Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File:                     neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier:          dp05k4jxt0iIkznNPgXPDco/kZBSlhiJV4GSD0ZA91w=
Subject key identifier:   55:DA:0F:3D:F4:70:D1:EA:BB:85:4E:AB:E8:F6:D5:12:F3:5E:A4:2C
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer:       /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial:       0C30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number:          0C21
Signing time:             Mon 28 Apr 2025 18:55:54 +0000
Manifest this update:     Mon 28 Apr 2025 18:55:54 +0000
Manifest next update:     Mon 05 May 2025 18:55:54 +0000
Files and hashes:         1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: c8J7Ht5++6sFbg/7wRnSPBthHf1/tzTdVVBSnF+hmrg=)
                          2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3120 (0xc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
        Validity
            Not Before: Apr 28 18:55:54 2025 GMT
            Not After : May  5 18:55:54 2025 GMT
        Subject: CN=680fcf3a-36dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:38:0a:d7:53:72:db:63:65:2a:1e:b5:31:
                    5f:9b:a9:b8:de:ca:c6:38:dd:69:b0:bc:0d:15:b3:
                    b4:94:8b:b8:b0:ca:62:b0:ab:ac:66:c1:ee:62:4a:
                    2d:d0:13:bb:61:e5:23:bc:b0:e9:07:5f:a1:55:5d:
                    50:da:17:8b:bf:8c:b4:8b:8d:bb:54:26:a0:6a:98:
                    61:34:fb:73:7e:86:e1:e2:e7:b2:54:9b:a6:77:3b:
                    6f:de:7b:f4:d3:98:d4:b4:6c:41:e8:18:b4:e6:20:
                    42:1d:e3:97:e1:f4:bc:85:87:ee:13:b3:93:6e:33:
                    ad:83:f6:ab:90:87:14:87:41:5c:ff:0c:3a:28:6a:
                    fa:76:4f:a9:13:f3:14:82:56:74:3c:29:57:c0:b9:
                    3a:f6:bc:1d:10:09:15:c6:32:82:9e:9f:20:5d:08:
                    4e:9e:80:cc:5e:dc:43:26:09:e0:89:2d:99:f9:fe:
                    67:ea:d1:f3:bd:94:69:71:b9:9e:d9:72:70:ea:c1:
                    0f:ad:4b:66:8c:a7:45:0c:20:5d:41:dd:51:99:ae:
                    5c:58:85:30:ff:3f:02:4f:46:48:f4:3b:6c:92:dc:
                    e5:ad:11:e9:9f:01:c2:c5:41:d3:be:a3:45:d6:49:
                    8c:e3:78:34:e1:81:c0:e1:e6:3b:77:4e:bd:4d:c3:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:0F:3D:F4:70:D1:EA:BB:85:4E:AB:E8:F6:D5:12:F3:5E:A4:2C
            X509v3 Authority Key Identifier:
                keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:29:93:f2:3d:e1:77:81:0c:49:22:85:39:17:40:f8:f8:
         3a:38:40:66:20:d9:e1:cb:d4:35:bd:31:23:f0:ee:b9:7f:82:
         30:a3:9b:07:14:a3:c4:b4:4a:34:7f:bc:ea:7b:75:5b:6b:18:
         f9:2a:55:1c:ea:83:23:39:33:d1:17:51:8f:79:c6:18:48:f2:
         c1:e9:27:a6:4d:b7:8e:cc:b1:82:da:be:0c:a4:74:f6:a1:13:
         ef:6b:54:b5:82:60:eb:a2:57:57:e3:7f:0d:50:59:81:dd:96:
         39:62:e1:ea:c0:78:96:db:f8:ed:26:51:37:10:1a:87:37:16:
         23:c5:36:20:c4:36:25:46:e4:97:d7:33:a9:29:ce:3b:b2:83:
         ab:eb:eb:c0:89:84:09:4d:3c:be:71:c0:75:15:2e:e7:91:85:
         f7:a9:38:e3:c3:39:0d:c9:37:8c:f3:01:06:3b:65:af:de:02:
         b3:fd:1a:82:15:6f:a5:bb:0d:5c:04:41:88:6f:98:c1:a8:ef:
         e1:6b:d3:71:ff:10:35:d7:da:ca:6b:fd:c0:b7:9b:3a:05:21:
         b7:2c:ae:37:72:2b:d4:26:39:3c:d0:73:8a:cb:90:1e:ec:2a:
         6a:93:27:0f:54:e0:c2:6c:1b:9d:8c:08:6f:a0:59:00:04:32:
         d9:6d:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:48 2025 by rpki-client on console.sobornost.net