a1:31:95:94:1d:5c:f0:b3:f7:ac:de:36:eb:ae:e7:
                    25:04:f0:a8:3b:00:b4:3b:6d:89:e5:14:03:3b:35:
                    6c:4a:98:1f:2f:1b:5f:92:74:55:92:01:4c:e5:3d:
                    99:fb:20:f1:ae:fe:f7:2c:d1:05:70:0e:29:de:88:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BD:70:F8:F1:6A:F5:86:BC:E9:FD:BA:8D:C8:03:F0:6D:17:41:42
            X509v3 Authority Key Identifier:
                keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:84:7a:57:c4:0f:45:b6:f7:27:2d:78:2d:92:98:ac:40:
         bb:ad:f9:4e:af:c7:95:f6:cf:95:af:c9:d5:da:01:15:31:9d:
         d4:1a:89:7a:04:cf:b2:97:33:09:be:5c:23:0b:9f:5d:5a:bd:
         27:48:bd:f8:17:90:cc:d3:a3:df:f0:af:d3:66:7b:8b:5c:0e:
         3b:5e:a1:75:03:67:23:4b:27:71:a9:2f:93:b7:fa:1f:7e:29:
         9c:87:6d:e5:e8:42:6d:db:a0:44:57:20:a5:31:e5:99:7b:fa:
         5d:89:6d:ad:84:ca:a9:c9:aa:20:f2:73:29:fd:f1:12:4e:3f:
         55:78:1b:8a:fe:00:89:64:ee:15:a4:3e:08:92:6e:54:b7:9e:
         06:d5:66:29:a9:1d:22:43:87:46:da:f0:ba:04:1e:17:65:05:
         8e:db:68:dd:f9:70:3b:28:e2:d7:49:37:e2:df:cb:3f:30:e0:
         16:91:63:7b:6b:09:e5:0e:a3:26:71:d8:4e:74:00:8d:38:2f:
         f7:dd:5c:84:e9:42:af:d3:12:d5:8d:13:2a:03:7c:0f:39:fe:
         51:82:8b:97:80:e0:1f:92:34:03:2d:1e:87:2a:af:51:93:e6:
         56:a3:c2:01:f1:94:4d:f6:06:d0:44:28:87:56:af:e5:a9:18:
         19:d0:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net