Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          nKIxIJuLxzLxEE5OGFKXMzWJ7O/zncmq9NkNEmqsq7o=
Subject key identifier:   99:2E:55:A5:69:20:D5:7E:6A:12:3C:EA:DB:DE:5C:F0:E4:41:17:CB
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          064F
Signing time:             Sat 26 Apr 2025 22:11:15 +0000
Manifest this update:     Sat 26 Apr 2025 22:11:14 +0000
Manifest next update:     Sat 03 May 2025 22:11:14 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: rd20bmE+m3lBYSO9yVxvITsBh8LAj6vPLK/SKdbOPsw=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Apr 26 22:11:14 2025 GMT
            Not After : May  3 22:11:14 2025 GMT
        Subject: CN=680d5a03-3c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:ec:1a:2c:ea:25:57:8f:9c:ba:bb:c5:9d:
                    76:30:b1:36:30:e4:d4:cb:bb:44:58:f0:f4:89:c3:
                    34:90:0d:d9:c6:85:68:29:03:7a:e7:07:d5:06:8c:
                    f6:ca:91:29:29:91:73:42:65:61:5b:76:57:0c:9f:
                    da:98:3e:75:56:1c:5e:d7:15:1d:78:e1:0d:86:c7:
                    fa:d4:dc:98:12:a6:7d:d0:0b:9f:50:0c:a9:07:65:
                    f4:ed:21:00:da:ff:2f:25:d8:e8:ad:82:ef:ee:d3:
                    09:8e:36:01:e3:e0:04:42:90:55:d8:f1:bf:0b:73:
                    eb:b6:7f:70:ed:0e:85:fd:43:ac:9a:16:1c:08:e9:
                    ad:49:84:9d:1f:84:0c:e2:01:43:7d:c7:06:68:00:
                    84:3e:8f:ff:0b:78:a7:a0:94:10:40:3c:77:56:4e:
                    92:7a:10:ed:70:a4:04:21:8a:fa:ff:64:f0:2b:a5:
                    83:f1:02:33:a5:1e:0e:44:69:3a:76:9a:3f:25:01:
                    a0:e4:89:f7:67:99:76:73:c1:c6:c3:4b:c3:f0:e0:
                    f7:db:08:06:7d:01:c7:34:c9:ab:2e:e1:40:a6:67:
                    dc:52:a5:3b:e3:69:14:d2:3b:ba:08:89:21:ff:52:
                    35:5b:43:7b:6f:91:b9:e2:cc:f3:c7:96:f4:42:28:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2E:55:A5:69:20:D5:7E:6A:12:3C:EA:DB:DE:5C:F0:E4:41:17:CB
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:45:7c:f3:85:df:52:b1:4c:99:dd:9a:85:f6:8a:05:00:8e:
         fd:a3:60:4c:10:02:6c:26:09:a0:39:14:35:46:43:ad:65:b4:
         d8:f2:2a:23:ab:84:d2:9b:cf:35:91:1a:c7:67:d9:83:9b:03:
         a9:a1:32:4a:33:e5:52:44:00:22:4f:61:0f:62:df:d5:50:3a:
         b6:e6:98:03:c5:a7:0d:6c:22:fc:f4:eb:16:ac:17:0a:30:78:
         00:fb:8b:46:80:28:23:5c:86:26:c1:0f:e0:50:1c:4a:37:96:
         cd:18:37:24:e4:d1:57:5b:97:9c:bf:6c:1d:0f:61:be:84:71:
         6e:01:20:a8:6b:2c:d7:c2:d8:d2:c7:ff:a4:6c:73:c5:40:ca:
         e1:a3:78:87:e3:7d:9e:d9:da:c3:c5:ac:26:f7:7f:07:46:a3:
         23:31:4b:16:f7:94:66:f9:8f:4f:d4:e2:a3:3b:74:04:77:70:
         ee:ab:90:54:56:5d:9e:b9:de:d3:cb:22:5d:01:bb:c0:ab:c7:
         94:aa:7e:2d:83:b1:f6:87:74:ce:2a:a7:e2:46:55:b2:b5:2d:
         08:b2:b8:ec:0e:e5:0b:38:b4:68:62:b8:0a:0c:cc:48:25:07:
         8e:9f:4e:dd:fb:77:d7:73:7f:88:bc:fe:2f:23:5b:c6:02:c0:
         04:46:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net