Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
File:                     acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json)
Hash identifier:          R1Qks0q9Bf7NXyx/pqUuVzWF1v/eFzTirEgNpeLKkQk=
Subject key identifier:   82:19:D0:4F:A5:8E:1B:A1:21:28:8F:EA:CB:68:EF:84:B4:06:01:F7
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
Manifest number:          0195
Signing time:             Fri 11 Apr 2025 02:47:59 +0000
Manifest this update:     Fri 11 Apr 2025 02:47:58 +0000
Manifest next update:     Fri 18 Apr 2025 02:47:58 +0000
Files and hashes:         1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: OkkPsUgjz+bsH9BzuhWFRRb4AjpIPEglWVGZkRxVFdI=)
                          2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl
                          rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Apr 11 02:47:58 2025 GMT
            Not After : Apr 18 02:47:58 2025 GMT
        Subject: CN=67f882df-6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:2d:3e:05:eb:8d:99:a4:12:24:2d:1c:a0:
                    a0:62:db:f7:4e:76:ad:05:1e:81:91:0b:2d:1f:eb:
                    66:a1:3c:75:ab:68:8d:97:6d:44:a0:b2:96:63:ca:
                    50:d6:a0:58:42:92:5a:77:5e:25:ab:99:34:cd:3d:
                    22:72:1a:c9:58:1f:1e:2e:af:14:a6:2a:5c:ba:9f:
                    b0:30:b7:df:b2:f9:f2:b6:a5:b1:12:18:56:1d:c4:
                    55:27:54:8e:6d:87:63:db:01:b2:e2:09:6d:b9:08:
                    6f:1c:15:56:71:39:7d:bb:d0:6d:e2:e6:ab:9a:7c:
                    07:f1:17:01:a4:b5:8e:c5:b5:6e:03:d9:6a:e3:98:
                    38:8b:63:32:35:f0:20:a0:fa:3f:df:57:c1:97:fa:
                    72:51:3d:40:0c:0d:a4:0e:63:8e:e8:89:31:ae:2e:
                    00:32:12:f0:ce:54:27:c9:b6:1c:24:6f:e2:8c:90:
                    1b:fd:24:b9:9f:8d:0f:56:79:18:00:d2:18:2f:d0:
                    62:18:26:0d:75:d7:33:c3:50:70:49:41:7b:c6:90:
                    e3:4e:ec:b0:04:77:18:a0:64:1a:68:1d:01:58:b5:
                    3c:95:f9:2b:f3:0d:11:9f:ae:91:7e:6b:7b:5c:9c:
                    40:bc:9c:d3:40:16:13:18:44:a8:14:1f:49:2a:6a:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:D0:4F:A5:8E:1B:A1:21:28:8F:EA:CB:68:EF:84:B4:06:01:F7
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:96:6b:99:48:f3:25:e7:53:9a:8f:8e:44:55:45:66:ed:51:
         e6:a4:8f:91:1e:45:79:04:b2:4d:ae:d4:af:ac:83:42:65:54:
         e1:cc:51:ed:8e:3a:9b:ac:34:66:db:72:45:01:59:41:ec:bb:
         63:73:0d:23:91:a9:95:7a:52:80:d9:11:44:ce:c6:03:f8:01:
         5c:20:3e:9e:cf:7f:8b:b2:ea:b8:0d:4e:ec:ed:eb:14:58:e5:
         0c:2f:c0:fd:83:e6:fd:be:ea:3c:c6:b8:28:78:1d:b8:b0:15:
         9b:95:19:04:9a:2a:8d:ac:d8:d0:54:2d:1e:2a:5a:3b:41:99:
         f7:5d:b6:c2:52:98:16:f1:81:94:60:56:f0:72:f8:5f:a7:72:
         9d:7d:dc:5f:aa:37:a2:33:20:39:c1:dc:60:96:a3:d5:02:50:
         88:d4:3e:ed:2f:f1:40:9a:51:0b:eb:5e:e5:2e:42:21:49:3a:
         1f:38:b6:0e:a1:fc:5e:5d:8d:70:7d:8f:4c:42:49:e2:88:29:
         99:f6:ec:00:48:fa:e9:03:1b:b6:c3:a3:eb:15:de:82:2a:8d:
         d2:ad:f4:7f:83:c4:b8:32:f9:5b:35:ca:22:a5:33:17:26:5a:
         93:48:a7:8a:68:0c:a8:6d:50:fc:25:06:1a:10:72:6c:1b:d3:
         36:93:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:23:18 2025 by rpki-client