Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
File:                     6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json)
Hash identifier:          Oe5PEhKak9skXS5K/FU6xhLRNAfoQBvFEcmZUc97880=
Subject key identifier:   65:3E:AC:41:43:C4:34:57:8C:61:CF:A3:FA:75:58:35:64:16:EB:8D
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Certificate issuer:       /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
Manifest number:          0592
Signing time:             Sat 26 Apr 2025 22:53:57 +0000
Manifest this update:     Sat 26 Apr 2025 22:53:56 +0000
Manifest next update:     Sat 03 May 2025 22:53:56 +0000
Files and hashes:         1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: 75FdtyyJAaBHPBKmjUs0ubkIF5SqlR3SsRSD92L9/Mo=)
                          2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: bXdx05k7wR9Kl1sY4+4gVobBYaiLUct0N7gXR8t0JQM=)
                          3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: JPBTJ6fwr8mmKYI0rysv3RFDJmUHvWjg1nwosGPeiPE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
        Validity
            Not Before: Apr 26 22:53:56 2025 GMT
            Not After : May  3 22:53:56 2025 GMT
        Subject: CN=680d6405-5bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:ca:f1:55:41:f7:89:3e:16:3c:43:00:92:
                    ce:3e:80:ae:fc:f8:cf:34:9c:38:90:ac:20:88:73:
                    ef:4f:f4:30:37:01:da:ea:d7:c1:76:51:2b:19:68:
                    66:18:71:d9:91:ed:93:07:f0:fd:e0:68:f1:2b:05:
                    b0:74:e9:2d:2c:07:8d:a5:6b:d8:7b:c3:b0:db:a4:
                    da:90:1d:a3:93:bb:68:07:eb:14:4f:30:ff:a2:74:
                    68:49:23:3c:a9:cf:b2:b5:a0:55:0c:86:aa:ce:81:
                    02:e8:67:67:b9:70:b7:8e:15:26:63:87:0c:fa:32:
                    e2:00:ed:68:24:b6:2b:8f:1e:33:37:e1:f8:77:9d:
                    e7:05:d6:98:68:0d:5e:b8:f5:e0:24:38:5b:85:70:
                    6a:d0:6d:a2:75:34:82:72:6b:95:7f:e4:d5:b9:ea:
                    1d:5e:9d:a8:d7:4d:91:bd:7a:56:c0:49:a3:3e:5e:
                    d1:01:e5:48:f3:47:32:f1:9d:de:e3:2d:51:29:ad:
                    2f:2d:e2:0e:41:df:b7:97:f4:84:cc:74:1c:73:62:
                    f7:8d:73:ca:74:df:94:a1:28:3e:6e:6b:b9:b7:58:
                    ae:55:35:8d:f6:e3:2a:21:32:85:87:50:a9:a0:7b:
                    39:c7:60:0b:71:b0:8e:b3:e2:35:69:62:4c:41:93:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:AC:41:43:C4:34:57:8C:61:CF:A3:FA:75:58:35:64:16:EB:8D
            X509v3 Authority Key Identifier:
                keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:f9:6c:10:f2:f7:2c:8a:ca:c5:e0:40:76:b8:07:ae:32:
         40:cc:4a:3e:e7:63:e4:a4:09:e5:ae:1e:4e:6c:2d:fd:d9:ea:
         b1:49:a0:e0:b1:63:93:05:57:61:ba:2d:4b:ac:23:49:1d:18:
         65:f1:ba:67:ef:d0:37:13:41:e0:71:e5:6f:81:91:ce:73:8c:
         24:7c:d3:d1:b6:93:63:2b:f0:ff:24:6a:77:ae:38:16:8e:66:
         38:15:cc:86:45:f4:9e:2a:64:fe:ef:ee:95:d8:6e:a1:1f:1f:
         f6:b9:36:6b:43:6b:d3:58:32:2f:f8:e4:b4:d2:3c:aa:f0:8f:
         ec:3b:6e:fc:62:3c:c7:9b:ce:ca:32:d3:10:56:82:1b:5a:fd:
         22:71:64:73:68:87:c9:27:75:b2:9f:7e:48:f0:97:31:01:e9:
         a5:16:62:d0:c9:8d:4a:e5:8d:db:95:44:a2:48:a2:0d:be:51:
         ce:7d:f7:5c:a1:5d:a2:e8:02:84:80:d6:39:45:d6:52:a5:50:
         17:5e:bb:1f:f9:1a:1e:94:e1:ad:95:61:76:63:66:e4:0f:46:
         35:88:dc:e3:cc:6a:37:e5:6c:7c:6d:f6:d1:8c:01:52:43:dc:
         5e:60:7f:e3:22:f3:e9:dc:70:39:18:e5:3d:d7:08:2d:0f:41:
         9d:9c:ef:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net