Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
File:                     u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json)
Hash identifier:          yiQvkpDsRyAoRMhnck0WMdXnABNmMnyY+HrOu5x2oYM=
Subject key identifier:   7E:68:5B:97:56:60:6D:E4:69:5B:FA:41:AA:84:9A:40:30:E2:68:E0
Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59
Certificate issuer:       /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
Manifest number:          61
Signing time:             Sun 27 Apr 2025 05:53:45 +0000
Manifest this update:     Sun 27 Apr 2025 05:53:45 +0000
Manifest next update:     Sun 04 May 2025 05:53:45 +0000
Files and hashes:         1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: QKp5aKjNodnV6WP4GL1POpLn3VmGorIu+q5I+19xINY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59
        Validity
            Not Before: Apr 27 05:53:45 2025 GMT
            Not After : May  4 05:53:45 2025 GMT
        Subject: CN=680dc669-50cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:33:62:c2:08:e0:98:b7:31:91:07:27:4a:
                    d4:73:63:aa:ab:93:a9:ee:ea:9f:9b:98:9a:10:b8:
                    90:bf:d6:4f:4b:3a:f1:b9:f4:4e:39:d3:d1:96:93:
                    60:76:f2:b8:eb:c2:f8:7c:a1:97:4e:69:ec:25:a6:
                    33:5d:3e:67:82:b1:4a:00:d9:9a:15:07:fa:44:27:
                    29:2c:0d:1c:4d:36:10:8a:cf:e2:12:cc:a3:df:8e:
                    3a:6f:32:c7:70:69:3a:7f:bd:15:a9:d2:58:9e:bc:
                    79:69:c6:c9:25:95:c2:bf:4c:a1:8b:4d:a3:2c:5b:
                    51:e0:60:a6:47:15:02:a3:7a:93:4c:af:ee:8e:b4:
                    e8:05:45:6c:c2:3b:23:ef:1d:3e:21:da:4d:c8:e5:
                    e6:92:96:da:d9:73:38:15:e4:b1:d5:a9:a0:f5:d0:
                    55:5a:c3:91:27:e9:a9:51:c4:35:04:d0:ec:28:d7:
                    ea:18:0e:39:05:de:f1:20:8f:63:65:0f:e4:5b:44:
                    a3:a8:cc:8b:30:e2:bc:71:c3:af:6a:4e:b5:f5:ed:
                    09:72:f4:90:ed:3e:4e:d4:0e:f6:39:31:93:6c:36:
                    8d:47:8a:9e:3f:46:b9:08:a5:6d:bd:18:d2:68:05:
                    58:35:5f:19:7a:f3:b3:6a:ff:b2:a7:8b:80:28:04:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:68:5B:97:56:60:6D:E4:69:5B:FA:41:AA:84:9A:40:30:E2:68:E0
            X509v3 Authority Key Identifier:
                keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:d2:e0:13:af:7b:6c:0c:a7:db:fc:af:0f:af:40:0d:9f:
         9b:16:e4:5a:59:6a:b5:d2:69:0f:c3:89:48:41:72:ca:a7:7f:
         eb:7a:1a:5c:09:bd:8c:77:65:1c:b9:80:75:0c:5e:a3:5e:59:
         9c:7d:a9:4b:19:71:73:8e:aa:a9:e9:af:d4:81:94:02:4b:1b:
         f8:f3:e3:9a:cd:8d:f0:91:51:3c:fe:54:63:64:54:25:d3:e7:
         69:71:39:04:1f:cc:0a:11:d5:43:1e:ed:94:26:70:4c:5c:25:
         9f:fd:ae:0a:45:88:9b:b2:d6:37:1f:4e:86:89:e8:2a:e2:71:
         95:94:e4:74:89:fa:11:dc:6f:8c:7d:3b:fc:ea:2f:0d:87:7f:
         dc:cc:fe:ae:0c:9e:0b:14:13:43:bb:1b:b7:3b:a7:bf:7a:4e:
         50:14:4a:a1:d9:6a:8f:c5:a7:83:9b:a7:3f:56:48:5e:3b:fb:
         9c:83:4e:37:56:14:90:af:5d:9a:63:41:f5:45:a3:34:44:39:
         d1:46:84:a0:c5:9e:b3:6f:82:20:1c:b2:4d:08:d1:a7:eb:9f:
         b6:3c:b3:ea:4c:15:27:c7:40:b8:77:a9:d3:79:be:68:ee:0c:
         c1:8b:ae:32:f6:2b:54:c3:ac:04:90:d0:47:6f:b2:f5:d7:cf:
         bd:cd:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net