Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File:                     rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier:          5WrYE8VzOZZ/GhFCgPf/oPMcoieYNBS0dCfQw+N+Bhw=
Subject key identifier:   59:93:F1:7E:95:CA:BD:D3:D5:C8:40:AF:C3:1A:F7:F7:CB:F3:29:D6
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       04BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number:          04A7
Signing time:             Tue 22 Apr 2025 23:49:51 +0000
Manifest this update:     Tue 22 Apr 2025 23:49:51 +0000
Manifest next update:     Tue 29 Apr 2025 23:49:51 +0000
Files and hashes:         1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: KW2ljDDc745q9AcYlrQKz20cxgwLYDjtAYKbSpppXNE=)
                          2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: N+v5XDTe3qGrc3Im5miqpHu358OzdQqGsyKCPQ1e/9E=)
                          3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=)
                          4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=)
                          5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: vVCpAMW7qiQGHNF6JhfNX4AfCfOmlSNmnkvMLMOZ1EI=)
                          6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: sOUIWYOFE2CSPs3Drpz/bEhxmM04l8k3SIDOG1UW16M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 23:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Apr 22 23:49:51 2025 GMT
            Not After : Apr 29 23:49:51 2025 GMT
        Subject: CN=68082b1f-20ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:23:16:00:b2:13:cf:72:29:6e:46:2b:c8:
                    af:c9:9b:7d:d9:3b:60:58:e1:1d:d7:51:c4:dd:c3:
                    ac:e0:23:ac:c0:7f:19:59:e9:6c:8e:ca:f5:7f:a1:
                    a2:8b:19:02:9a:db:23:60:d8:ed:62:32:5a:bd:6e:
                    32:52:1c:dc:6e:a6:27:46:46:97:e6:52:b8:a0:4f:
                    20:0f:16:61:f7:7c:6a:01:2b:ad:89:ff:1f:3d:1f:
                    94:df:4b:8b:52:0e:7b:d7:36:de:d7:b1:ec:b8:ac:
                    70:ac:dd:3d:47:10:57:fd:d8:49:11:d9:d2:62:be:
                    ac:38:43:61:71:b9:72:df:05:5a:ae:7a:1a:d7:95:
                    b3:c7:9a:ca:3e:be:26:c9:94:52:d8:70:6d:4e:f5:
                    8d:e2:1d:dd:10:38:4c:f0:06:78:4f:e9:55:a7:16:
                    2e:0b:14:ea:70:ee:a0:bd:95:7c:78:23:f0:5f:26:
                    38:3b:ee:8a:aa:64:6a:a0:9d:a1:a9:8f:f9:0f:17:
                    10:84:74:10:9d:5b:05:b5:3b:1c:7d:a3:ae:b8:b3:
                    d7:bf:23:64:a6:1a:41:ab:72:19:6a:b0:5c:55:00:
                    03:dd:7b:31:94:bd:31:c5:75:d5:61:6c:ff:bb:a9:
                    bc:f2:75:89:32:d1:f4:d7:06:a7:54:42:49:c3:07:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:F1:7E:95:CA:BD:D3:D5:C8:40:AF:C3:1A:F7:F7:CB:F3:29:D6
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:a1:e0:ff:ba:d0:d5:f2:be:d5:63:95:3e:7d:06:15:8f:
         a9:d9:df:4c:5f:6f:7f:eb:b7:96:42:f4:73:d3:a6:ee:83:c1:
         f2:2e:c1:5c:75:43:b6:9d:19:37:a2:20:3d:df:a7:d5:49:e3:
         c6:e8:00:5e:6d:6e:e0:6f:66:7a:1f:0f:cd:99:b0:87:3f:fc:
         0b:d4:40:fb:d3:e9:3a:4e:63:70:2b:4a:cc:4b:5c:a4:02:15:
         10:25:64:fa:34:a1:7f:13:fb:66:1e:b9:4f:86:7b:ff:4d:4d:
         65:1c:fe:27:1a:75:3b:0a:d4:d7:d7:ba:49:86:b2:84:97:86:
         fe:b4:36:42:15:b2:3a:56:27:fa:ce:fc:31:e4:fa:4a:42:2f:
         18:38:a5:0a:28:14:5e:38:a7:e0:e2:1c:17:db:f3:81:16:c0:
         25:d4:bf:db:b3:fd:a0:65:78:de:4f:84:a6:3f:e6:9b:80:8c:
         6b:66:55:fc:21:b8:c8:94:62:a1:7c:d1:45:b8:dd:ab:9c:a6:
         b1:c4:d5:38:b0:77:bd:fd:dc:4b:f0:55:24:35:54:2a:b6:24:
         05:e8:4b:43:9d:fd:e6:ce:5a:5b:c8:d3:40:93:02:53:b6:5d:
         25:88:c9:3d:e4:4d:3b:2d:4d:1d:b9:3a:f8:2e:0e:89:6b:fe:
         40:df:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:15:27 2025 by rpki-client on console.sobornost.net