Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File:                     MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier:          T/Cm15dKOGt61mPi7sq4PeAkyodIfK2Db7Mj90yRRCA=
Subject key identifier:   6A:51:86:B8:23:CD:2A:99:F3:B7:4F:72:BC:2F:F1:61:59:5A:F3:7F
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       217F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number:          2146
Signing time:             Mon 28 Apr 2025 16:02:13 +0000
Manifest this update:     Mon 28 Apr 2025 16:02:12 +0000
Manifest next update:     Mon 05 May 2025 16:02:12 +0000
Files and hashes:         1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: 7BrJwA2xg+c6J19eEAmovv8uwfTX09L5h5+zwWL5Xcg=)
                          2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=)
                          3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=)
                          4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=)
                          5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=)
                          6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8575 (0x217f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Apr 28 16:02:12 2025 GMT
            Not After : May  5 16:02:12 2025 GMT
        Subject: CN=680fa685-d9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:c9:b9:b8:61:99:cc:bf:24:72:9b:08:93:
                    45:d0:97:e1:17:84:9e:0f:2b:96:02:87:a9:45:94:
                    ff:2e:3f:cf:b4:b8:8d:eb:ad:cf:32:dc:31:0a:a3:
                    b1:a1:8e:6a:d3:db:95:62:e0:ea:ae:a4:49:a1:47:
                    95:cb:99:dd:74:9a:bb:7b:31:25:87:61:c6:9b:76:
                    fc:d3:9b:6e:28:b3:2b:57:8b:7e:91:62:86:21:8f:
                    ce:d1:5f:05:5d:cc:c5:c3:81:8c:b2:1c:f9:aa:8c:
                    d6:99:4e:80:54:0d:9b:85:7b:fd:cb:bc:22:f0:74:
                    df:23:4c:a6:d9:19:71:25:ce:51:6a:d3:96:6e:e8:
                    36:be:45:bd:d7:7e:d0:f6:10:b7:1a:ab:fb:b4:75:
                    76:1a:6c:57:a8:01:9b:ab:63:40:05:27:07:ab:18:
                    cb:89:5b:ae:a8:d9:3f:79:6c:7f:35:29:93:c2:4a:
                    55:c8:c2:64:73:73:16:3e:67:10:01:02:5d:46:d3:
                    1a:c3:24:43:82:04:9e:8a:35:a1:98:86:95:94:4f:
                    67:84:a7:9d:7a:1f:9b:52:a4:ab:35:62:a2:ce:d2:
                    bd:2b:4a:a2:af:96:56:fa:2b:5e:7e:10:61:54:d5:
                    5b:56:64:3d:54:ae:88:86:d4:c5:f8:ac:d1:bb:d1:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:51:86:B8:23:CD:2A:99:F3:B7:4F:72:BC:2F:F1:61:59:5A:F3:7F
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:28:0e:7f:fc:eb:d0:e2:b0:81:ae:71:44:b7:5d:29:79:
         4b:5a:9a:33:95:2e:02:0a:f9:ee:a0:0a:13:1a:83:7f:1e:b7:
         db:3e:55:dd:94:2a:40:1e:a4:14:20:36:d1:f0:a3:5f:08:ee:
         5f:47:c8:a8:3c:ac:06:73:91:af:f3:3d:a4:15:4e:0d:9d:6b:
         72:3e:8c:b2:b6:51:a8:c1:41:f2:17:45:90:15:d9:63:64:3b:
         24:e8:53:72:36:a6:88:89:48:ab:01:73:11:04:f4:96:0c:c6:
         93:85:6e:72:8e:29:e2:1f:59:cb:48:08:ef:fe:6c:3a:7a:d5:
         74:18:43:01:3e:ed:6b:da:81:c8:b3:93:98:bc:1f:83:31:b1:
         e2:f1:6b:f0:22:4a:f5:e8:a4:79:5c:36:22:e1:89:8e:bf:25:
         a7:30:4e:8d:4a:fb:bc:7d:78:fc:fe:a4:63:7d:b8:5b:eb:1d:
         e7:02:06:68:13:43:b7:b0:14:84:3b:ad:e2:31:62:0d:36:86:
         3d:42:8c:6c:19:fe:6e:b7:2c:51:61:3b:36:fa:31:f0:88:9e:
         9b:88:f0:52:6e:94:2c:aa:be:38:1a:32:85:72:04:ff:25:c1:
         6d:ac:14:67:32:be:11:90:10:a6:66:38:ef:49:86:cd:04:f7:
         f5:e5:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net