Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File:                     E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier:          5Th0sJyWRE0zruMTIYExRR0Dh3DubCEzrVU3AvpLHG0=
Subject key identifier:   77:BD:23:57:38:3A:00:CE:B4:9D:CD:DA:37:74:8E:57:F0:9B:C9:AC
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer:       /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial:       21F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number:          21BC
Signing time:             Mon 28 Apr 2025 16:00:38 +0000
Manifest this update:     Mon 28 Apr 2025 16:00:38 +0000
Manifest next update:     Mon 05 May 2025 16:00:38 +0000
Files and hashes:         1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: J50JuC2jpg4ldYwwydo5Y3+VuVXzIkjQvmHk0makeEM=)
                          2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: HdfcGvizJlJ1Ca90ZbbKhXb8B7UfkJUNPm9rX4KTDek=)
                          3: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: C724NRcuY6+5rOKZp6BehVoO/AlUI8Z8vFBOmZryKwE=)
                          4: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: D9t3FqLZRsFD1SHZO5b0WbvDd4cnv0IdfQ5yKvIlcN0=)
                          5: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: mqhxizEIYr8qmqCoAWD4ByVuj0CV9gKDyE2EqO59XEo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
                          rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8692 (0x21f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
        Validity
            Not Before: Apr 28 16:00:38 2025 GMT
            Not After : May  5 16:00:38 2025 GMT
        Subject: CN=680fa626-8dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:83:2c:27:d2:ec:90:a6:1a:d5:84:4b:31:
                    ed:92:af:40:92:82:69:a5:93:34:88:89:62:97:bc:
                    9d:ea:5e:fb:50:5c:41:c3:8d:a8:30:3e:8f:34:2d:
                    85:37:3c:78:41:c9:21:b2:be:af:a7:8c:96:61:a7:
                    20:29:49:49:c1:64:fa:af:e4:3b:4f:cd:de:99:54:
                    46:1a:99:df:a4:3e:0c:21:39:a2:62:33:de:b7:37:
                    62:fb:70:03:17:5e:a8:74:01:57:4e:d6:56:a8:5b:
                    27:c3:90:00:a0:69:c4:97:1e:2c:f8:9b:31:94:58:
                    71:c1:9f:a4:82:cb:2c:ae:4d:2f:79:d5:65:76:63:
                    51:cc:7b:ad:79:98:5d:41:6a:6c:c0:13:98:05:b0:
                    56:87:c9:50:a4:7b:c6:25:a6:1b:f5:b9:fa:5f:42:
                    a6:91:7f:5b:3a:cc:5d:67:80:46:01:db:36:03:1d:
                    68:53:43:3b:09:02:dc:90:b1:c3:24:e1:7b:cd:78:
                    67:a6:22:65:fb:a0:ea:cd:6a:fc:06:0e:85:97:be:
                    1c:6a:0b:17:53:95:5f:57:74:5d:ee:a9:26:fe:48:
                    62:60:9a:59:bc:0b:81:fe:dc:63:de:ad:2f:88:7d:
                    59:7b:7e:43:13:d4:74:84:3b:ce:63:1a:92:dc:57:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:23:57:38:3A:00:CE:B4:9D:CD:DA:37:74:8E:57:F0:9B:C9:AC
            X509v3 Authority Key Identifier:
                keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ec:e3:aa:07:95:b1:60:3c:19:fa:9d:99:9a:33:4e:a6:5d:
         d5:5c:69:74:2f:f7:d0:fd:27:15:09:e4:9f:ab:ec:52:e9:a1:
         d7:7d:de:44:49:c2:02:b6:18:b4:7f:f6:8d:42:94:85:86:a9:
         12:53:fe:a7:f8:69:a1:72:c3:2d:8a:4c:89:b5:bf:1e:50:6d:
         d6:80:fa:7b:53:ee:81:fe:b4:2a:a5:0c:d0:d9:56:a1:ff:66:
         c6:52:7d:4a:79:15:d5:d6:e8:8d:ac:99:73:c2:f1:69:e4:a7:
         14:f1:32:3a:4e:59:83:69:77:29:cc:d0:50:04:d5:b3:ce:49:
         bb:f0:a7:59:57:d1:90:04:b8:a7:3a:ed:79:fa:2b:70:db:1a:
         f4:f8:b6:ba:15:4a:be:b6:14:1a:f9:6e:8a:81:e8:ef:33:42:
         e0:2b:1f:f5:4a:d6:37:56:6d:21:cc:0f:e1:b6:f5:75:f9:82:
         f2:64:94:32:ca:ef:29:2a:84:7a:b1:7d:14:d7:ed:b2:e5:73:
         dc:c4:03:44:8f:5f:c5:7a:11:c8:2b:09:6b:81:a5:23:0b:8b:
         d3:cd:35:a1:28:eb:6b:a1:8b:59:c4:18:71:a2:ef:68:2e:0a:
         3d:ff:45:a8:b6:36:c5:af:15:fe:7e:83:f2:e7:8e:b1:8c:94:
         58:19:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net