Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File:                     lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier:          2ePb6xrr5C87hg0+HBM5L4GKo9NnnPasAwYOqsooUa8=
Subject key identifier:   DD:05:EF:B0:AE:81:70:40:08:9B:DB:38:77:F6:6F:2B:AE:77:83:05
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer:       /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number:          04
Signing time:             Sun 27 Apr 2025 07:01:51 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:50 +0000
Manifest next update:     Sun 04 May 2025 07:01:50 +0000
Files and hashes:         1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: H3KGLNAfumhPIlp/wcFeec3eAumwpZXqCuprwVhJlbs=)
                          2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: gGLpwNDKILKj8KiWuRMqmJ+fLEpRADmW87NfmWpK6sE=)
                          3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: Zrr0Zmh170T21y9iJRbERw6GVfqvG2/61KJESV309v8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
                          rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
        Validity
            Not Before: Apr 27 07:01:50 2025 GMT
            Not After : May  4 07:01:50 2025 GMT
        Subject: CN=680dd65e-4297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:28:ce:69:e9:bc:20:0f:22:ff:3f:ce:66:44:
                    cc:a8:20:f2:75:6b:6c:c7:d8:6e:7f:6a:81:ad:56:
                    9c:72:b4:fc:fb:06:31:af:d1:4d:82:c8:db:4d:49:
                    7b:96:7f:7a:59:6f:74:71:eb:d6:83:38:15:5b:bd:
                    22:df:5f:1b:c6:51:ab:5e:12:30:c9:e7:f8:7b:6f:
                    20:ae:51:44:ac:07:f4:7d:fb:b0:6b:0a:e6:7b:d6:
                    aa:93:db:91:08:ef:5e:6c:78:31:72:4e:30:3e:d6:
                    aa:58:8b:0b:aa:ca:b6:da:6d:ad:06:60:fd:54:87:
                    e5:c7:9d:37:a0:ae:dc:ff:92:15:93:dd:9b:af:e8:
                    72:9f:e9:46:97:8d:f2:88:25:60:ca:35:d7:cb:00:
                    42:27:b5:62:3f:2c:63:67:15:af:00:c2:b1:3f:c1:
                    34:53:f7:46:b9:71:db:be:4e:87:a5:fc:93:f1:4d:
                    c8:35:7d:50:3c:18:3f:ce:2a:82:e2:7d:7a:16:c1:
                    a4:6d:8c:91:b0:82:31:97:f5:9b:09:87:2f:01:46:
                    54:5d:01:05:ff:c7:90:ca:99:90:5d:4f:eb:ee:78:
                    8b:4e:0d:d4:ea:00:8a:dd:42:d4:7d:a1:c1:11:1c:
                    db:26:42:3c:ba:1e:0b:0d:31:74:93:6b:9b:ff:ba:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:05:EF:B0:AE:81:70:40:08:9B:DB:38:77:F6:6F:2B:AE:77:83:05
            X509v3 Authority Key Identifier:
                keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b8:55:04:fa:26:33:74:2c:38:49:62:7a:d0:d4:6f:d2:b0:
         1a:7a:03:86:fa:ad:64:8a:41:d8:ba:8d:4a:cf:ec:b7:6e:91:
         37:d2:ad:f2:be:58:57:05:42:b4:e0:20:76:6d:85:59:4d:de:
         b9:ac:47:98:c7:44:03:14:e9:51:2d:64:c7:01:cf:9b:68:89:
         30:76:e5:ef:2a:82:73:90:de:ab:cb:4a:5c:11:a6:63:54:8d:
         aa:63:ef:c6:f1:a8:32:d4:ff:f6:10:28:01:b5:05:18:45:38:
         8a:d2:7d:5e:a3:83:50:1b:19:70:96:79:30:4c:b0:ed:2a:37:
         23:4c:c9:50:8e:30:91:0c:e8:e9:3a:bd:24:a5:15:9b:ed:f9:
         75:e5:49:20:20:9d:ea:d4:bb:a4:90:54:fe:8b:2f:38:1e:19:
         1b:a1:3f:13:2e:84:f4:d8:55:f3:d1:2d:a3:ec:46:da:dd:ab:
         03:7c:0e:3b:9f:c2:49:ca:c3:eb:f2:03:db:4c:ed:11:80:74:
         68:68:57:67:f4:7a:37:a8:2b:5b:4e:84:ee:4c:76:bd:2b:12:
         ec:0b:d5:8c:4a:46:f8:03:54:db:2a:6c:19:a8:2b:8c:62:9f:
         16:9f:a9:0e:18:72:0f:1a:b9:d6:ed:46:16:e6:ee:7e:2d:c3:
         9a:96:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net