Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File:                     jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier:          9A+yYncITXJemgj7L/4JpQjMMU/kKtq4pAmhNb6CI48=
Subject key identifier:   C2:37:68:A1:E3:6B:6A:91:A7:CB:A9:0C:53:A9:B7:B1:5A:A9:11:AD
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       03FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number:          03F2
Signing time:             Sun 27 Apr 2025 00:09:16 +0000
Manifest this update:     Sun 27 Apr 2025 00:09:15 +0000
Manifest next update:     Sun 04 May 2025 00:09:15 +0000
Files and hashes:         1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: UPU39pt2XmG2gB3vCr5jfIB1wfProFHIUMRa9hTCD1k=)
                          2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=)
                          3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=)
                          4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: Apr 27 00:09:15 2025 GMT
            Not After : May  4 00:09:15 2025 GMT
        Subject: CN=680d75ab-8f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:91:ab:de:43:fc:84:02:9e:76:02:b9:a3:
                    e8:66:d5:a9:b9:b7:1f:42:a7:92:9f:e7:05:11:0a:
                    5f:35:8a:1a:bc:e5:81:41:01:4b:76:18:d6:8a:d4:
                    1d:b2:de:df:a6:49:fe:dd:0b:94:8c:8f:71:5c:e2:
                    53:88:ec:90:c5:f9:de:91:ad:0e:fb:b6:da:95:dc:
                    3f:bf:b3:b4:21:0c:7c:f4:68:1d:e1:09:5b:13:c5:
                    49:58:2f:6e:1c:0a:b9:1c:55:85:b1:ba:e0:c7:1b:
                    79:c7:7b:e5:97:d2:1c:42:6c:36:9c:dd:ce:92:2b:
                    e3:7f:68:a4:35:ba:2b:2a:07:f5:6b:82:cf:1b:1f:
                    9f:9e:cc:b1:65:b2:72:bb:2c:c1:15:ca:71:33:b3:
                    84:70:6a:29:0f:3c:b4:97:09:4b:51:de:2b:5e:21:
                    58:2a:17:3d:a0:11:54:ec:4f:8c:9a:0a:e4:e1:ac:
                    dc:5f:3e:e1:0f:18:a5:de:84:98:55:c5:0b:2e:68:
                    c7:f3:29:be:1f:68:e7:ef:92:c8:78:bd:d1:e8:f0:
                    24:60:70:e0:07:f8:b7:fa:ec:11:a0:c3:53:db:c0:
                    44:97:1f:df:84:83:f3:6d:34:c0:e6:a2:fb:c0:f0:
                    61:cd:7a:4c:8c:38:81:d2:20:af:90:4f:9d:1c:3e:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:68:A1:E3:6B:6A:91:A7:CB:A9:0C:53:A9:B7:B1:5A:A9:11:AD
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:60:94:c8:f4:16:e3:2d:44:c5:cd:ef:50:aa:f4:96:64:
         7c:c2:16:62:e6:68:2b:23:4e:42:63:ab:b3:9f:a1:c1:33:60:
         c5:21:3c:e7:39:ab:7f:80:b0:61:4d:eb:11:a4:40:97:a8:68:
         08:b6:f7:65:90:8b:a4:5b:c1:e4:54:6f:72:af:02:5a:08:d5:
         51:62:9a:7a:dc:3d:32:70:5b:44:2c:ee:dd:54:af:ef:0b:da:
         6e:3c:eb:dd:77:43:4a:9c:75:45:88:9f:0b:be:b5:87:43:36:
         43:02:db:65:b6:d0:d1:75:26:31:16:86:e5:2f:3a:cc:13:27:
         37:5f:75:6b:e7:36:fe:fe:34:19:1a:d9:be:86:6f:0d:46:ef:
         20:95:81:18:6c:fa:35:60:a2:51:4a:f3:a9:0c:29:96:0f:fa:
         70:10:3c:51:70:83:ec:da:1d:96:44:a9:c7:a7:be:14:e4:90:
         fa:67:fa:e5:66:53:bb:e4:81:56:0d:45:8b:d5:2d:a0:c0:bd:
         2b:fb:7f:cd:0f:a8:86:a1:f4:17:77:80:7a:f0:be:f5:78:c9:
         90:c3:e1:0e:d6:2e:fc:85:fa:54:eb:16:48:ea:52:33:72:34:
         29:11:76:04:06:00:bb:0a:71:c3:42:ef:b5:b0:91:56:92:fc:
         56:92:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net