Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File:                     mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier:          +VqQ1VhPgyX3YuXrKatweDaU1D4HVT+c1fCzXe1S68U=
Subject key identifier:   03:F9:AF:FE:26:93:40:BE:F1:7C:B1:C9:C6:53:12:A9:EE:C5:5D:55
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer:       /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number:          0818
Signing time:             Sat 26 Apr 2025 20:35:00 +0000
Manifest this update:     Sat 26 Apr 2025 20:34:59 +0000
Manifest next update:     Sat 03 May 2025 20:34:59 +0000
Files and hashes:         1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: gCfecRj21thTiCVv+FE5bZ0gmvtQvWYB/WjVg8BGJPc=)
                          2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: OISPqX+sjE+FviBwbW316CZ6fba2RRqY67rA1yB66hs=)
                          3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 7eZAVrRcBGBKFlQHZK9vBEWzwyr7ij0OTTCgEmnjTCo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
        Validity
            Not Before: Apr 26 20:34:59 2025 GMT
            Not After : May  3 20:34:59 2025 GMT
        Subject: CN=680d4373-2b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9a:dd:fb:66:7e:28:e1:fa:63:ed:8e:0e:0d:
                    14:b1:69:fb:18:c8:c5:4d:64:9c:44:67:ea:c8:d0:
                    14:8d:9b:44:f3:94:75:a2:0e:15:ee:59:00:e9:d8:
                    11:7c:71:e0:d2:b7:e0:d6:ad:97:b1:f0:f6:1b:b3:
                    27:28:b1:f8:22:c9:fe:67:7e:f1:7c:5a:e1:69:00:
                    3d:34:c2:65:81:75:3e:c8:02:ee:bb:a8:8f:ca:9c:
                    3f:02:09:45:c7:56:3b:ba:53:e3:0f:63:7c:05:34:
                    2c:44:ad:99:39:92:e0:dc:4b:9a:88:42:90:13:b4:
                    c1:e5:13:7e:93:be:85:0f:90:8a:db:ca:d2:c6:58:
                    26:2b:a6:e3:89:97:32:f0:e2:90:97:8f:6a:ce:4d:
                    1c:36:f7:74:7e:25:68:eb:22:ec:de:ba:ff:2a:78:
                    11:ad:26:0c:79:e8:9c:3c:cb:c3:b9:92:c7:4e:43:
                    1d:70:a2:5d:3a:4f:a0:7b:12:d9:4c:95:56:3f:e5:
                    bf:e1:6e:8a:7c:f6:4b:ad:9e:a8:51:da:bc:11:94:
                    f7:3c:2d:87:eb:a1:1e:cd:dd:f6:16:ba:12:95:70:
                    16:65:11:24:a7:1c:b8:6b:a7:01:e6:16:8f:98:22:
                    c8:d8:be:6a:fd:7b:3f:4f:79:b0:a0:06:04:69:81:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:AF:FE:26:93:40:BE:F1:7C:B1:C9:C6:53:12:A9:EE:C5:5D:55
            X509v3 Authority Key Identifier:
                keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:52:d5:9a:3c:32:ef:6a:4f:29:dc:5b:27:3a:f7:fc:45:40:
         a7:e2:2e:6b:5c:3b:e4:d3:6c:c9:48:f2:33:49:d8:c9:7b:3f:
         5b:58:1f:54:b2:47:d7:b4:5d:f9:8a:09:58:ee:1e:5b:ee:89:
         fd:ec:bf:4b:22:0b:91:f8:df:93:5b:b7:75:0a:6d:df:d5:d5:
         ae:1a:e6:eb:ee:77:df:50:be:ce:ef:7e:27:57:33:e1:60:fe:
         db:52:b6:dc:c3:ee:9b:72:d9:08:dd:83:3c:de:fb:bd:2b:73:
         65:57:95:5f:e9:a2:4a:f4:dd:a2:d7:14:c3:ff:59:3c:d6:bf:
         a8:2e:4a:f7:54:26:ce:44:e5:da:1f:bd:82:a5:39:74:3c:c9:
         45:75:78:17:b3:e7:ae:48:33:ab:7e:6a:ab:6b:44:c9:31:d9:
         a1:81:d2:6a:15:20:7f:6c:16:61:d0:a9:63:54:a9:10:91:38:
         1b:06:44:bc:cd:a4:2e:81:f9:0a:46:dd:d5:6e:5e:ea:1c:d4:
         be:b6:6c:06:0d:ae:ff:35:be:e9:df:25:b2:65:a1:42:ac:d7:
         6b:96:c2:00:94:0f:48:80:8f:4b:c3:3a:26:a0:ce:5e:2a:b0:
         97:c4:bf:53:49:57:fb:48:0c:d1:65:83:13:f5:97:c0:ab:17:
         d2:54:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net