Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          UXRCUQ+9Ux/GAOoqSbr4faZ+DPpm/cRQx8C+p+JdxLo=
Subject key identifier:   67:CA:E5:EF:68:F6:D2:E6:43:23:81:04:30:F6:12:EC:84:06:FB:B9
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          0116
Signing time:             Sun 27 Apr 2025 03:50:37 +0000
Manifest this update:     Sun 27 Apr 2025 03:50:36 +0000
Manifest next update:     Sun 04 May 2025 03:50:36 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: 7CJXcDvM2L1ZPVUk1VunbQIA8q+fn6wp7qE++Tr4bc4=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Apr 27 03:50:36 2025 GMT
            Not After : May  4 03:50:36 2025 GMT
        Subject: CN=680da98c-3b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:d7:95:06:67:0f:7f:f6:6d:4a:e0:b0:61:
                    6c:77:83:cc:f9:9d:7d:ff:08:37:44:3d:d2:a7:54:
                    26:49:89:0a:ac:bd:77:76:82:6c:55:70:0a:cb:63:
                    54:c8:f4:8e:3e:26:3c:0e:ad:ec:8c:74:c0:ab:24:
                    e7:19:37:22:6b:d1:70:c3:0e:c1:9d:7f:a3:d7:c9:
                    b2:d5:6f:b2:19:94:68:28:d0:6b:43:24:fc:d4:66:
                    e8:42:37:e5:d8:30:3f:31:63:1a:8f:32:24:60:4a:
                    5f:02:c6:f7:59:f6:d5:37:3b:91:5e:cd:9c:c6:c4:
                    3e:52:52:52:02:b4:ef:14:ee:b2:51:bb:c2:f9:23:
                    05:22:76:cc:f3:ec:08:b1:25:12:ff:40:03:c3:cd:
                    e2:71:30:f9:4d:40:82:ce:96:0d:b0:d1:48:5e:9b:
                    8b:9f:af:71:82:80:08:de:12:01:0c:4a:83:58:e6:
                    d3:9c:84:86:3f:b5:f9:48:a7:0a:88:df:c3:5e:eb:
                    3e:95:54:f5:fa:86:33:15:c1:ab:92:bb:89:8a:23:
                    9d:15:42:2a:d3:d1:c7:ee:0e:fb:5c:00:9f:75:45:
                    b7:8b:a6:c5:5f:de:85:70:5a:32:80:0d:50:d1:4b:
                    86:14:15:7e:f0:ed:5a:e0:12:e2:9d:66:77:f9:9e:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:E5:EF:68:F6:D2:E6:43:23:81:04:30:F6:12:EC:84:06:FB:B9
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:15:ca:b3:3d:c3:01:24:86:bc:d8:a8:6a:44:0b:99:bc:
         92:37:4c:ca:54:56:2a:21:44:00:9b:1f:b0:ae:8c:42:34:9e:
         0d:58:e2:03:70:cb:f3:67:81:6e:9e:3c:46:de:fc:c5:8b:b9:
         9f:e9:28:1e:75:5b:c9:08:4c:ae:10:e7:0d:11:4b:19:2d:2f:
         41:59:a1:9b:cf:af:a5:51:13:ab:ec:5a:d0:be:df:0c:ad:83:
         9f:e2:78:85:0e:55:f7:8b:74:d1:0e:ec:03:40:5d:f0:16:5d:
         38:32:cb:cc:8e:4f:10:18:ad:43:c1:85:a7:1f:55:50:c7:1b:
         30:41:55:ef:03:6f:bc:d7:54:b2:17:d8:1c:a3:68:4b:cc:ca:
         50:41:79:fe:18:0a:49:fe:d7:0d:88:89:9a:12:b0:19:6c:ee:
         15:72:a6:e3:50:9c:cd:6b:12:d4:10:c7:97:62:69:ba:13:67:
         ec:96:9c:aa:24:b0:a0:e0:2f:ee:eb:b7:d8:bb:f9:a0:eb:88:
         44:f1:d4:ca:37:07:44:a0:56:82:21:56:c9:e3:80:26:c4:e3:
         5b:32:86:aa:20:15:ea:08:5b:e6:ed:d5:2b:36:3c:9c:81:09:
         86:59:ca:18:28:7d:ed:78:3e:d9:bf:1d:ac:e3:57:df:8d:dc:
         b8:64:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net