Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File:                     raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier:          Rgy5yLc6T1jyzg9uzM3uv9MgNcs49m0+lBQOGbQdp08=
Subject key identifier:   A8:18:AF:31:8A:30:D9:91:35:23:A5:91:6F:24:E1:FE:E9:A1:23:80
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer:       /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number:          013B
Signing time:             Sun 27 Apr 2025 03:20:21 +0000
Manifest this update:     Sun 27 Apr 2025 03:20:21 +0000
Manifest next update:     Sun 04 May 2025 03:20:21 +0000
Files and hashes:         1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: m+KNNYfdkQ/AVUWJ9lbloQ8nMPI256HklFfjuXMkNZ8=)
                          2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: tNlqnTYXK/FVcXJJVdKao/xTVsvmNPHSSjgb9yu5e3k=)
                          3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: hdZa/uU6R1KyL95TVJPIwe+LkDp1/9Z9cxgyNi7o3uo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
                          rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
        Validity
            Not Before: Apr 27 03:20:21 2025 GMT
            Not After : May  4 03:20:21 2025 GMT
        Subject: CN=680da275-4b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:d3:9d:54:79:28:49:a8:5d:35:e9:94:e8:
                    6b:c7:bd:12:ae:12:7d:f5:a4:1c:f0:fe:0c:44:15:
                    fd:49:27:79:8c:59:f3:ce:9e:88:9b:55:a1:1e:42:
                    78:cb:6c:7c:99:aa:3c:c0:fc:82:cd:3b:83:64:4a:
                    d0:a7:4e:48:a9:aa:43:39:a0:44:1e:5f:b3:3b:ce:
                    7b:86:fd:0a:b1:b3:d1:a7:d8:34:33:25:26:ce:5b:
                    31:bf:2d:fe:eb:9b:ca:f4:59:f8:b2:b6:04:a9:0c:
                    71:88:69:56:74:c5:a9:bc:5d:28:4f:5a:f5:5f:64:
                    b3:2c:05:1f:f4:5b:2b:f2:1a:f4:78:14:b9:aa:f4:
                    ea:83:a2:00:0e:04:06:b2:7f:2f:65:ed:7d:4b:a2:
                    d3:79:75:31:61:02:72:51:1f:f6:b6:a4:55:70:f3:
                    11:1a:c3:53:0d:db:45:58:6f:36:47:44:78:51:39:
                    09:26:c3:e6:fe:f2:7b:73:2e:96:32:b7:d5:ac:04:
                    d3:88:34:62:8f:b7:13:15:3c:d2:23:96:1c:09:a3:
                    2f:49:29:c3:34:4c:66:ba:ee:64:c1:37:3b:32:f6:
                    d6:7a:bc:93:fb:cf:8c:62:64:08:64:d0:cf:35:d0:
                    8a:68:a0:1c:c7:a8:2a:6b:76:f0:58:78:af:d0:5f:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:AF:31:8A:30:D9:91:35:23:A5:91:6F:24:E1:FE:E9:A1:23:80
            X509v3 Authority Key Identifier:
                keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:2f:4b:a8:ae:eb:f2:85:0d:dc:41:d1:28:b1:f2:9f:c5:fc:
         ac:dc:29:63:3f:e9:a7:63:39:46:a7:04:3d:a8:15:7f:aa:24:
         ed:15:b8:8d:cd:22:6d:71:5e:70:81:56:12:f5:e9:53:8b:67:
         9d:8c:c5:13:11:7d:6c:99:8a:cf:fd:a5:b9:92:01:2a:fd:06:
         05:88:88:c4:f7:c0:62:fd:f4:f4:f2:22:09:a0:1c:25:c4:78:
         86:a0:e2:43:b2:35:bd:bd:41:cc:ef:89:6d:a2:cc:65:58:82:
         95:01:83:cf:f3:01:8f:05:83:32:18:4a:a6:84:cd:b4:cc:35:
         f6:0c:78:2b:ab:29:b2:f0:83:29:a1:d4:9c:1c:a4:8f:aa:65:
         58:54:fd:a8:26:86:20:a0:54:ec:b1:6a:ee:ff:1a:e8:a2:05:
         c1:c4:8c:e4:60:de:f4:35:37:50:8a:1d:ff:2c:d4:45:af:47:
         4a:50:c6:24:93:40:a8:05:54:37:9d:19:5f:53:61:f6:31:ea:
         68:68:d1:8b:a7:c3:28:62:27:c1:1b:f9:95:fa:88:50:eb:4b:
         a4:73:b1:05:50:24:db:1e:44:ad:14:d4:35:1d:ad:55:17:db:
         01:b6:e0:4c:ee:69:dd:a7:8d:b8:1d:d0:84:d4:c1:02:3a:d2:
         41:eb:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net