Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File:                     r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier:          CLhjUFX+T716H7R+MoBiAv06hiRBHJ0P+18xvtqRtZQ=
Subject key identifier:   E3:63:E1:EA:9B:4A:DD:75:E6:D3:33:C1:98:57:0C:24:55:91:4C:4C
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer:       /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number:          51
Signing time:             Sat 26 Apr 2025 22:44:47 +0000
Manifest this update:     Sat 26 Apr 2025 22:44:46 +0000
Manifest next update:     Sat 03 May 2025 22:44:46 +0000
Files and hashes:         1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: lHL4BBWvNzTmGInf+W3yA/Qfx2gA24pEJ2c3wxnLkiA=)
                          2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 2bzYWZhSZUzBimn1IglwPv7AEhVCAaK8feLQOEL571A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
        Validity
            Not Before: Apr 26 22:44:46 2025 GMT
            Not After : May  3 22:44:46 2025 GMT
        Subject: CN=680d61de-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:db:02:62:80:2d:26:73:79:bc:30:da:5f:
                    dd:03:1e:21:f4:49:3a:89:64:d3:e2:f5:df:e1:78:
                    d7:36:6d:f0:2c:5f:8e:99:8d:9b:6c:46:30:64:d8:
                    38:3c:79:35:0b:b0:c8:fc:df:93:e1:08:81:7e:5c:
                    0f:bd:67:b6:82:4a:bd:8f:0e:99:3e:6f:62:b8:f1:
                    20:86:6d:f5:64:31:9a:61:f0:f8:76:2b:fd:62:99:
                    8f:51:84:a9:c5:07:dd:bd:68:2f:af:75:30:10:90:
                    15:5a:d6:fd:7e:66:b2:13:79:61:7a:7f:e5:de:b1:
                    89:a9:a3:10:db:b8:0c:a3:31:f3:ab:9d:89:0e:aa:
                    e3:b0:bb:38:ed:44:e5:2b:f2:9c:c2:c4:30:40:b6:
                    38:53:06:95:ec:67:77:0f:28:b8:06:69:9d:ab:31:
                    f6:33:b9:08:9d:14:d8:3b:03:43:84:ca:27:44:e4:
                    d8:08:54:72:3a:de:71:90:09:2b:a0:2b:c2:5a:83:
                    0a:af:66:a3:9d:21:75:e1:38:88:98:11:a6:78:eb:
                    3c:5c:e1:35:21:b6:95:8d:62:67:47:44:69:44:cd:
                    e6:0d:de:33:37:45:65:6e:0a:a7:4a:0d:a1:b5:9c:
                    6a:67:7e:d5:73:bc:9c:b7:37:cf:85:6f:86:e4:43:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:E1:EA:9B:4A:DD:75:E6:D3:33:C1:98:57:0C:24:55:91:4C:4C
            X509v3 Authority Key Identifier:
                keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:14:0c:59:4c:8e:e3:e6:00:f7:ec:b4:b5:4e:53:5c:93:
         81:13:a2:c8:2d:64:ef:a5:b9:e5:9a:76:cf:61:8b:59:d9:3c:
         69:d2:0c:3d:7d:32:46:c8:9d:c0:a7:53:f6:68:3d:e2:3c:11:
         fc:9e:70:5b:1a:57:4d:d3:21:a0:74:a6:78:42:73:a4:dc:b4:
         ab:e5:29:8c:b1:2c:a5:1e:e2:45:b9:f0:6b:62:a8:b0:18:62:
         11:d1:3f:49:0e:db:f1:8e:a1:b6:71:71:1b:57:8b:00:47:a7:
         e1:1f:5a:85:f5:15:b7:d6:fe:34:f7:be:53:10:df:34:81:64:
         8b:1e:70:02:33:fe:94:e4:9c:9a:b3:d4:87:1e:53:87:18:51:
         c5:2f:30:06:18:05:79:e4:82:79:c6:ba:c8:1b:87:03:a6:6d:
         1a:f3:81:63:32:7d:5b:0e:06:92:14:82:21:dc:25:6a:cd:95:
         f4:87:30:85:20:67:a6:35:92:e3:92:1a:bd:57:f6:04:73:a5:
         76:64:10:74:c2:51:42:70:ee:85:31:46:ce:c9:d7:f5:69:59:
         29:bd:91:8d:da:45:da:83:1b:e4:ae:85:65:31:3e:73:c2:75:
         7e:1b:44:36:16:49:cd:73:6c:89:3b:2c:bb:86:bb:0e:bb:86:
         23:4c:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net