Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          ndoGDROuOjNIxCFJmFOrBWFtzErQ64YBRpi8Dz6FXe0=
Subject key identifier:   D7:31:D4:1C:38:02:17:16:6B:8D:AF:36:8B:24:95:5A:B0:0F:1F:71
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          01B3
Signing time:             Sun 27 Apr 2025 02:15:18 +0000
Manifest this update:     Sun 27 Apr 2025 02:15:18 +0000
Manifest next update:     Sun 04 May 2025 02:15:18 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: OQilmFwA3bQbAW1PPhUCYFTfphjksCWVCuRn87ImRd0=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Apr 27 02:15:18 2025 GMT
            Not After : May  4 02:15:18 2025 GMT
        Subject: CN=680d9336-cd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:89:df:63:55:91:38:6b:69:fe:4d:1a:83:
                    e5:92:10:e1:87:dd:4f:d8:d2:81:be:3e:b5:97:c5:
                    f8:44:a8:0d:30:c5:15:49:e7:fa:1f:fb:e7:e9:48:
                    80:92:8a:5b:e7:30:9a:4c:df:46:7b:a7:4d:75:cf:
                    9d:6d:a9:07:cf:d5:81:95:dd:cf:c9:07:cb:f6:99:
                    be:24:43:32:7d:41:4c:dc:e0:d3:ab:09:83:cc:d8:
                    70:59:d5:b7:cf:a2:d2:67:ba:30:8e:d9:d3:f7:4f:
                    7f:35:5a:ff:7f:53:f4:63:01:14:a0:ae:a4:9c:22:
                    ce:58:61:74:88:5a:14:c0:36:17:a3:1f:88:ab:c9:
                    1b:e1:54:93:80:5e:85:ab:3b:04:83:4d:68:aa:4e:
                    09:46:44:03:18:f4:22:96:b3:c2:43:45:41:92:5e:
                    72:08:87:a3:f6:b7:72:4a:73:d4:ee:bc:65:b2:e7:
                    10:9d:9e:72:99:31:73:a3:0c:bb:99:97:61:a5:71:
                    b1:7b:85:e7:86:58:54:d8:45:9e:6e:cf:51:62:5d:
                    3e:05:b7:8c:49:49:b3:2a:2d:bf:51:b8:a2:5d:5f:
                    30:47:de:78:2d:e4:70:46:e5:be:65:10:e6:e7:74:
                    1a:37:80:29:48:cb:b1:ab:72:ad:93:f0:49:b2:f6:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:31:D4:1C:38:02:17:16:6B:8D:AF:36:8B:24:95:5A:B0:0F:1F:71
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:6d:95:60:f2:cd:75:84:75:84:15:f7:c8:6d:58:75:d8:
         47:9a:60:4f:f9:72:1d:11:02:69:77:86:e2:95:a9:ab:63:2c:
         9f:54:3c:a1:3c:d7:0d:d5:f9:46:2e:31:3a:ca:10:51:93:07:
         45:0d:c5:84:8b:f9:95:a2:71:87:51:8a:53:3f:92:86:01:75:
         f0:4d:5f:65:79:3e:6a:c4:92:42:76:7c:06:1b:d7:eb:43:9a:
         42:60:15:cc:a9:2a:43:aa:4e:a3:fb:bf:37:c5:1d:d2:af:6d:
         06:f7:9a:87:dd:c8:57:12:5d:be:0a:69:ed:98:03:64:35:24:
         d2:0e:f9:92:5c:f2:d1:17:de:cd:8b:34:24:b0:56:e1:bd:3d:
         85:03:a3:79:b2:a5:62:39:4e:ac:ff:0b:b6:39:c2:70:21:1b:
         9d:3e:f3:41:23:b3:0a:f7:6d:d7:63:44:8e:61:dc:9f:d3:79:
         75:e7:e6:d3:2d:d8:8e:26:eb:30:75:c4:9d:7b:4d:1f:cc:75:
         fb:ad:4b:d4:69:27:c7:80:e2:09:09:9d:70:4b:4e:17:af:f8:
         0c:12:ca:b6:80:d4:da:30:54:25:b6:7d:b0:89:d5:41:d9:4c:
         35:60:47:3c:b3:ef:fc:e2:f8:2b:73:9d:93:a0:b3:bf:ea:7d:
         7a:39:de:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net