Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          vOhzGERTvFEO12qhQIC/nn8SsJMpGqWoTXkVzFfuG2g=
Subject key identifier:   3C:53:75:5A:3E:73:29:32:4D:85:C8:0C:15:90:D6:D6:82:41:BA:C1
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0170
Signing time:             Fri 25 Apr 2025 02:58:25 +0000
Manifest this update:     Fri 25 Apr 2025 02:58:25 +0000
Manifest next update:     Fri 02 May 2025 02:58:25 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: jiJrLewqAlzsvHhJbGIPw/bcc+Dspatm58Wafsk3TX0=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Apr 25 02:58:25 2025 GMT
            Not After : May  2 02:58:25 2025 GMT
        Subject: CN=680afa51-9e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:c4:44:a7:4d:ba:0e:d9:8c:71:5e:f8:c1:
                    9a:7b:c2:88:e4:1e:eb:dc:0f:f3:03:51:54:bb:17:
                    84:69:e0:d6:6a:53:f3:d5:ea:4d:bf:5e:cb:e4:ff:
                    81:08:bd:49:72:cc:79:35:a9:3f:b0:1e:f1:19:6b:
                    ed:b8:e5:fe:60:a2:49:a6:b4:20:f6:ff:01:c5:00:
                    17:4f:04:1d:a1:e7:6c:ab:2b:02:8c:f5:cc:ff:a8:
                    b2:de:05:09:4a:f7:23:8d:fa:02:18:2f:05:77:81:
                    5e:88:79:be:aa:ed:74:88:a9:67:3a:6d:83:56:78:
                    9a:8c:fc:7e:7f:53:3b:d3:4d:35:4e:20:9c:a1:2f:
                    0e:3a:ce:3c:01:d9:7e:fa:11:08:64:ce:3d:0a:1d:
                    48:30:ee:7c:43:27:44:d0:0c:14:10:04:87:7d:e4:
                    bc:02:ef:71:8a:c3:ba:4a:4e:79:05:30:fa:c7:40:
                    fe:8f:3c:68:37:e3:14:cb:a2:80:3c:11:63:72:40:
                    1a:a4:36:dc:15:e1:51:f4:9f:87:fd:f8:54:24:6a:
                    21:1c:c2:38:48:0d:d3:c2:ac:47:84:02:58:0f:fa:
                    fa:16:d0:b7:4b:f0:f7:39:5f:1f:64:9b:e2:dc:89:
                    ea:ce:54:22:9a:3b:42:9c:4e:2b:b3:30:b1:35:c8:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:53:75:5A:3E:73:29:32:4D:85:C8:0C:15:90:D6:D6:82:41:BA:C1
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:dc:e4:06:bc:78:3b:6d:ba:75:32:7b:b8:77:4f:07:4f:2a:
         41:ee:be:15:df:2f:b2:f8:15:9b:a5:61:ba:bd:ec:78:e2:2b:
         b4:8e:53:a0:22:89:b3:25:19:ce:fb:73:91:45:b2:d2:6c:eb:
         ab:5e:a3:19:18:37:5b:fe:6e:4f:9d:dc:50:3d:20:09:7e:24:
         90:47:c9:3e:ca:1e:9a:25:e7:a5:f4:c6:14:c9:53:3a:26:0a:
         d1:8a:95:1a:da:84:0a:76:b3:00:22:9a:5b:54:25:56:7d:b0:
         fb:84:88:61:36:5d:cc:57:91:a8:89:75:4e:a3:91:89:31:8c:
         d1:fc:3a:4a:80:6f:a5:57:5c:d8:34:4f:34:36:2c:8d:b2:cf:
         ec:91:7d:74:3f:70:02:9d:34:ee:58:c6:30:37:bf:6a:60:bf:
         0b:dd:dd:c2:42:7c:df:3e:52:14:ba:c9:9d:21:93:5d:11:ff:
         46:5c:8c:37:56:9c:84:e0:4b:7a:15:87:9b:d3:5e:8a:e2:6d:
         8b:aa:36:f0:9b:65:86:19:9b:d1:58:cc:fa:01:87:6e:43:30:
         a0:11:c4:96:57:2f:a6:09:d3:f9:bb:d8:f3:64:26:e5:3f:8a:
         0d:18:ee:6a:47:6f:25:73:d1:42:46:ec:a4:96:8e:a5:f7:81:
         39:53:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:22 2025 by rpki-client on console.sobornost.net