Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          QwP9DMj2ik7b9Dy5V1evPnKF1bNxC3kCltET4Jdy4QA=
Subject key identifier:   F1:72:32:9D:5B:86:F7:8E:BD:CE:D3:DD:C0:56:5C:FA:80:21:31:18
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          0108
Signing time:             Sat 05 Apr 2025 04:24:52 +0000
Manifest this update:     Sat 05 Apr 2025 04:24:51 +0000
Manifest next update:     Sat 12 Apr 2025 04:24:51 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: X3ujllq+Fqslm8GO2A+55OwIzyXnC0UJ54/kl0dgCxw=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5
        Validity
            Not Before: Apr  5 04:24:51 2025 GMT
            Not After : Apr 12 04:24:51 2025 GMT
        Subject: CN=67f0b094-f235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:cc:8f:80:2e:60:37:fd:d8:72:78:3d:cf:
                    8d:47:57:ae:bf:80:77:ac:7e:b7:2d:aa:35:9d:d0:
                    9c:cb:ef:bb:bc:ea:8c:b1:36:dd:d2:5b:b7:15:aa:
                    a3:20:e4:dd:79:52:8d:0f:4b:3e:10:6a:5f:20:14:
                    c2:76:0b:d8:6a:0e:2b:eb:37:37:f8:75:53:e4:48:
                    79:8a:77:48:63:0c:51:71:f7:8d:fe:ee:5b:4a:57:
                    fc:31:e3:8a:d6:56:66:e8:e7:03:fb:a0:6f:93:49:
                    5e:c5:9c:8c:7d:48:90:24:6d:87:25:7b:5d:a7:74:
                    6d:6e:ae:a3:3b:84:4f:a6:48:ec:21:4b:cc:5d:b0:
                    a0:70:94:b9:c0:fa:66:c7:45:61:cb:54:10:f2:52:
                    13:74:0e:23:44:25:dd:ed:29:ff:28:6e:4d:e7:d3:
                    83:5f:e7:28:0c:a5:67:73:7b:c9:f9:cf:d3:89:32:
                    e4:1a:d6:86:02:f3:b6:f2:46:5c:98:bc:fc:94:45:
                    a9:ed:eb:f5:31:e3:01:3b:cd:a5:0b:f1:4d:39:fc:
                    f3:08:e9:66:d1:a1:af:e8:09:fd:86:06:4d:7a:5b:
                    61:79:e4:df:ea:de:90:95:6d:33:17:ee:f6:19:b4:
                    a8:9b:00:2f:3a:ad:b0:6b:b9:86:1c:9c:50:04:af:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:32:9D:5B:86:F7:8E:BD:CE:D3:DD:C0:56:5C:FA:80:21:31:18
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5f:c1:37:9d:97:9e:bd:00:a4:0b:ac:d9:2a:da:8e:1f:96:
         2c:d7:76:e8:94:14:a8:7e:11:4c:22:c2:43:83:e2:1e:22:df:
         3b:e2:24:70:6f:65:d2:91:47:81:a2:61:62:d9:05:17:d9:85:
         7f:86:86:b2:db:fb:66:a0:a4:99:40:46:99:6f:82:b0:5c:b4:
         83:3a:71:c2:a3:03:36:f5:9e:9b:ae:99:6a:26:13:6d:cd:e6:
         c5:ba:12:b0:0a:67:58:74:ff:7e:21:32:8a:59:09:91:e0:06:
         f8:48:87:b9:4d:42:54:c6:45:51:86:b9:e0:9d:3b:14:61:12:
         66:4c:4a:e4:23:d4:26:e6:46:41:68:9d:ed:25:65:e6:9d:15:
         51:8b:c3:74:1a:4b:39:6c:d0:88:eb:7e:5b:3c:3e:c9:78:46:
         ee:12:d6:79:d0:34:02:54:18:bd:5e:03:05:f4:7c:1b:fb:f2:
         27:ae:87:d6:7f:c0:12:1b:6e:76:a6:a8:62:bb:31:c2:97:bd:
         30:b7:b4:d2:c6:2b:2a:b1:87:32:9f:42:a2:02:d9:58:cf:53:
         98:52:99:e2:d3:d4:a8:61:07:44:24:9f:e1:d9:6d:8f:c6:38:
         90:f9:4b:51:0f:6b:2d:09:3c:ba:1b:d5:7d:49:a5:82:fb:43:
         61:2c:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:21 2025 by rpki-client