Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
File:                     CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json)
Hash identifier:          gzgPIi2pDopIG1p03XS0NdSsPeh6wjLXm57Di+FxRis=
Subject key identifier:   20:8A:1D:CF:1B:E8:21:1E:F2:F3:D6:41:C2:DB:8F:8E:FE:1E:9E:44
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Certificate issuer:       /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
Manifest number:          0180
Signing time:             Sun 27 Apr 2025 02:39:56 +0000
Manifest this update:     Sun 27 Apr 2025 02:39:55 +0000
Manifest next update:     Sun 04 May 2025 02:39:55 +0000
Files and hashes:         1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: iid6SoZWOvoWitwyLTLgA/9wc10QfrIPbJ+yvD4F7TE=)
                          2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: L46j7D5JqRMEtMeerHLvKLCnSiPpfI4fJUlK6SBHvHs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
                          rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
        Validity
            Not Before: Apr 27 02:39:55 2025 GMT
            Not After : May  4 02:39:55 2025 GMT
        Subject: CN=680d98fb-12e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:1b:be:88:cc:3e:92:3a:03:55:6f:c1:5b:
                    26:45:ac:81:72:2d:98:86:0b:1c:33:5e:62:a2:a3:
                    d0:07:4e:12:85:91:b4:12:15:8b:ba:79:8e:6c:33:
                    63:57:d2:42:b1:db:7e:4a:be:27:6d:b4:86:af:ef:
                    b4:65:8c:f2:87:cd:70:6f:61:a4:19:67:c5:e2:9f:
                    3a:1e:8f:dd:e3:5b:39:21:54:45:ed:9b:e2:49:7f:
                    9e:52:b8:07:84:1a:dc:f7:bd:af:7c:34:17:7a:fc:
                    c3:2b:06:85:6a:95:d1:0b:56:c5:f7:4a:0f:cb:8f:
                    65:53:ed:c7:f7:3a:06:66:68:ad:e4:28:0d:bb:c3:
                    fb:5f:0e:fb:61:71:dd:a5:02:52:1f:39:cc:86:82:
                    2c:bb:b5:de:82:52:8d:08:1c:28:19:32:7a:b3:e9:
                    71:df:81:6c:c7:4f:cf:1d:9d:07:be:07:ca:78:e5:
                    45:81:ba:84:6e:de:45:ee:9d:99:90:38:98:8c:49:
                    27:19:8c:25:69:24:ec:a4:4c:43:83:6b:e0:f9:cc:
                    da:51:57:0d:e1:f2:f0:6f:8a:53:1b:9b:35:be:78:
                    ad:17:7d:6b:32:b7:cc:93:1e:21:63:45:ec:a6:7f:
                    4e:8a:5f:ba:1d:8d:7b:3e:90:40:d3:53:15:7a:71:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:1D:CF:1B:E8:21:1E:F2:F3:D6:41:C2:DB:8F:8E:FE:1E:9E:44
            X509v3 Authority Key Identifier:
                keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:4e:99:b4:f6:19:4c:0c:bd:a1:ae:88:34:86:be:60:2f:93:
         f0:99:a0:bf:0d:05:99:23:13:2e:74:61:df:97:c6:97:dc:44:
         77:78:3e:f3:f8:20:d9:b1:c5:71:fc:1d:6e:5e:1f:0c:67:2b:
         d4:17:eb:2b:a8:12:ad:90:69:03:b0:7d:30:51:46:dc:53:a1:
         12:3c:d3:94:0a:87:b2:d1:c0:f7:73:c6:83:64:58:83:5c:e6:
         a7:27:49:c6:f4:b7:6d:47:c8:50:2d:9f:8b:b6:1e:83:c3:e2:
         36:97:5b:a1:68:b5:10:cc:51:24:bf:a1:c8:25:bd:36:88:71:
         79:56:ff:95:51:b6:c8:64:af:5f:08:33:71:49:0f:7c:6e:9a:
         45:9a:ef:66:6e:36:9b:3b:0e:a5:07:92:a6:ab:4d:39:65:99:
         4b:d5:f7:fe:1b:3f:0f:ea:41:eb:3c:52:85:b2:bc:e8:aa:5b:
         7e:6b:ff:e6:be:ad:31:19:61:d9:7f:e6:f0:b9:d4:ec:71:76:
         ea:2f:e0:bc:25:9d:67:ee:8a:ca:44:99:63:27:41:ea:06:53:
         0c:59:35:e6:ec:0d:3d:4e:4d:dc:40:fc:a5:29:82:ab:45:98:
         ec:9f:d3:2c:a1:8a:19:08:be:11:33:73:fc:95:38:6e:7d:87:
         a9:c3:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net