Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File:                     Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier:          pV2gRityMGoHAo25uesJQYl2QgXqqkhnwQlL91CeAR8=
Subject key identifier:   54:9F:6A:F3:AF:08:A8:1C:77:4E:6F:76:E9:78:B4:44:E0:B5:CC:F6
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       05C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number:          05B2
Signing time:             Sat 26 Apr 2025 22:50:31 +0000
Manifest this update:     Sat 26 Apr 2025 22:50:30 +0000
Manifest next update:     Sat 03 May 2025 22:50:30 +0000
Files and hashes:         1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: LBjMknDLunpGPymoVJrMg4oOEcjMzpEillUB9CRCC3w=)
                          2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=)
                          3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Apr 26 22:50:30 2025 GMT
            Not After : May  3 22:50:30 2025 GMT
        Subject: CN=680d6336-a985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:74:2a:81:0a:79:c9:1f:13:2e:64:44:c7:
                    7f:7f:36:72:63:14:44:26:64:33:0f:8f:42:cb:56:
                    17:38:87:ae:a4:5d:2a:1e:16:70:42:c7:f9:65:79:
                    d7:2a:7d:48:22:a9:38:5e:8a:c8:6b:99:f2:2e:5f:
                    f3:af:83:d6:27:49:8c:38:91:9e:48:74:f1:e4:f2:
                    4a:6b:7d:90:bd:00:74:18:ad:2b:23:d1:25:42:75:
                    1f:12:b7:4a:8f:48:b3:67:3a:69:51:5b:fa:e6:42:
                    a0:80:cd:98:7d:72:31:8f:7e:b5:a6:04:c5:df:dd:
                    7c:5b:e5:8a:51:f1:16:06:e3:35:3f:24:67:bb:4f:
                    3f:b7:cf:73:1b:44:63:95:cc:8d:49:0c:2a:be:7c:
                    7e:aa:b7:ea:db:3c:d5:aa:7b:01:f2:99:36:16:41:
                    e7:4b:57:16:80:ff:66:fe:7d:82:38:b0:84:ce:2c:
                    c9:53:8d:56:1b:f2:1d:1d:9a:50:dc:08:73:04:f1:
                    79:49:e8:db:08:d4:2c:b6:5b:1b:55:27:ab:f6:e1:
                    1a:fa:f0:51:90:dc:3b:6d:6d:a5:38:e1:75:eb:6a:
                    d1:94:bf:24:3e:f2:9a:ab:36:6f:31:ba:33:ba:9f:
                    76:e6:4b:3d:ff:ee:29:2c:bb:6c:07:75:ae:17:c8:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:6A:F3:AF:08:A8:1C:77:4E:6F:76:E9:78:B4:44:E0:B5:CC:F6
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:21:12:9c:e5:b8:1f:04:20:f0:f9:38:f4:3b:d0:e6:b8:
         e4:a0:5b:1d:ce:f7:22:03:81:d7:3f:4c:47:08:75:45:71:ff:
         5b:fb:4b:8e:2d:26:b8:fe:37:7f:0e:61:27:b4:8c:90:4d:c7:
         4b:90:90:93:ce:2c:46:3a:6f:68:08:8b:f0:5b:63:56:d7:f9:
         8d:79:27:61:7c:81:e2:9e:c8:b7:d2:59:5a:35:8d:9f:94:48:
         c3:88:a5:2a:ce:10:aa:a9:fb:08:21:c3:fc:b6:79:5d:b8:c2:
         76:12:ac:92:45:2e:67:f8:c1:9b:24:fd:2c:48:7b:da:d6:c5:
         de:b4:e2:45:55:29:57:6d:65:da:ab:b0:52:0a:1b:d1:b8:af:
         bb:86:06:b9:27:de:09:72:ff:83:42:c7:ec:c8:d6:1a:61:c3:
         4f:aa:a8:37:75:c8:67:02:4e:a0:d1:cf:84:2d:82:2f:86:b2:
         f5:f3:b3:c5:46:9e:2a:17:9c:d3:ea:ca:d5:07:4e:aa:88:af:
         6c:40:af:32:a9:49:f1:70:cb:08:4e:94:83:28:e4:0f:28:e9:
         d0:d5:5a:2a:01:12:c6:a6:e5:3a:6d:6c:33:53:a5:3c:b0:9f:
         31:c5:0b:17:cf:14:6c:61:3b:27:a3:86:08:62:ce:0e:3b:63:
         89:15:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net