Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          2MczMT8U4u6t2VO9Hh3c7qwkkZMrWKUp125J1zZVcmE=
Subject key identifier:   B1:B1:9A:15:F7:FE:BA:C4:42:3D:5C:48:F8:81:E7:A6:31:07:83:64
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       0302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          02FB
Signing time:             Sun 27 Apr 2025 00:55:23 +0000
Manifest this update:     Sun 27 Apr 2025 00:55:22 +0000
Manifest next update:     Sun 04 May 2025 00:55:22 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: oP5w9oLcj5FzNcNcvtPNSYabgIp4RvuyoSADy5atNfc=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Apr 27 00:55:22 2025 GMT
            Not After : May  4 00:55:22 2025 GMT
        Subject: CN=680d807a-f1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:0d:67:40:6c:a1:bf:ad:57:33:e9:cf:e6:
                    c7:2c:6e:83:9f:38:80:1e:d5:84:af:03:80:f6:29:
                    c6:60:dc:a9:17:0e:6e:3a:0f:a0:06:46:b9:9e:b2:
                    cb:52:95:db:32:f0:c1:ee:7e:34:de:1f:ef:2a:74:
                    b2:89:91:49:ef:20:a4:14:73:95:05:90:7d:13:92:
                    30:fa:b5:29:f4:90:e6:60:47:3d:83:57:3b:56:68:
                    ea:f8:36:66:16:3a:67:4d:b5:20:6e:64:02:c5:a3:
                    a5:7d:58:14:76:7a:11:ae:51:87:f6:32:fe:52:d5:
                    97:51:ba:58:1f:7f:ab:2d:86:4a:da:0e:08:da:69:
                    9f:0f:f0:25:85:3d:6d:21:8f:db:80:5e:92:f7:8f:
                    79:6f:a4:06:e5:28:8b:de:87:51:81:a6:84:4e:57:
                    be:29:d6:e1:3f:0f:e0:f6:1e:46:d7:43:2e:73:06:
                    48:1c:6a:36:a3:49:4b:c3:d4:4c:de:a3:2a:dd:eb:
                    92:39:f9:30:62:a3:32:d1:08:05:d1:68:d4:12:4d:
                    19:77:29:6d:44:ce:8a:f5:b1:1e:89:89:6a:73:2e:
                    c8:f8:a8:c3:b7:b1:9a:56:50:31:27:40:fd:38:80:
                    cf:bb:c6:61:74:4a:67:2a:4c:8e:d5:34:28:f9:6a:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B1:9A:15:F7:FE:BA:C4:42:3D:5C:48:F8:81:E7:A6:31:07:83:64
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:88:55:ee:fa:be:3e:f7:dd:70:64:e0:25:5d:cb:2c:60:ac:
         22:93:96:5d:b9:bf:80:d4:f5:37:a8:73:cc:77:0b:32:10:b7:
         9d:1f:8f:40:94:f6:2f:fd:35:b5:21:f4:e0:b2:55:f5:f2:9b:
         12:47:04:88:01:93:4b:74:8d:c2:8c:dc:da:b8:e3:55:98:b0:
         74:25:55:33:ef:18:f9:bf:08:b4:ca:0c:7f:0e:80:4c:b0:a1:
         6f:ce:8d:bf:5c:02:55:ff:9b:25:88:02:8a:1e:a1:94:49:2f:
         c0:2f:ef:26:c7:73:07:86:79:6d:82:72:b5:11:90:9a:c1:54:
         41:cd:c8:34:00:16:d8:1f:54:a1:bf:b3:6c:da:a0:43:2d:bc:
         58:49:b5:cf:36:fc:27:28:4c:7f:74:34:b3:ef:88:ed:7b:51:
         47:1b:91:20:cb:54:ae:12:7b:95:8b:e9:1d:85:a3:08:2b:f7:
         84:a8:9f:c8:e7:7d:bc:30:ce:db:78:c4:b8:53:75:35:10:41:
         74:7c:36:fd:12:34:e5:67:26:93:da:f6:59:5d:9e:44:98:83:
         4a:b5:82:c6:16:15:56:1e:c5:83:2d:42:60:03:01:86:6a:cd:
         c3:6a:1b:6c:37:b3:3f:78:12:6d:20:61:6f:30:59:d2:f4:95:
         eb:f5:ab:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG
RjFEQjY2NzUwHhcNMjUwNDI3MDA1NTIyWhcNMjUwNTA0MDA1NTIyWjAYMRYwFAYD
VQQDEw02ODBkODA3YS1mMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzAANZ0Bsob+tVzPpz+bHLG6DnziAHtWErwOA9inGYNypFw5uOg+gBka5nrLL
UpXbMvDB7n403h/vKnSyiZFJ7yCkFHOVBZB9E5Iw+rUp9JDmYEc9g1c7Vmjq+DZm
FjpnTbUgbmQCxaOlfVgUdnoRrlGH9jL+UtWXUbpYH3+rLYZK2g4I2mmfD/AlhT1t
IY/bgF6S9495b6QG5SiL3odRgaaETle+KdbhPw/g9h5G10MucwZIHGo2o0lLw9RM
3qMq3euSOfkwYqMy0QgF0WjUEk0ZdyltRM6K9bEeiYlqcy7I+KjDt7GaVlAxJ0D9
OIDPu8ZhdEpnKkyO1TQo+Wp5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGxmhX3
/rrEQj1cSPiB56YxB4NkMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0
RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL
VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCniFXu+r4+991wZOAlXcssYKwik5Zdub+A1PU3qHPMdwsyELedH49A
lPYv/TW1IfTgslX18psSRwSIAZNLdI3CjNzauONVmLB0JVUz7xj5vwi0ygx/DoBM
sKFvzo2/XAJV/5sliAKKHqGUSS/AL+8mx3MHhnltgnK1EZCawVRBzcg0ABbYH1Sh
v7Ns2qBDLbxYSbXPNvwnKEx/dDSz74jte1FHG5Egy1SuEnuVi+kdhaMIK/eEqJ/I
5328MM7beMS4U3U1EEF0fDb9EjTlZyaT2vZZXZ5EmINKtYLGFhVWHsWDLUJgAwGG
as3DahtsN7M/eBJtIGFvMFnS9JXr9aun
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net