Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          4+rT6iGn+YQLVy1iqYq0u9Fxgykcq4rdyg0qtNwhSAA=
Subject key identifier:   7A:C5:E5:0C:43:F4:ED:ED:15:BC:87:D0:14:0C:D1:2C:24:0F:94:7F
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          5FD6
Signing time:             Thu 24 Apr 2025 14:15:21 +0000
Manifest this update:     Thu 24 Apr 2025 14:15:21 +0000
Manifest next update:     Thu 01 May 2025 14:15:21 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: xPo5HuqQtd8PnCJbdt3HVRw/ClLbGyqMwSMVbLPWFCw=)
                          2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=)
                          3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: Apr 24 14:15:21 2025 GMT
            Not After : May  1 14:15:21 2025 GMT
        Subject: CN=680a4779-3698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:8d:7c:37:7b:0e:9d:d7:66:35:3c:93:39:
                    c6:c8:41:37:04:18:a3:d3:5f:d5:ce:8e:a6:0d:65:
                    3f:57:88:b2:6f:c3:6f:69:1c:ab:09:86:54:6b:1f:
                    01:29:ae:1b:d5:31:e3:0f:83:e1:3d:aa:b3:05:db:
                    ce:41:24:5a:5e:41:5c:ac:82:9f:69:bd:5d:06:0e:
                    3b:6b:35:d1:60:94:54:66:2f:2a:d0:1b:b3:b3:7c:
                    d9:1c:e1:06:65:0f:82:b0:39:78:81:e7:f1:d1:ef:
                    b3:c5:2f:49:b3:e4:9f:5c:47:4c:2d:00:bb:80:6d:
                    ed:d3:bc:23:82:76:a9:39:62:b7:17:e3:9d:0f:0c:
                    b7:20:18:be:b2:61:a8:48:d1:19:0b:2a:38:b2:b4:
                    b1:02:e5:7b:96:a6:9b:0d:b7:09:33:a5:18:49:48:
                    f1:fa:26:55:12:19:53:d6:3c:a8:9e:58:ac:81:4c:
                    cc:48:96:56:81:1c:17:4d:c5:a7:0a:ad:e7:b9:40:
                    a7:4b:5f:f6:6a:13:aa:7f:07:55:b9:2a:d8:6c:1c:
                    50:35:3f:5d:38:36:16:95:bb:6b:35:f1:a3:cc:d2:
                    14:11:d9:70:93:09:4f:a0:53:9c:15:bc:c4:7e:07:
                    69:1e:d6:77:81:77:50:34:b6:e3:31:ad:95:91:4c:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:E5:0C:43:F4:ED:ED:15:BC:87:D0:14:0C:D1:2C:24:0F:94:7F
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:43:69:68:4b:73:05:38:44:1c:d6:04:b8:45:5f:39:42:42:
         23:ce:6f:3e:ef:70:ad:48:90:7b:0d:60:90:a4:f5:16:d5:b2:
         6b:b1:5f:0c:b4:68:3b:bb:d6:4b:2b:c1:b3:76:3b:7d:0c:fa:
         34:de:0b:33:b5:ee:de:e5:60:13:2b:0e:3f:64:73:8e:ef:70:
         a5:50:4c:2d:1c:43:7d:26:fb:9a:4d:0b:5b:e6:99:ad:ff:c2:
         d7:ae:e1:32:7b:12:e3:6f:72:83:07:e4:0a:db:9c:af:c0:88:
         57:12:c1:02:c1:1f:49:88:14:20:7a:27:58:b7:b5:c5:80:30:
         cf:2c:ee:d2:c6:62:f4:c8:43:ef:1b:04:01:7d:01:5b:dc:a5:
         9f:ad:3f:4f:ec:a8:3c:74:f6:76:a3:29:37:01:19:6d:7f:05:
         44:d8:28:86:ec:58:8b:f4:e0:8e:d2:e5:27:d4:bb:c5:75:48:
         3e:8f:f3:10:fd:1e:1b:e8:07:7e:43:9f:d4:b5:63:55:a9:ac:
         a4:43:91:2f:80:68:42:b2:41:b1:36:ec:2b:0b:01:90:41:51:
         54:53:54:c4:ac:39:4e:3f:5d:d9:2c:eb:73:12:05:76:2d:95:
         d0:71:66:37:1e:0f:97:c4:71:9c:25:1c:5e:0e:56:d4:b8:38:
         50:e1:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:52:51 2025 by rpki-client on console.sobornost.net