Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
File:                     7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json)
Hash identifier:          6ARiGXWwcy0CYUG87ikIGNPMAuqzEKA5zyYwKGL4XNA=
Subject key identifier:   B4:6D:45:C4:5C:4B:98:B8:C1:22:7F:C6:1D:18:13:2F:5C:69:24:AF
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Certificate issuer:       /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
Manifest number:          E6
Signing time:             Sun 27 Apr 2025 04:25:21 +0000
Manifest this update:     Sun 27 Apr 2025 04:25:21 +0000
Manifest next update:     Sun 04 May 2025 04:25:21 +0000
Files and hashes:         1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: POgFFBz0ZYn8q4zNHImXF/aK5xRMFCn5uT4COrpIubc=)
                          2: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=)
                          3: AC56C61497F811EF8D52DE75C4F9AE02.roa (hash: sHFvTnu8iiOhSTaoi08VnkboBzE+UHsLHvG1Rlt2ziw=)
                          4: DD3BD44A97F811EFA3214A76C4F9AE02.roa (hash: qmZEP9aC14nh+m/MAqOLG4I9jGYzcZX3SHvHLwpgPis=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl
                          rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
        Validity
            Not Before: Apr 27 04:25:21 2025 GMT
            Not After : May  4 04:25:21 2025 GMT
        Subject: CN=680db1b1-c4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:90:c5:2f:e0:36:0a:be:e9:dc:6b:ca:86:
                    c3:e2:2e:26:b1:e0:d5:8f:9a:5d:38:2c:a1:9e:8e:
                    51:9a:25:2c:c2:01:9d:22:62:6c:b8:8d:0c:39:d2:
                    ea:8a:5d:fd:f7:fd:43:0d:e1:2d:1e:d8:17:dc:22:
                    34:0d:11:3d:ec:f6:81:93:73:46:6f:39:03:c7:10:
                    ec:a7:1e:cd:fb:77:16:0f:52:3f:30:8b:f9:fb:36:
                    99:6c:0f:cd:31:c8:b0:46:af:c4:fc:9e:93:eb:59:
                    92:bd:3c:14:c9:64:c4:13:fa:46:6a:cd:21:ff:96:
                    6b:c8:eb:b0:07:07:2f:fb:0b:04:ef:98:05:b6:9c:
                    99:d9:5b:13:77:b9:88:e2:a1:c5:a9:e6:b7:50:87:
                    2a:d4:11:63:9c:d9:6c:81:af:7b:ee:5c:55:2d:46:
                    d1:68:70:e3:dd:dc:11:01:94:29:3a:8a:5b:de:83:
                    50:ac:87:e4:33:91:f9:7e:88:5f:eb:77:af:8a:c6:
                    60:2f:24:6f:db:1a:c3:59:53:b1:19:12:7e:bf:35:
                    8c:29:fc:e2:53:0b:39:a2:5e:65:b6:12:c8:41:1d:
                    f6:3c:d8:9d:31:f1:60:36:6a:97:f5:88:12:15:9a:
                    73:3f:b8:8d:04:65:ef:a6:a6:55:f9:49:2b:f5:19:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6D:45:C4:5C:4B:98:B8:C1:22:7F:C6:1D:18:13:2F:5C:69:24:AF
            X509v3 Authority Key Identifier:
                keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:f6:2d:56:12:b3:a1:39:84:35:6b:78:0a:c3:72:4d:8d:
         18:a0:59:0d:11:17:a0:ed:4f:82:7a:94:4c:1b:be:59:e0:de:
         fc:df:5e:d0:28:dd:b1:b7:c3:70:c5:86:20:56:5b:ae:41:fc:
         ae:8c:47:4d:eb:9c:56:c2:90:3c:5f:90:9b:79:bd:7c:21:53:
         3e:2c:e3:77:86:b8:7c:d9:c0:a4:92:a6:20:3a:95:3d:c0:f9:
         bb:15:a2:f4:87:70:1c:75:36:7a:eb:32:a4:e1:ff:bb:3d:cb:
         8c:b1:b1:50:a0:a6:60:17:e8:8c:32:a6:e6:b0:0b:af:fe:6a:
         5a:92:8f:c4:4c:11:34:4c:1c:9d:fb:dd:57:00:1c:46:60:0a:
         7b:b1:88:aa:da:58:a9:96:d8:59:34:a8:39:0a:4a:42:90:60:
         b8:1b:a9:1d:8b:77:ff:59:f4:df:8a:b1:f9:cd:fb:07:1a:1a:
         5c:d2:01:5a:b7:8f:a1:45:01:e0:69:90:3c:24:f7:ea:88:8c:
         82:5f:0b:83:94:71:95:14:8e:ec:24:66:49:c2:17:20:83:cb:
         1f:90:dd:f7:12:a9:fd:34:2e:95:ab:08:d2:a0:60:03:1d:37:
         2e:7a:7c:bb:75:ff:3d:58:ca:d9:d9:1a:d3:95:69:6c:b5:10:
         fd:99:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net