Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File:                     Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier:          vI2rOAIRTA71sULwEztZJSRlBEuFWbIFwPv+g8Sgg0A=
Subject key identifier:   DD:78:2A:E0:03:6A:C7:21:57:34:E1:E1:08:EB:36:7E:5B:60:05:DE
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer:       /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number:          0116
Signing time:             Sat 29 Mar 2025 04:14:44 +0000
Manifest this update:     Sat 29 Mar 2025 04:14:43 +0000
Manifest next update:     Sat 05 Apr 2025 04:14:43 +0000
Files and hashes:         1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: buHK0EUnVH2Fxmt5ghvPeB9GMoHE+5WvoB9Jttd0zLI=)
                          2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
                          rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37ED
        Validity
            Not Before: Mar 29 04:14:43 2025 GMT
            Not After : Apr  5 04:14:43 2025 GMT
        Subject: CN=67e773b3-58c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:6e:c7:f8:a2:da:16:33:cc:d1:c0:17:7d:
                    8c:02:81:61:cc:a2:57:46:b5:b6:66:f6:b4:43:ad:
                    6a:48:77:d7:37:b4:e8:be:ba:1f:0a:4a:59:e1:f7:
                    94:db:be:4a:22:7f:c7:d3:87:f0:0e:25:b5:96:37:
                    9e:74:90:93:ba:0e:28:47:e2:a2:84:37:96:c3:3e:
                    9f:b4:5d:af:9e:d0:ca:06:fd:66:b8:fb:2b:cf:56:
                    b9:a4:4d:89:6c:aa:e2:78:1b:1c:6b:f0:8a:4b:cc:
                    64:c9:41:87:4f:fe:5b:6d:fa:34:f9:f6:39:84:4f:
                    67:2c:82:df:82:24:72:82:48:d8:d7:ca:0d:dc:b8:
                    7d:45:12:d9:d3:c2:ac:b5:3f:2b:0e:24:71:f7:88:
                    e6:72:93:c8:ac:e3:b9:a1:d4:14:35:82:23:4f:5d:
                    e2:99:76:0e:13:0f:0b:93:76:14:e6:16:50:97:bb:
                    02:a5:c6:2b:5a:61:6a:dc:28:9f:ff:06:90:67:d9:
                    5d:27:a0:fc:2d:a3:d5:2f:cd:60:73:81:59:48:b7:
                    a1:e1:30:54:4c:46:85:5a:be:6d:4e:0c:bd:77:57:
                    21:a8:d1:7e:6a:76:b8:0e:72:93:f7:bf:d2:ab:20:
                    11:0a:6a:69:04:4d:bf:1a:46:4d:d1:6d:f4:5b:1a:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:2A:E0:03:6A:C7:21:57:34:E1:E1:08:EB:36:7E:5B:60:05:DE
            X509v3 Authority Key Identifier:
                keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:6c:66:3f:b7:3a:e3:42:32:25:49:14:80:46:75:40:c1:
         9f:46:6b:d9:e4:5f:a2:5b:07:1b:c8:27:d7:3f:40:9b:e6:3d:
         4e:ce:2b:3e:f2:02:57:19:c2:85:88:83:9c:6c:93:05:cb:21:
         a9:89:3d:59:0f:aa:85:6b:9f:5e:cb:9e:12:d4:92:1e:d6:c7:
         43:22:10:78:68:1b:06:c4:55:04:a3:64:b9:2e:61:f9:f8:64:
         48:ed:df:07:8f:7a:45:de:ad:23:41:d4:a3:9a:1c:b1:86:3b:
         45:81:94:95:f0:ec:0b:dd:9c:6b:33:cb:39:0b:49:82:4b:9e:
         45:2e:53:52:d2:90:98:17:55:ef:74:41:46:73:e7:6c:5d:89:
         4e:76:31:8d:d5:52:24:f3:e7:30:8c:a9:1d:67:ed:9b:53:fe:
         13:75:1e:cb:f0:af:32:aa:78:72:96:8e:14:71:de:95:10:e3:
         56:9e:17:1b:1c:43:13:46:3f:a7:7d:60:17:1c:f4:65:85:9e:
         24:35:8b:22:41:00:aa:c9:21:51:a5:94:43:8a:d2:0d:e4:1d:
         03:b0:9a:ea:27:6c:08:53:4b:3c:f1:85:a9:22:11:fe:24:3f:
         b1:65:fc:ad:35:ea:29:91:31:eb:33:c6:1f:1a:01:fb:73:4e:
         bb:6a:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:20 2025 by rpki-client