Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File:                     MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier:          kemnr+ocgKx+yI26uqXLO8nV2daHZtnmXkagvyDluc8=
Subject key identifier:   AD:E4:47:6B:88:0C:9A:73:E3:0A:C5:02:7C:A1:DD:1C:BA:A5:91:64
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer:       /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number:          0669
Signing time:             Sat 26 Apr 2025 22:02:16 +0000
Manifest this update:     Sat 26 Apr 2025 22:02:15 +0000
Manifest next update:     Sat 03 May 2025 22:02:15 +0000
Files and hashes:         1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: 5vbzCkQc8XQMBr6iQmne8HmxImljPqYQIipQYT26Evk=)
                          2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=)
                          3: 204B342ECEF111ED9D71580AC4F9AE02.roa (hash: V/douCj4U7M/9Bt5a7qzsCzrgcxHQH1b+ixRaTUpN4M=)
                          4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
        Validity
            Not Before: Apr 26 22:02:15 2025 GMT
            Not After : May  3 22:02:15 2025 GMT
        Subject: CN=680d57e8-8a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:49:a6:ab:08:ac:78:94:4f:12:21:d8:89:
                    75:3b:ce:15:30:47:dc:83:aa:42:bf:ec:88:19:76:
                    06:76:ab:2c:eb:66:08:fe:d6:15:b5:8a:e4:2b:68:
                    cd:7f:b7:b2:1a:a4:ee:2e:84:1f:66:7d:c5:06:4d:
                    67:21:09:38:4a:2c:df:e3:f4:14:c2:a9:c7:f6:fc:
                    ac:98:c5:e7:17:5a:62:50:f6:18:88:07:ba:36:59:
                    81:9e:12:02:20:9d:9b:c5:fa:19:a0:87:28:c7:1f:
                    8f:74:93:53:9b:77:2e:1f:76:3a:b4:af:90:f0:59:
                    ac:85:3f:45:61:1f:88:54:4e:1b:2e:24:79:2f:ce:
                    d6:2e:0e:03:bb:ad:2f:75:a8:c5:22:2d:66:5b:bc:
                    50:db:32:1d:0a:1b:f2:9e:33:eb:ae:7e:75:58:12:
                    7e:9e:ce:5e:39:52:ce:6d:3a:f1:e2:45:4f:59:46:
                    5d:e6:7b:30:72:55:12:5f:a4:53:e8:c5:08:7d:27:
                    c5:cd:2d:23:b3:b7:d9:95:1f:c4:f4:52:0e:65:9d:
                    ed:5a:75:c1:c4:b1:c1:51:e2:f7:0f:46:57:35:2a:
                    5e:99:09:f4:5d:3a:fc:64:27:d0:37:31:7b:ba:d3:
                    d3:e4:92:64:16:a2:66:ef:98:ca:2e:7c:2e:42:ac:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E4:47:6B:88:0C:9A:73:E3:0A:C5:02:7C:A1:DD:1C:BA:A5:91:64
            X509v3 Authority Key Identifier:
                keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:37:a6:c4:08:56:0e:cb:42:81:8b:7f:e9:39:27:f4:53:
         54:b3:4f:c3:58:34:9b:04:49:43:29:fb:aa:8a:2d:0b:96:ed:
         4e:68:08:36:cc:ca:aa:d8:b2:82:88:51:90:da:9e:47:06:bc:
         94:f5:98:96:f5:45:27:f7:d3:d8:d4:2a:77:6e:ed:32:8f:55:
         b6:6f:e0:4c:44:18:0f:29:7a:4a:66:a5:b6:60:11:aa:c7:e9:
         64:28:8e:79:71:fa:34:dd:93:aa:e4:64:08:71:f9:cc:49:5e:
         c7:fc:45:db:28:7c:52:99:f6:44:2a:5c:41:46:70:41:7f:ba:
         2e:ab:4c:67:7c:87:c8:32:72:6c:2b:5c:4a:01:cf:f5:22:e5:
         36:86:fd:da:55:3a:d3:fa:d3:a9:5e:4a:2c:cd:fd:f5:86:e7:
         06:77:1c:80:22:ba:fd:fa:e8:69:17:ff:c2:d7:d2:24:d2:25:
         78:8c:bb:3a:34:9b:df:11:28:d7:c0:be:9c:1a:fc:f6:79:58:
         b9:c5:3b:a3:e4:a3:c3:a4:01:ff:53:9e:23:4d:7d:fb:f2:11:
         6b:03:2d:c0:c8:4d:db:a0:5c:1a:0c:94:5b:0a:68:f4:a3:45:
         cc:8d:76:c2:cb:34:51:ce:ea:83:26:66:4f:9c:f8:a0:1c:17:
         99:1b:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net