Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
File:                     MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json)
Hash identifier:          h2HTSJ75b3HrO6MeaYK886ZjL/1T5LCQteEE+EarX7c=
Subject key identifier:   A5:C1:85:D0:4E:20:DA:3E:CC:6C:59:43:6F:8B:88:59:16:ED:54:B9
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
Manifest number:          0363
Signing time:             Sun 27 Apr 2025 00:39:13 +0000
Manifest this update:     Sun 27 Apr 2025 00:39:12 +0000
Manifest next update:     Sun 04 May 2025 00:39:12 +0000
Files and hashes:         1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: NwmMZTiSoM/dJyLOaCicKGanRq8z+YUokABEwbZdGwM=)
                          2: 4FEED19CACA111EFBA21832EC4F9AE02.roa (hash: iZBr6WHmAOTLK0yOUzTixsp8SULKAXf3D3JtpGC1eBw=)
                          3: DD7E5CF29C3F11EFAB09C331C4F9AE02.roa (hash: 3MlVoyZinyCwKTl1//T9IkdR0ms/O99hruez1af7KEU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Apr 27 00:39:12 2025 GMT
            Not After : May  4 00:39:12 2025 GMT
        Subject: CN=680d7cb0-0211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:22:1b:47:17:4f:52:44:42:cc:ac:15:4e:
                    95:de:4a:37:15:61:40:4d:77:d1:fa:83:29:2b:ee:
                    d6:fa:0e:52:d8:eb:cd:3e:01:14:92:61:d2:a3:54:
                    b2:69:ad:ee:c5:c0:ea:27:ec:85:3a:74:8d:3d:44:
                    5b:29:e4:ff:06:c7:c4:13:b3:26:41:44:35:3e:ef:
                    82:41:6e:e2:2b:2c:c0:17:4d:8b:b8:85:e5:3a:79:
                    d6:5d:a9:6c:ec:f1:a6:91:cd:18:f3:a7:24:8a:16:
                    b8:45:8b:8e:c3:90:af:19:fa:57:3f:d3:ae:86:9c:
                    85:72:ac:ff:40:ae:fd:e8:6f:3d:97:de:b8:b1:55:
                    da:9a:82:a1:2e:6c:8f:89:8c:4e:1a:59:78:6c:4f:
                    f7:00:c6:f2:6d:9f:67:d9:f9:40:9f:92:06:e0:a7:
                    1c:cf:8e:03:84:0a:57:8c:34:4d:1a:58:6a:8d:17:
                    4c:63:d1:2d:14:1e:8f:24:b8:f4:7c:87:1e:b8:3a:
                    06:1b:51:37:0f:68:e5:f4:37:15:fd:c3:0f:22:b8:
                    9d:d9:a7:b0:04:e4:cc:dc:e4:1b:81:c8:95:7e:6e:
                    7e:48:e8:72:7a:5f:e2:c9:19:90:9e:06:d2:cc:78:
                    76:16:52:1a:40:a0:cc:f6:7b:2b:dd:d8:66:b9:22:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C1:85:D0:4E:20:DA:3E:CC:6C:59:43:6F:8B:88:59:16:ED:54:B9
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:b3:54:ec:1a:94:10:ae:38:65:70:10:53:b1:52:ae:1d:
         3c:ac:e5:ac:fb:30:99:f1:b0:06:11:21:66:74:31:e9:26:6a:
         20:27:f6:76:16:6d:e6:02:76:7a:f4:24:21:0b:0d:61:e2:64:
         23:52:d2:11:72:5d:48:c1:52:83:c5:22:ec:88:a3:a3:1a:83:
         c0:52:d8:59:82:d0:cf:65:38:e5:dd:a6:c2:18:b3:9b:81:51:
         1e:67:31:93:a8:5c:8b:bb:fe:f8:57:0d:11:6f:e9:fb:c5:f5:
         63:fd:ff:c2:a1:d4:35:22:9f:76:e4:1d:53:a8:6c:70:78:a3:
         3c:6f:1a:25:2d:0f:3a:61:42:1d:7e:e1:2d:0c:82:ef:3c:7b:
         51:4f:7e:63:91:63:cc:dd:45:ca:64:6c:21:9c:c3:d2:39:12:
         0a:d7:37:b4:c7:12:ad:05:48:41:f7:e0:52:fe:3c:5d:22:8c:
         6c:91:b9:e8:63:e0:c5:dd:2c:1a:c1:3a:ad:68:b0:43:7c:84:
         e4:60:75:3b:4f:bc:f3:ed:9d:aa:26:13:35:4f:22:be:08:79:
         72:ea:3c:f5:bb:b1:2c:23:3f:16:91:52:a9:bf:18:72:71:26:
         9d:65:43:07:4f:29:74:a8:0c:bc:db:e3:75:a1:cf:02:0e:40:
         d8:80:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net