Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File:                     dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier:          y4Fq+wpFEXFNHLi36cHS7HGy9X1JE+G7HPCEB+YkoEM=
Subject key identifier:   C9:8F:07:C5:52:47:E3:29:46:B4:86:6F:50:EF:AE:53:A0:BC:44:D4
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer:       /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial:       033A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number:          0321
Signing time:             Sun 27 Apr 2025 00:52:32 +0000
Manifest this update:     Sun 27 Apr 2025 00:52:32 +0000
Manifest next update:     Sun 04 May 2025 00:52:32 +0000
Files and hashes:         1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: ACVfw4+ZMzp/kLKEGvhdKrMOX+XS7HA/XTJIiFuT+eA=)
                          2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: 6J/+qa4ndqIy2bgiH0rAtIyRGJ9+5Tg7hxefbddl5wU=)
                          3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: z1jWyE7wTAG+vUUdvi1jzxdBdVQ+/IwxY3FhiW3xUxE=)
                          4: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: 4bJR1ae0CXmv08R9QhnGSRGtLcQpBgDCwnqDFh7A4l0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
                          rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
        Validity
            Not Before: Apr 27 00:52:32 2025 GMT
            Not After : May  4 00:52:32 2025 GMT
        Subject: CN=680d7fd0-869f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:79:ab:81:b5:2a:60:ca:98:4b:8d:0f:9c:
                    1e:d8:98:a2:5b:5f:95:5e:1b:c0:8a:49:51:4e:07:
                    bb:67:42:86:cb:c9:2b:33:8c:ce:02:8a:b8:f2:0e:
                    1e:10:e6:96:3a:34:9a:ba:b3:ca:36:63:e1:b1:6f:
                    86:cd:8c:80:33:cf:16:f0:01:28:b2:64:c8:c5:84:
                    49:e9:7d:07:c3:80:ff:de:58:b8:36:7b:ab:df:b9:
                    9c:92:c4:2a:6e:22:cf:2a:50:c7:11:79:10:31:ed:
                    3d:51:c9:86:16:2a:28:d1:57:dc:0e:c5:6f:dd:18:
                    74:05:23:95:f3:ef:55:40:7b:05:78:5d:08:f4:99:
                    83:fa:97:ee:fd:c0:5b:34:d9:79:a4:e6:23:ff:0b:
                    99:82:8d:ac:31:08:35:2f:7c:e3:08:9f:ee:7f:80:
                    a8:dd:ad:ae:26:2f:fd:ea:fe:75:80:cb:06:a8:a7:
                    05:49:e9:bc:e5:87:b3:7e:6a:a2:bc:40:d7:c0:36:
                    3c:6f:b2:fb:a6:44:58:6c:16:b9:14:2b:a1:76:86:
                    fe:d1:c6:83:23:85:4c:b9:25:15:c0:ea:d0:c9:41:
                    39:cf:46:16:a4:ed:e4:fd:16:be:fa:4a:ed:3c:2c:
                    87:63:51:d9:66:aa:68:95:ee:29:3a:b5:cd:22:c3:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8F:07:C5:52:47:E3:29:46:B4:86:6F:50:EF:AE:53:A0:BC:44:D4
            X509v3 Authority Key Identifier:
                keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:9a:88:04:08:2d:72:cf:24:ee:57:f2:93:05:70:ef:8f:
         f5:4f:2e:4b:1f:cd:44:f6:2c:dd:21:ea:0a:be:39:5b:24:f2:
         29:82:04:a3:62:bc:68:33:38:51:e7:90:75:ea:62:ac:d9:a7:
         a2:34:09:85:31:f4:db:48:fa:46:95:f9:d9:de:9b:f3:a5:2d:
         9c:29:d2:0d:78:37:18:51:54:9b:28:63:60:23:78:4e:29:c2:
         ac:27:90:22:39:3b:70:85:e1:f1:a2:2d:01:a6:59:59:b0:ed:
         84:56:e5:39:40:56:a8:7c:3d:94:14:ef:5b:9d:e0:be:1b:e0:
         fe:8b:36:81:73:e6:af:d3:ce:80:ba:09:ac:46:71:bb:23:d2:
         64:9d:2c:06:c4:87:2b:78:12:6a:cd:fb:f5:0c:46:97:bd:ff:
         17:e6:3a:ff:9b:a3:12:3a:eb:fd:57:c4:7a:a2:1f:42:7a:22:
         04:80:fd:2e:02:1e:c4:df:36:66:ac:51:d7:0d:da:a6:93:b1:
         d6:3a:49:7e:83:9b:c7:35:88:a4:0b:7e:49:32:32:ea:e9:bb:
         43:01:a3:30:8c:7c:d4:94:bd:2b:e4:ff:19:95:33:cf:cf:03:
         fe:05:81:31:c1:41:9f:99:47:89:0e:10:01:b4:b2:70:c5:a3:
         ad:49:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net