Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File:                     bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier:          ZXGLEW4neWy9r6fJfruqcp7N5dUxP/FcfqoAde7/Txs=
Subject key identifier:   EB:78:9A:11:D3:6E:14:A4:20:3E:A1:E6:2D:F6:7C:D2:87:D2:81:D3
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer:       /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number:          0484
Signing time:             Sat 26 Apr 2025 23:46:54 +0000
Manifest this update:     Sat 26 Apr 2025 23:46:54 +0000
Manifest next update:     Sat 03 May 2025 23:46:54 +0000
Files and hashes:         1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: 6wgtAmXcY5QNfxpKiBPUK0Bsl5DD8oEn/Mnmjz7ik4Y=)
                          2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=)
                          3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=)
                          4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
        Validity
            Not Before: Apr 26 23:46:54 2025 GMT
            Not After : May  3 23:46:54 2025 GMT
        Subject: CN=680d706e-2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:2c:ef:ce:41:ec:07:48:99:cd:bb:00:8c:
                    4e:3a:b7:49:82:26:74:de:8d:63:6d:82:3d:09:46:
                    88:7f:31:e5:8b:4b:fc:f8:6c:5d:9a:78:6c:61:27:
                    4e:16:9b:a9:cc:d3:c2:43:c6:54:6f:a3:7c:1d:8e:
                    92:bd:83:42:05:9a:c9:2f:e6:28:d4:55:30:fe:dd:
                    1c:c4:ad:19:57:93:fd:99:84:1b:32:c9:25:2b:8c:
                    73:35:78:c5:b9:98:0c:21:47:bb:7c:f8:66:dd:50:
                    fe:df:5a:50:70:7e:3c:91:69:f5:22:08:68:e1:05:
                    58:b3:aa:65:a4:14:66:64:7f:57:80:11:11:77:dc:
                    a2:ac:c7:fa:17:8e:a8:2b:07:73:21:0d:1d:6f:9f:
                    00:75:c2:e8:a6:eb:6e:68:8a:e7:08:d4:9a:5e:f3:
                    45:b1:0d:60:b3:7a:8d:70:cb:fe:07:a5:09:de:3c:
                    10:14:83:98:a4:a3:96:d5:10:10:d7:dc:d3:65:42:
                    96:3f:ae:09:05:09:1a:9d:d1:d3:c5:5f:d5:23:4c:
                    9a:3e:42:59:7e:11:5c:b9:d2:64:fc:aa:a4:56:6f:
                    e5:9c:f0:4b:14:45:b2:8f:e6:23:77:00:5f:50:2b:
                    36:11:ce:bf:20:0f:07:f9:fd:e2:33:bc:8b:ca:e6:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:78:9A:11:D3:6E:14:A4:20:3E:A1:E6:2D:F6:7C:D2:87:D2:81:D3
            X509v3 Authority Key Identifier:
                keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:40:d6:94:75:97:76:05:7f:8b:2f:c1:dd:06:72:3c:a5:e3:
         4c:11:4d:a6:66:d3:e4:a4:12:2d:84:bc:cc:4f:db:ed:ef:b4:
         09:6c:a2:5f:48:5d:ee:34:20:8a:04:38:73:58:45:f0:4d:76:
         aa:a6:8e:d8:9a:11:9e:56:e0:03:fd:82:e7:ad:a9:91:75:29:
         29:d3:ac:60:d9:22:b2:a2:83:81:8a:fe:9e:de:6e:aa:8f:30:
         47:16:3f:9e:d7:58:6e:62:a9:dd:53:75:b2:cd:30:5c:53:d1:
         b3:fb:99:43:00:bb:58:6f:2a:d6:9b:77:7e:ca:0a:7a:fd:2b:
         b6:17:9a:6f:43:1c:a2:02:20:49:bd:31:5a:ab:61:5c:60:07:
         7d:8e:20:97:b2:6b:9d:10:aa:23:80:6d:e3:00:75:9f:1f:8f:
         15:66:2c:ba:e8:11:85:58:fd:f7:a4:83:0b:c8:8e:8f:4a:e0:
         f8:26:e3:62:ca:4a:49:9f:82:ed:a8:52:18:a4:55:a0:91:14:
         a0:ab:de:8b:15:66:5d:70:0c:de:6f:20:9e:22:af:28:06:7a:
         60:9d:c2:e7:c2:bc:25:ad:44:ee:c4:06:f6:47:f6:99:5f:3d:
         0c:0d:2c:d7:bc:07:d9:ca:0b:68:c1:9c:60:a3:4e:f6:ed:ec:
         3c:95:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net