Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
File:                     SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json)
Hash identifier:          dJDiQqbR3v15RQNJ2lRBy9YyEkGLmkRBHEIKMcgz5Gg=
Subject key identifier:   93:DB:3D:8D:B6:69:47:C7:9D:26:0B:01:8F:30:7B:66:98:6D:79:B1
Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52
Certificate issuer:       /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
Certificate serial:       05CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
Manifest number:          05C3
Signing time:             Sat 26 Apr 2025 22:45:31 +0000
Manifest this update:     Sat 26 Apr 2025 22:45:30 +0000
Manifest next update:     Sat 03 May 2025 22:45:30 +0000
Files and hashes:         1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: hpWASOlSvHcOpPnScBwtdW3pdjMZB37IXS3UQ9DeaGk=)
                          2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl
                          rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
        Validity
            Not Before: Apr 26 22:45:30 2025 GMT
            Not After : May  3 22:45:30 2025 GMT
        Subject: CN=680d620b-94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:f5:4c:d3:97:48:93:2e:02:b8:39:10:c7:
                    32:55:2e:01:3b:39:0c:90:73:fd:65:85:c7:db:e3:
                    66:c7:f1:8a:14:ad:a8:6c:01:43:d9:b3:12:02:cd:
                    87:fb:07:21:3f:4d:9c:be:ea:6c:9b:b2:69:c2:48:
                    4d:1b:44:73:09:81:bc:d9:f5:f6:57:63:cf:af:fa:
                    3f:6b:16:f8:a8:87:e2:03:9f:de:d6:40:9b:5e:fe:
                    9d:80:2a:8f:07:a3:d6:a2:b3:4e:02:49:61:50:12:
                    da:93:09:f0:d2:fd:11:9c:e3:88:6a:ae:06:e3:3e:
                    ff:b8:28:30:1d:44:d4:45:00:0e:3b:ff:99:c7:34:
                    a4:3f:48:a4:ea:5a:35:fc:bc:87:23:0a:aa:72:41:
                    e5:34:40:01:57:30:f1:30:66:21:55:52:42:a9:4a:
                    46:85:62:ae:45:19:90:0d:15:a3:6f:f6:54:40:a0:
                    97:c8:af:b6:3c:76:99:ff:9f:34:d8:67:61:25:95:
                    a0:39:1c:33:d2:4d:ea:63:4e:aa:b8:ac:21:47:07:
                    61:ef:e0:ba:6a:a8:b6:00:aa:ad:8b:7c:20:be:85:
                    c3:a9:94:42:07:b4:3b:1e:ae:1f:9c:f8:f3:ac:1d:
                    d0:6e:b4:68:c5:79:58:e6:dc:13:bc:12:28:db:fa:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DB:3D:8D:B6:69:47:C7:9D:26:0B:01:8F:30:7B:66:98:6D:79:B1
            X509v3 Authority Key Identifier:
                keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:e9:34:30:28:f7:fa:a9:ac:bd:50:90:7e:73:47:4e:19:
         87:e4:71:15:af:73:70:63:6b:60:08:ed:6c:bb:89:ff:f2:68:
         8e:a9:fa:4d:15:38:7a:fe:c3:98:6c:96:fc:a6:72:fb:5f:32:
         e1:79:7b:0a:46:04:fb:bd:e8:18:9e:f0:24:d5:1a:83:1d:d1:
         dd:d7:06:2a:73:64:22:88:5a:04:64:aa:d0:d8:43:b6:13:93:
         b0:f3:72:54:82:87:a3:f4:d7:57:c7:cf:a2:37:18:62:cf:6f:
         c6:4e:17:60:3e:f2:9d:2d:cc:e9:e3:bb:c8:7d:84:d3:71:45:
         c8:c6:ce:e5:49:db:e9:08:48:e1:a1:34:d0:37:6c:fe:f1:15:
         40:9c:8e:41:aa:19:6a:58:a7:5b:6f:b1:0d:e7:71:a7:2e:52:
         66:7b:7f:ba:4b:86:e5:64:67:c3:53:94:7a:2b:99:fa:e1:1c:
         ed:af:53:d8:86:27:5b:a7:6a:94:4a:3b:09:c9:37:64:08:4c:
         bc:c7:fc:0c:7b:64:8f:74:c4:6f:7b:36:10:32:01:35:76:0a:
         57:6e:42:3f:51:1e:f0:6c:28:50:a5:d6:1c:84:f1:21:34:95:
         45:e3:96:02:0b:cf:83:47:35:62:3a:ae:88:ce:14:d9:2a:ee:
         f6:e0:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net