Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File:                     Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier:          gGuuNYwk+YcPG0VqM+oZC/9DW18p/alAJSjhiFao7zk=
Subject key identifier:   14:7E:B3:34:9F:5E:FE:7A:B2:18:46:4C:DF:63:3B:93:AB:D4:88:84
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer:       /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial:       0740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number:          072D
Signing time:             Sat 26 Apr 2025 21:29:40 +0000
Manifest this update:     Sat 26 Apr 2025 21:29:39 +0000
Manifest next update:     Sat 03 May 2025 21:29:39 +0000
Files and hashes:         1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: 5gbZNW4l/VK/rh81cCFNcnAE4I28RMjk/Cj3OrS5dpM=)
                          2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
        Validity
            Not Before: Apr 26 21:29:39 2025 GMT
            Not After : May  3 21:29:39 2025 GMT
        Subject: CN=680d5043-44e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:15:53:c1:03:6c:76:fe:4c:73:e3:7f:1b:
                    3d:15:7f:29:0b:26:77:72:a5:92:c6:40:02:29:44:
                    e5:59:20:1f:fb:4d:d2:23:a7:a8:33:c1:01:09:2d:
                    3b:0a:93:15:8f:11:85:2c:b5:8f:ff:2e:40:cf:42:
                    0f:0c:ae:04:30:f2:f9:4e:c0:85:75:81:c6:05:08:
                    43:7f:2c:95:da:cf:d5:b2:b7:4f:af:eb:27:83:eb:
                    54:8d:3a:fe:f4:b1:f5:4f:25:ab:b5:06:5b:fa:89:
                    6d:f6:05:0e:ac:88:b6:51:11:7f:63:b2:e9:42:d6:
                    92:ad:9f:8c:ae:78:01:3b:d8:d8:d6:f6:a1:bc:47:
                    74:3b:87:2d:8d:87:48:61:39:84:76:0e:f3:47:61:
                    c7:8e:30:49:8f:cc:89:a7:fe:e1:87:ce:39:0a:2b:
                    44:18:24:39:a2:2e:45:60:3e:74:e7:2d:e1:a4:33:
                    8b:43:e3:12:d2:b8:10:4b:c5:48:35:8e:5a:e4:fb:
                    fa:4c:7d:26:c6:8a:b3:1f:bf:17:f9:7f:64:87:28:
                    07:23:24:f7:30:07:ef:8d:76:89:17:fb:22:ae:94:
                    4a:b9:16:d2:5e:c0:ff:e8:33:a2:3e:fd:f5:9f:c1:
                    9f:d2:4a:d4:50:d2:b1:61:c6:f6:a2:bf:c7:a7:1f:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7E:B3:34:9F:5E:FE:7A:B2:18:46:4C:DF:63:3B:93:AB:D4:88:84
            X509v3 Authority Key Identifier:
                keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:60:f4:f7:32:09:16:bb:9d:c8:f2:7e:87:85:b7:4d:cb:a7:
         d4:71:e7:d1:1e:5e:29:6c:37:ba:14:67:a0:b3:00:10:32:6a:
         f8:cf:f9:a9:c4:a3:a5:38:ff:c2:13:91:95:dc:f3:7d:66:30:
         0f:ab:9d:6f:39:c5:87:34:48:f3:42:f6:aa:8b:ea:92:b2:24:
         c1:5d:30:13:bd:1f:b4:80:83:eb:41:4a:f5:37:e7:c2:6b:0a:
         20:45:c1:bd:c2:f8:91:46:ec:ab:c6:df:b9:22:7c:92:82:c4:
         12:68:30:ce:de:5e:c5:e4:61:7e:bb:2f:95:ec:87:e9:36:1b:
         39:ea:f9:b9:d9:ea:7c:26:e2:6e:dc:47:f6:7d:70:d3:c5:13:
         b3:c4:e9:ea:d4:1f:47:6b:3d:1e:e4:6c:42:42:ad:b1:4f:a5:
         cc:98:4c:83:83:ef:92:77:57:bb:83:d4:66:5a:4c:16:7f:b5:
         6a:24:e5:04:f0:0e:97:ed:c2:f4:07:52:6f:53:35:53:17:f5:
         75:22:10:e6:be:3d:8a:35:2d:c4:23:ea:c4:11:d4:83:47:42:
         fd:20:b8:1c:4f:32:df:c6:3d:39:b5:af:53:10:7f:79:e1:78:
         d4:8e:f4:ab:fc:4e:72:ed:c3:31:60:dc:02:04:97:03:54:26:
         c5:1a:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:08 2025 by rpki-client on console.sobornost.net