Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File:                     pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier:          kJqK/zud23P3gukqg1HpLAzDwxyeAHLF91hsu4E5/4c=
Subject key identifier:   9F:87:CB:53:E8:EE:4D:3B:82:FD:E5:11:56:AB:BD:9E:C9:56:74:66
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0B15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number:          0AFC
Signing time:             Mon 28 Apr 2025 19:38:47 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:47 +0000
Manifest next update:     Mon 05 May 2025 19:38:47 +0000
Files and hashes:         1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: FMixPta/SpL11eNLcwQmKOoFfsrQ2oCoaWWLQXdeP1Y=)
                          2: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: kAEm2WFpYIisPCftKyEXxKhu0hS2+BcjtungfPYt95c=)
                          3: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: umPCabuFpTPDMInKvqsH9W1SkpQzrGCncoy1HWxBZSE=)
                          4: B6B70B6AB04E11EE91ED6854C4F9AE02.roa (hash: lqUwBU6qLo8LNgZrXqfbLxcdXoYoKZ77/+ziECt9CZk=)
                          5: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 7AbLEGTUte7i/32jHb/3xF5+Xhl8HDSf/wM/vLR6e8Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Apr 28 19:38:47 2025 GMT
            Not After : May  5 19:38:47 2025 GMT
        Subject: CN=680fd947-3e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:a1:27:84:9e:0e:33:47:5e:5c:93:98:96:
                    7c:6a:a8:49:18:83:cc:5a:d3:a1:93:3a:24:a0:2a:
                    f0:5f:ba:e2:ce:b9:70:14:d8:73:14:39:e7:e5:cb:
                    e2:d6:b4:84:18:84:62:68:f9:8d:19:52:11:89:30:
                    41:c2:b3:93:54:a0:1e:a5:c6:50:75:8e:45:3f:dc:
                    eb:3e:46:89:4a:c3:61:81:79:b1:ca:76:96:5d:2f:
                    1a:a8:9c:f3:fa:6d:4f:97:fc:e0:10:c3:f2:18:89:
                    d3:d8:af:ab:86:9c:05:aa:52:ba:32:95:6b:d9:4b:
                    e6:e6:8e:4c:fb:0c:94:c9:62:bd:ef:e0:8c:dd:74:
                    ee:ab:67:cb:6f:6e:d2:8f:da:53:35:62:54:2e:19:
                    d3:c1:81:3d:c5:24:89:35:a8:bd:93:fe:e6:7d:52:
                    70:86:b9:ed:06:1f:72:79:a5:24:12:19:dd:7c:f1:
                    13:65:2c:23:ae:86:45:30:5b:6e:2f:52:12:f3:24:
                    b1:13:34:96:7b:93:66:16:11:c8:38:ce:8f:31:fe:
                    f0:27:ee:59:a8:6d:86:c7:59:c2:e3:42:c6:d0:d1:
                    3a:81:74:0a:bc:57:d5:70:5d:ca:b2:48:fb:cd:aa:
                    c3:5b:cd:b2:9a:f3:07:b8:0b:c8:41:23:8f:76:94:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:CB:53:E8:EE:4D:3B:82:FD:E5:11:56:AB:BD:9E:C9:56:74:66
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:29:4d:dd:7a:da:a5:a6:e4:c6:20:51:5a:18:77:8a:62:d6:
         42:63:40:4b:98:a3:8f:a4:a2:9e:db:51:15:0b:c9:9e:e5:50:
         b8:e2:08:5c:14:e1:ea:30:85:80:41:85:9b:c2:29:74:ef:6d:
         4a:c0:71:0c:fb:e8:2a:ab:d3:04:30:3b:f0:9d:cd:f3:df:e8:
         b2:ad:6e:65:88:9c:69:cb:15:b4:6c:6a:3b:1f:0d:02:62:cf:
         9b:c1:f2:e7:46:8d:f1:e5:11:4a:b1:80:29:16:49:38:87:9c:
         86:c1:5f:1b:a3:66:ad:67:a0:94:f1:09:8b:4d:96:6d:cf:18:
         64:0a:40:e0:82:23:2e:02:59:63:16:96:d4:0f:fe:f9:2d:e0:
         2d:0c:6e:1d:c5:dd:ce:bc:a5:0e:26:c0:5d:6b:88:65:7f:56:
         2a:2b:2b:5b:d7:7f:6e:01:d7:b0:e8:31:78:50:f2:62:f5:a1:
         f0:8c:b8:e4:9d:a6:34:de:0c:eb:e8:6f:e3:2b:fb:3e:8b:86:
         0c:07:4a:42:ae:30:0e:16:67:a7:17:91:35:33:55:f9:e6:07:
         b7:b2:44:57:cc:7f:91:2a:2e:fa:c7:50:85:3a:da:09:e0:3b:
         21:27:7c:4c:66:ba:f3:80:32:f7:9b:1f:8a:cf:de:43:fc:6a:
         34:6d:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:58 2025 by rpki-client on console.sobornost.net