Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          sET+K/Jfo/OaNj5tTUytn9XGbtH264kCdMMH0rTGNpc=
Subject key identifier:   D5:51:51:6B:20:D2:A0:EC:BA:E6:4D:3D:B6:3D:7C:B4:45:D4:53:1D
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          C8
Signing time:             Mon 28 Apr 2025 16:09:15 +0000
Manifest this update:     Mon 28 Apr 2025 16:09:15 +0000
Manifest next update:     Mon 05 May 2025 16:09:15 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: 56MwF0Mh8n4wJLrDJDrwQdpPVlVME3I6VAdHKkfT/jE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Apr 28 16:09:15 2025 GMT
            Not After : May  5 16:09:15 2025 GMT
        Subject: CN=680fa82b-5443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:4f:e2:15:6b:6d:eb:58:0f:2d:a0:2e:14:
                    e5:86:06:28:b4:d2:17:d4:05:d9:83:f4:89:2f:aa:
                    fb:ea:5b:25:d6:04:46:36:32:75:a3:ed:ef:fb:ce:
                    4a:81:8c:f1:86:b6:de:4d:d3:2b:ac:ff:9c:98:58:
                    e7:88:ce:9c:e8:15:c1:6e:5c:9c:32:ce:b1:bc:80:
                    ff:ab:7b:f4:f1:66:ac:de:45:b7:4a:c5:47:db:54:
                    d0:04:32:a6:71:74:2b:c4:c2:21:3a:3c:98:d7:67:
                    46:2b:dc:bc:6b:c2:ac:6f:7b:f8:4c:68:46:d3:37:
                    91:da:b0:af:8c:53:64:46:ab:8b:cf:d1:1c:f7:61:
                    c7:39:0c:cb:dd:d1:19:ce:8b:cd:62:69:bf:37:0d:
                    c1:b3:42:06:88:2f:6f:db:6f:6f:df:cf:8d:bf:5d:
                    48:95:9b:0b:0c:0a:27:85:de:5b:b7:02:5a:ad:25:
                    12:74:4b:a1:80:74:49:43:84:f1:4a:0a:47:02:20:
                    11:78:d3:46:0c:7d:99:ed:db:44:b3:01:50:3a:99:
                    15:04:9a:27:58:fb:3f:b4:54:90:7e:58:1d:56:18:
                    6c:95:6c:c2:03:ea:30:f1:47:77:65:ae:64:61:cc:
                    a8:21:7e:99:3c:32:88:d5:60:a3:01:7d:ef:25:82:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:51:6B:20:D2:A0:EC:BA:E6:4D:3D:B6:3D:7C:B4:45:D4:53:1D
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:54:00:ba:57:b2:57:03:c7:99:38:6e:bf:53:df:8d:24:25:
         7a:1a:8b:6b:63:27:94:ce:17:48:80:19:c8:a8:aa:4a:15:e2:
         a6:0e:e8:20:48:fe:b6:c8:11:bc:04:2b:65:4d:9f:a3:54:0c:
         60:3a:e2:94:53:08:f0:da:66:91:82:ea:f9:18:81:0b:96:55:
         61:6b:8c:42:1c:1b:b6:12:fd:9e:af:2e:af:98:c9:99:f6:3a:
         87:d1:07:75:0b:2b:2b:7e:af:09:a1:c3:f2:c1:4a:51:ff:34:
         90:34:5f:d2:8c:7e:cd:04:8a:07:6a:e9:7d:77:ea:2e:a3:49:
         a0:02:ac:37:38:6c:d9:93:9a:00:9e:2b:8b:d4:cc:7f:76:a3:
         bf:5e:0d:bb:73:75:85:89:68:22:70:c6:ca:21:41:06:d7:93:
         30:fe:34:fc:67:7f:6c:3a:a1:d6:f9:64:d3:7d:fe:4f:f4:f6:
         58:d0:fb:61:4c:12:8b:c6:e9:a3:25:5f:56:ba:56:56:45:7c:
         ed:a9:7f:6e:52:16:2b:bd:c8:af:82:a1:cc:ca:46:b5:c6:2a:
         ab:d1:6a:ba:46:91:1e:6f:c7:96:35:6d:27:44:72:91:19:50:
         e6:cc:08:ed:9e:c0:97:bc:cb:9e:ca:ef:10:42:4a:1e:bb:2e:
         df:be:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:11:16 2025 by rpki-client on console.sobornost.net