Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
File:                     V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json)
Hash identifier:          Uf/5nWRET31LPcBzoN9pYkr3EUhUFe1DzXmM1wAJfak=
Subject key identifier:   3F:37:A9:A6:06:33:3E:F9:75:F5:E4:E2:1D:B5:FD:F6:0D:2B:3E:BF
Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Certificate issuer:       /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
Manifest number:          0887
Signing time:             Sat 26 Apr 2025 20:21:15 +0000
Manifest this update:     Sat 26 Apr 2025 20:21:14 +0000
Manifest next update:     Sat 03 May 2025 20:21:14 +0000
Files and hashes:         1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: in2ih08XSv5KVpeqnes2Zqxh1b23RsuJwdZPKdYUMbc=)
                          2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl
                          rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
        Validity
            Not Before: Apr 26 20:21:14 2025 GMT
            Not After : May  3 20:21:14 2025 GMT
        Subject: CN=680d403b-80da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:d8:79:29:64:3b:47:bf:fc:f4:34:18:77:
                    2b:aa:b9:87:6d:2d:98:d2:70:c7:6b:22:c3:2c:8a:
                    f7:07:03:32:f4:86:fd:c1:41:b5:5c:e2:f4:03:a0:
                    46:bc:80:9c:4a:d6:09:04:a2:39:03:4c:92:d1:99:
                    cb:bf:06:09:67:c5:26:19:3e:44:70:8e:1b:46:d1:
                    6d:42:b3:5c:61:8a:00:54:34:63:bc:3b:38:73:e1:
                    8b:03:07:2f:dc:8b:ba:72:e8:d8:69:77:14:72:a0:
                    30:f0:cb:78:39:5f:ec:eb:02:17:4d:af:1a:6e:9a:
                    e2:95:75:43:06:07:18:65:b5:9d:23:14:e1:72:88:
                    1c:d9:62:a8:48:1c:9e:9e:6c:cc:08:a9:4a:42:a8:
                    b5:ae:fd:61:41:d5:c4:1e:89:2d:6a:78:41:b5:63:
                    3c:7c:31:a7:59:d6:8c:ae:5d:16:60:db:d3:32:d0:
                    66:49:35:ca:6b:93:0b:5f:98:5f:ad:dd:47:57:4d:
                    c9:8b:ee:54:64:d0:39:d5:c6:ff:59:33:fd:d9:82:
                    07:ad:93:57:d1:eb:ff:4b:f8:a0:c8:f9:f2:c5:a0:
                    eb:75:5a:da:4c:40:b4:01:09:84:c8:11:b7:ef:30:
                    07:4d:8d:ef:ea:c9:6c:d3:47:87:bc:e0:b8:45:9c:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:A9:A6:06:33:3E:F9:75:F5:E4:E2:1D:B5:FD:F6:0D:2B:3E:BF
            X509v3 Authority Key Identifier:
                keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:c1:d5:a2:e1:57:08:7a:d4:8a:2b:c4:6f:0e:4a:e8:a1:
         f8:85:9b:da:3b:ae:f1:d3:80:3c:1d:b4:e0:71:b8:0c:86:fd:
         db:24:2b:45:b7:f5:f6:99:b1:d0:89:26:6b:b7:39:64:1a:20:
         d3:61:67:73:18:14:ba:fb:2b:98:9c:95:24:09:58:21:62:cb:
         22:96:6e:67:e5:97:a3:fb:3b:0a:0a:25:ef:ed:23:98:e8:3b:
         18:84:b9:d2:42:65:99:81:5b:5b:00:d5:87:d2:0e:8b:fc:1a:
         b4:9a:b7:9b:ce:0c:78:8c:7e:98:bb:7e:25:e7:8d:a4:37:56:
         9e:6d:c2:0d:96:51:7d:f8:58:bd:b9:c2:2a:9b:fe:4b:9f:8a:
         74:42:e7:55:f8:10:90:23:c1:c0:be:cc:5d:fc:c6:1e:f7:0f:
         05:c3:56:2b:a0:5d:12:75:20:89:3d:61:a6:f9:c3:cd:61:26:
         60:23:8d:6d:59:96:a3:10:1e:c3:d3:36:f1:3f:fb:c2:c9:b9:
         f8:45:7b:56:b2:52:c8:51:62:d1:fc:7c:c3:05:cd:f0:be:45:
         ae:92:14:09:dc:e3:f9:a5:53:2c:a0:da:a7:8f:93:bb:bf:65:
         24:03:96:fd:28:ce:77:7e:6e:44:8d:1f:7b:28:e8:e0:9f:1a:
         6e:13:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net