Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          LooYNeBX0CR1GjXiIoGYHlrH9KaHqw3BYIMj93w9NZc=
Subject key identifier:   E1:15:D7:E3:1B:04:24:80:42:27:16:E7:A8:50:F3:A2:8F:D6:9E:24
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       1872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          1840
Signing time:             Mon 28 Apr 2025 16:41:57 +0000
Manifest this update:     Mon 28 Apr 2025 16:41:57 +0000
Manifest next update:     Mon 05 May 2025 16:41:57 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: 92H1+kLboRTluWXTbF2bAj9TU8i1emPJmHwmp/ufD/M=)
                          2: 4EE90B48FFC211EC84726555C4F9AE02.roa (hash: 0Hk/JTzfSmJcP+g4AF1rCd/nSi8tK+tRLevIlcCpxuc=)
                          3: 8EF27886A20C11EDB188BD36C4F9AE02.roa (hash: RTd1gy6ZyYYTKEcSbAQaQ+DXLhKHMG+bXISIBRDublA=)
                          4: C6EB748CDE7911EDB5D88539C4F9AE02.roa (hash: fqb531+0yEI8UHFqrZYc/bXnwHc5QFyzq+zP+SK3xx8=)
                          5: 7B9B345895F711EBB7B18033C4F9AE02.roa (hash: CNF2bQbvx54fbqlbE6d9eIkZgGR9D+Dhe0VNtxI5HFs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6258 (0x1872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Apr 28 16:41:57 2025 GMT
            Not After : May  5 16:41:57 2025 GMT
        Subject: CN=680fafd5-dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:f5:b6:4e:86:4c:79:9b:4b:cb:9c:dd:01:
                    1e:1e:66:ac:5f:09:60:33:ce:d6:9c:c0:22:06:ba:
                    fb:6b:99:e5:ec:a4:c3:e4:e6:30:5c:af:80:85:43:
                    5c:1e:dd:9e:f7:cd:0a:26:96:d5:03:a8:59:65:98:
                    58:1c:77:65:be:7b:ee:c7:57:25:74:8c:10:6b:fb:
                    3a:ed:21:bc:ee:98:8c:25:32:38:39:fd:99:38:0f:
                    c7:fb:6b:78:77:e8:94:bb:8b:c4:92:30:1d:06:2d:
                    03:fe:e1:4c:dd:d9:8a:82:fd:6e:10:66:30:f2:fb:
                    4b:00:d2:3e:7c:06:f5:cf:55:d2:ee:63:f9:09:e8:
                    90:d0:6f:37:23:d0:34:53:a7:ee:94:d4:b8:94:43:
                    e0:76:79:ab:8b:93:03:62:f0:a2:be:d4:bb:72:de:
                    f1:c0:84:9e:5b:eb:dd:93:70:ee:25:c1:4c:1d:c6:
                    14:0b:d9:29:a3:29:cb:b7:94:76:84:c2:cb:bd:59:
                    71:ee:ec:d8:e8:ab:22:42:b7:3e:e7:13:2d:13:66:
                    7a:00:2a:29:12:e5:34:53:39:88:8f:2c:03:af:67:
                    bd:69:11:65:99:88:22:7b:22:3f:07:32:0c:83:42:
                    1e:df:33:7f:dd:e8:ee:48:f3:de:3c:97:df:07:50:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:15:D7:E3:1B:04:24:80:42:27:16:E7:A8:50:F3:A2:8F:D6:9E:24
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:8a:51:8c:fd:82:61:5f:46:9c:bc:97:b9:30:94:0d:50:
         6d:9c:46:61:4a:b8:23:a8:d2:55:6f:d7:05:18:98:b4:f0:7a:
         66:0b:34:b7:12:34:94:dd:4e:b2:bb:1c:ed:1a:95:69:f6:fa:
         e4:bf:28:6d:2c:29:f0:cb:e5:6e:91:3e:9a:a8:8f:70:ec:69:
         57:b1:c8:b9:dd:67:9c:ac:1c:07:ed:c3:97:e2:9b:d9:e6:e4:
         2d:26:96:52:ba:0e:1f:1d:a0:f7:7a:43:22:7b:69:f7:99:57:
         1b:05:8a:a9:54:87:cf:d4:3b:83:35:7b:a5:6e:15:3b:46:2a:
         2b:18:27:0a:a5:13:0f:8f:d0:66:37:6e:2b:2d:ae:04:21:02:
         27:8a:15:fa:cd:59:47:81:c1:24:11:34:7a:ad:17:1d:67:af:
         36:71:ff:c6:77:de:d9:77:95:f9:02:00:ea:d7:57:7f:a9:9f:
         84:a4:0a:ae:ca:c7:95:be:b8:d1:c6:37:14:9a:6f:6c:3a:ab:
         87:f5:e4:f8:6d:40:67:8e:0e:f6:53:35:9d:ca:2d:2b:67:be:
         44:01:65:21:45:fa:7a:b5:c0:8d:e7:a9:a9:7d:e7:db:e4:88:
         21:b8:92:22:bc:e4:58:0e:92:9a:9e:e0:35:95:76:95:eb:f1:
         d1:e2:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:58 2025 by rpki-client on console.sobornost.net