Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File:                     oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier:          PAPGwlVkFOkJWylxdUCRbhlnTe5yTZWjTseS7y7XCwU=
Subject key identifier:   E5:9C:4C:D9:19:B1:AD:73:C7:50:F7:BC:43:ED:53:97:14:51:B2:AF
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       03B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number:          039F
Signing time:             Fri 25 Apr 2025 00:33:32 +0000
Manifest this update:     Fri 25 Apr 2025 00:33:32 +0000
Manifest next update:     Fri 02 May 2025 00:33:32 +0000
Files and hashes:         1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: kil46TWlsPPpJxdzduM4FJ0qdmDSD+eHdAl+z+ukUaU=)
                          2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: PFHGyRpc2XbCpMP3oZwcoRFS7cS4eDGCTFH+DmvXr+c=)
                          3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: dmwskcX+7K87R4MLVSKhbA64Ib5h40ZpO651aHbL2xA=)
                          4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: 8Wa5zRD8JBVDnPrtDrMM10W+ePzBdP7fVD0dPyvthC0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
                          rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: Apr 25 00:33:32 2025 GMT
            Not After : May  2 00:33:32 2025 GMT
        Subject: CN=680ad85c-becb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:ad:64:c8:75:f4:9d:95:d3:a0:00:4d:c0:
                    e5:f1:29:a1:bc:d9:a3:be:2a:a5:df:fd:6d:9d:f5:
                    b1:f4:f1:a3:bb:9e:1f:b9:25:58:6c:95:fc:31:3a:
                    09:13:7d:d6:30:ae:76:23:15:fe:35:57:e0:a1:68:
                    e1:bd:79:9f:16:ce:2c:90:bb:8e:8a:26:e7:d4:ea:
                    9f:72:8f:89:73:9a:85:9d:e5:ee:ec:78:73:75:72:
                    9b:72:ab:fe:0f:04:ae:56:77:29:17:34:c6:a1:d9:
                    10:62:08:a3:3b:f5:9b:ee:b9:77:06:24:07:cd:8e:
                    0e:2e:3c:d9:d0:5a:95:ff:40:80:1b:16:03:2d:8d:
                    5e:a8:ba:7d:1b:b2:6c:bc:22:dd:4c:8e:5d:57:d1:
                    63:f3:3f:02:95:be:e9:e3:2b:89:d8:54:4e:d6:c5:
                    6e:84:e7:87:bb:31:58:35:d2:12:6f:2a:97:cc:0c:
                    36:03:17:a6:c5:16:a7:01:e4:4a:d2:c2:16:20:55:
                    a7:f1:ab:7c:e7:b9:e8:00:8a:c6:bf:e6:78:22:65:
                    6f:0f:8d:96:8e:fe:7b:ee:0b:fd:2f:45:85:68:33:
                    c7:54:fe:7e:20:c0:b1:ae:42:4f:13:0c:38:a8:e4:
                    d9:ff:98:9a:e4:66:64:2c:c7:25:1a:d7:4b:bb:67:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9C:4C:D9:19:B1:AD:73:C7:50:F7:BC:43:ED:53:97:14:51:B2:AF
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cf:27:95:b8:5b:36:bf:87:fa:56:f6:c3:eb:42:67:2d:e3:
         90:9b:5b:ff:bd:60:ab:58:f6:84:22:4f:99:af:2f:7d:25:f3:
         c2:c5:2d:1e:78:6d:65:05:2b:e1:8f:29:72:f2:47:9f:8a:49:
         cf:bf:19:38:d8:0e:14:1d:72:c1:65:09:0a:db:b0:26:bd:67:
         35:76:09:15:7f:d2:6b:6f:4e:e0:31:43:30:2d:78:89:ad:ba:
         bc:7a:aa:ad:71:20:6f:48:d2:1c:a3:21:c8:3a:4f:fb:78:86:
         b5:d3:e7:2d:e3:84:8f:95:e7:e3:27:ae:ff:58:80:1c:71:ae:
         50:63:dd:bd:42:72:53:8c:c9:ad:f4:81:0a:01:c0:ec:58:23:
         d7:f7:c1:26:51:56:73:6a:c5:dd:2f:c3:00:50:93:f5:20:bd:
         39:e9:01:0a:8e:07:cc:0c:48:2c:5b:89:66:29:a3:80:7c:f4:
         93:ce:88:18:ec:b2:56:3f:ed:6d:24:d0:f3:a3:bf:c9:cc:9d:
         44:05:3c:2f:50:44:fe:10:4d:2c:a4:85:eb:79:93:1c:03:8f:
         2b:e0:c3:24:93:45:4d:a0:66:5a:f5:fa:73:c7:85:dc:21:26:
         ad:e0:66:66:04:41:2e:70:d2:0e:28:55:e4:f1:53:b2:95:9c:
         68:af:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:13 2025 by rpki-client on console.sobornost.net