Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
File:                     9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json)
Hash identifier:          1KDw0Dok4X2EN2Xcwyktd6b6FxhDFn7oyeLO/GyY2YM=
Subject key identifier:   A5:39:09:15:DA:70:07:DE:B0:32:1A:68:0F:34:F7:A8:4E:A2:05:75
Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
Certificate issuer:       /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Certificate serial:       05E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
Manifest number:          05CF
Signing time:             Sat 26 Apr 2025 22:42:25 +0000
Manifest this update:     Sat 26 Apr 2025 22:42:25 +0000
Manifest next update:     Sat 03 May 2025 22:42:25 +0000
Files and hashes:         1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: ZH5G075ElbtI966K9TjCd29/iIck/tT66mX0uSJ1n90=)
                          2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=)
                          3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B734D, serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
        Validity
            Not Before: Apr 26 22:42:25 2025 GMT
            Not After : May  3 22:42:25 2025 GMT
        Subject: CN=680d6151-cfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:5a:3f:cb:ce:36:5e:8e:cc:01:d1:e2:05:
                    b2:ce:b9:be:b1:16:bb:29:a1:6f:9c:92:3c:97:8d:
                    38:d9:c2:6e:16:59:f3:cb:7f:89:c2:9c:de:58:57:
                    0d:90:58:fd:9e:be:b2:6b:c3:01:fe:ae:e2:75:e8:
                    9f:f0:fa:52:d7:9a:5f:97:e6:9e:73:5f:04:29:c3:
                    2b:27:b1:ec:e8:b0:11:fa:b3:a3:80:0e:11:d9:19:
                    61:39:b3:5b:c0:5c:29:b6:ce:e8:7a:ea:2b:54:4c:
                    2b:ca:34:09:ba:7d:7d:8e:29:88:5c:fd:03:11:b5:
                    80:b8:cc:64:31:c9:20:c5:9e:cd:db:7d:bb:aa:74:
                    1b:90:67:76:8a:66:9e:ca:d5:7c:42:97:2d:aa:18:
                    d2:ba:e3:83:5a:d8:9b:f6:21:bd:18:f0:c9:48:bb:
                    e3:63:8f:9a:9b:1e:76:27:68:33:21:88:60:c4:14:
                    f6:4d:2b:a4:ca:84:9b:db:dc:4a:95:06:a1:4f:37:
                    82:8f:da:51:15:15:3a:ee:62:09:3e:a2:c5:95:54:
                    d6:12:04:6f:39:0c:ec:ef:dd:cc:cb:67:96:10:3f:
                    b9:d6:16:20:ac:1e:63:6d:83:b3:a2:da:03:a1:1b:
                    60:c0:25:5b:ae:63:30:55:57:57:7d:1e:8b:17:45:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:09:15:DA:70:07:DE:B0:32:1A:68:0F:34:F7:A8:4E:A2:05:75
            X509v3 Authority Key Identifier:
                keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:37:83:de:5d:cc:d7:d4:96:77:2a:65:c0:10:56:4b:d2:22:
         b4:85:36:a5:e1:8e:4f:67:1c:f1:df:5a:13:9d:bc:03:ad:5d:
         29:32:6a:a4:dc:c0:af:0f:9e:df:7f:69:a4:6f:d1:36:fe:04:
         45:69:4a:09:c5:2a:90:da:28:cc:11:4a:29:27:27:f6:c8:08:
         6a:b2:30:5f:27:e9:16:b4:c2:1b:f4:15:72:1b:d3:95:d7:8d:
         22:c5:07:73:e0:1b:38:52:90:88:0c:e7:9b:f8:13:a8:77:b5:
         0a:b3:8f:1b:63:bd:43:13:50:b8:7c:7f:ea:4b:64:79:c5:c6:
         b8:e8:73:13:d9:9e:60:68:08:b5:19:95:87:db:5d:5e:f7:50:
         c5:f7:e3:70:a6:4e:a3:a9:7e:3b:31:e9:9b:fb:73:9b:ec:4d:
         fd:18:e9:b4:34:72:3a:9d:8e:6e:c1:4e:ac:2d:52:7e:a6:4e:
         a3:ab:0e:44:b8:8d:58:92:55:41:b7:d0:de:84:8e:c0:32:f6:
         ea:c9:fe:1e:43:b0:9d:39:15:7e:67:a3:34:e6:b9:b5:ab:8d:
         46:77:d5:77:57:48:1e:5d:2b:d3:8c:c8:c8:d5:5b:c4:1b:a3:
         46:20:53:94:44:7d:36:69:1f:a2:6d:11:a4:f5:26:24:26:af:
         e5:f7:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net