Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
File:                     a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json)
Hash identifier:          CaCJ/V7k9iReySGu/l9KJ3010OKy6JEB4m2MxsZebOQ=
Subject key identifier:   36:AC:B6:17:D8:EB:22:99:99:1C:68:22:67:07:FA:17:E0:71:10:41
Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
Certificate issuer:       /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Certificate serial:       05DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
Manifest number:          05DA
Signing time:             Fri 28 Mar 2025 23:15:39 +0000
Manifest this update:     Fri 28 Mar 2025 23:15:38 +0000
Manifest next update:     Fri 04 Apr 2025 23:15:38 +0000
Files and hashes:         1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: bnX6k66PAHIkEMHWLYxNrXTXmxrtTv8Bul3XF48U+hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl
                          rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFD4B
        Validity
            Not Before: Mar 28 23:15:38 2025 GMT
            Not After : Apr  4 23:15:38 2025 GMT
        Subject: CN=67e72d9b-4eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:ea:07:31:50:7d:f0:ce:09:2b:34:62:1c:
                    05:d9:f0:d3:02:b1:37:c3:50:12:9b:df:b9:12:33:
                    99:97:c3:9b:13:8c:c5:dd:8b:a2:55:66:0a:1f:71:
                    61:68:f6:6f:01:7e:7c:f0:ef:c9:9c:ea:1d:bf:72:
                    fe:04:08:a5:3b:1e:e6:0e:c0:0d:e9:c3:4c:3a:26:
                    2c:8a:7a:f4:fb:8a:6e:c1:ac:99:d6:ba:31:44:06:
                    8c:f0:d3:fa:4a:9f:d4:b3:84:6d:a5:02:fd:bd:6f:
                    9a:a9:75:c6:c6:a5:86:49:76:dc:84:19:ea:97:af:
                    b1:74:1c:1b:df:4c:c3:c3:69:5d:d7:0c:23:65:a1:
                    71:53:dd:32:a5:59:9b:2c:b6:73:ff:25:51:93:02:
                    59:07:51:71:94:b8:1a:a4:7b:c3:b5:21:0c:e9:bf:
                    bb:96:bf:44:44:ea:13:d5:2c:2d:2a:08:f2:f8:47:
                    ff:53:6e:44:93:d0:bf:87:08:37:b2:32:e3:de:de:
                    31:b4:6a:cd:90:00:a3:b7:f6:5c:9d:67:89:7e:b1:
                    72:72:98:37:54:e1:5e:28:59:0d:ca:db:e0:cd:7b:
                    d4:0c:40:a2:24:58:82:57:e2:1a:9c:c8:15:ce:7b:
                    ac:c3:e8:03:6d:63:b1:8a:d8:6e:b4:bb:07:88:2a:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:B6:17:D8:EB:22:99:99:1C:68:22:67:07:FA:17:E0:71:10:41
            X509v3 Authority Key Identifier:
                keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:07:ad:9a:41:8e:bd:6c:75:fa:00:0b:91:40:76:81:5c:
         06:e2:d8:d7:7a:c8:1a:cf:be:be:67:5f:ec:53:61:7e:90:cb:
         e3:2c:d8:ee:b6:a8:06:12:79:cf:bf:ce:39:d4:54:fd:56:ab:
         05:be:ab:3a:21:a7:35:b5:7d:ab:d8:f4:d4:42:29:7b:7a:f3:
         9c:99:2a:95:bc:f5:df:59:d5:95:02:9b:13:fd:fc:05:19:fe:
         a9:16:90:e2:bd:eb:c5:e5:fe:20:61:d5:7c:73:f0:50:41:0b:
         d7:89:b5:17:75:9e:91:b3:32:95:ba:68:74:f2:ef:e8:c0:16:
         39:5a:94:11:8a:cb:0c:4d:8c:0d:3f:8c:5d:50:bf:5f:92:7c:
         e5:1c:f8:48:77:54:8e:7a:94:d4:7e:f9:60:02:40:dc:36:f2:
         e7:d2:05:db:4e:f3:73:b4:61:8c:7f:c8:7d:37:ce:9d:80:bc:
         a3:fb:2f:bf:2a:e4:6d:a0:ba:7d:55:4d:e0:17:4d:f1:34:33:
         14:25:91:00:98:30:57:ae:08:9f:d5:ce:7f:8f:ca:05:56:b9:
         53:6f:12:a7:b0:81:51:10:f9:2b:cf:94:2f:c1:61:d0:b3:37:
         fb:c2:7c:08:a5:76:79:38:a5:93:b1:16:47:55:2f:f8:dd:11:
         59:3a:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:46 2025 by rpki-client