Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
File:                     RW7qBpLGpPJvU9LSN9HLTc14MwU.mft (raw, json)
Hash identifier:          t7iyO2pCCc73lv/mOZ04f2sxAcwtSuhdufKRzmagP8U=
Subject key identifier:   73:E9:47:7B:67:3E:34:F7:86:A1:A3:E6:65:B2:9C:58:04:95:E7:A1
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
Manifest number:          01C1
Signing time:             Thu 03 Apr 2025 23:07:36 +0000
Manifest this update:     Thu 03 Apr 2025 23:07:36 +0000
Manifest next update:     Thu 10 Apr 2025 23:07:36 +0000
Files and hashes:         1: RW7qBpLGpPJvU9LSN9HLTc14MwU.crl (hash: adDh/b8D7za+yosE2djCyxdLlwSyTId6R895E/UyDrQ=)
                          2: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (hash: zFW6A+VsWeVd5y9V/Grmt529yD9xy9nMp+dz1bU8Fj0=)
                          3: C1D6899A766D11EF8DE77D09C4F9AE02.roa (hash: hhDKyyrQxKGGNGFA6ebmUiEAzFW+VilENtN1Yqjy+bg=)
                          4: EABEFD16232E11EFA6F6B887C4F9AE02.roa (hash: ia4Ra/GF14x26JDiIjwbkjuR5bTGoRpVxx3Eq8bwfHI=)
                          5: A52438CC4D7B11EE9DA62A3BC4F9AE02.roa (hash: MnXlnBY2ocoNfE08GiysFh2JwZG89iSiF2FMR7I6bbw=)
                          6: 8A5017E27C3C11EE90BF4044C4F9AE02.roa (hash: 2lj1uUsrRYPyJxpfjrOuYSX+mKrdmUUXbJ/4lkcFuLY=)
                          7: E4788F02DB4511EE89BB2666C4F9AE02.roa (hash: oox2IAP/EeLsMtT4Ck+SqOcZuXLlKDtKDAVdd069T4g=)
                          8: 63FFD6349A6611EEA0301E57C4F9AE02.roa (hash: z8HOz+dcoFFCcCFSoZRS4fGtZxXcsHPetEWPBXuLWp4=)
                          9: EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (hash: xa6pFVrj/ez7E87xSyPlkJRg6Pmk7Fs8mSI9yoLX72Q=)
                          10: 68C24072EAA611EE8F2E643CC4F9AE02.roa (hash: RLu52NHOm+iqiwkIRAwfpGKtzmwjKuI/N13XqqT8Hi0=)
                          11: 6B95D6A4739311EE8FDD5549C4F9AE02.roa (hash: Qd426lYD9XoOEAmz1vWsXU4A7lmIaqfHNjNk4PbK3Hw=)
                          12: 005C56227B2411EEBB6FC444C4F9AE02.roa (hash: T0JzURgbPQAyxXByhNfsj9TRUNcqqPprlp5/NvrciCE=)
                          13: 399302423C8B11EE83400D20C4F9AE02.roa (hash: N2pS8ft3nrcylkyKhXMZRXSMHTWkIIpW9TlSRxcMr/A=)
                          14: 281775F671A711EE85493C7BC4F9AE02.roa (hash: BACyePdfCThTkkGSMdPNsRpHZtdIdBJX2cl+z8bcJWM=)
                          15: E5209E5C807E11EF93536D20C4F9AE02.roa (hash: 6riOt7I9PRgxEQLHewebHK25UsfuwMJc/hksMeZF4Tk=)
                          16: F9350C3C326B11EEA39EA051C4F9AE02.roa (hash: l6IS2kpgAAlvqNFhAN1P6ZblqySzuWpYTnlUWX9CEl8=)
                          17: 16C1510E310711EE8328F181C4F9AE02.roa (hash: trP7B45/DlDHDIgNDVOVbjedY2D8psgfhXtS/4UA2n0=)
                          18: 6CB1C84010E011F086DF6040C4F9AE02.roa (hash: hAzdOCdFdHR/YjdHmsPsDPmRR/IOG0RFOqXqun1HAm0=)
                          19: 5F5C646C7AE911EFBEF40A3AC4F9AE02.roa (hash: mAow9IFKciqMsYxt1OAxrZ1M2FXSiGw7w8W52WIxbjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 23:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550
        Validity
            Not Before: Apr  3 23:07:36 2025 GMT
            Not After : Apr 10 23:07:36 2025 GMT
        Subject: CN=67ef14b8-8bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:0f:5c:70:a9:d6:64:75:62:ca:70:a9:b1:
                    2f:62:58:a6:83:2c:11:3e:3c:77:12:67:c9:5e:50:
                    10:b3:95:ab:08:a0:23:39:ce:3b:1e:c5:6f:5c:05:
                    a1:51:d2:00:ba:9b:2d:15:44:08:4b:df:99:8d:39:
                    3c:e5:0e:bc:fd:d8:22:e4:5d:e0:df:01:a6:df:19:
                    a9:57:d1:3f:12:67:83:81:de:25:31:b3:31:80:43:
                    d1:71:9a:b6:4a:61:8b:39:44:01:ba:71:d5:3d:0a:
                    f1:b0:14:f0:71:0f:2d:12:f5:3b:77:d6:d5:51:cc:
                    0d:16:22:0d:39:6e:6a:04:64:97:ed:ac:f2:c3:e4:
                    63:95:44:6a:7d:6c:ab:cd:5e:50:13:db:f2:88:1d:
                    bb:ac:02:66:84:8e:b3:82:f6:4a:ab:f8:00:7e:8c:
                    91:2b:a2:27:b9:65:5f:de:ab:a2:02:b7:98:61:0e:
                    29:ab:0a:e5:b4:d3:80:05:17:94:f7:02:77:5f:bd:
                    bf:91:e7:de:68:ae:10:38:de:a1:d1:0b:08:ec:df:
                    7c:6f:6d:31:21:7d:40:6a:7d:10:29:38:8d:b3:8b:
                    08:b3:a4:65:e8:d9:c1:88:c4:29:89:93:d2:8e:f5:
                    fa:78:8d:67:f9:2e:03:40:fe:89:36:89:cb:eb:c4:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E9:47:7B:67:3E:34:F7:86:A1:A3:E6:65:B2:9C:58:04:95:E7:A1
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:28:28:34:d8:fb:77:1b:fd:a0:8c:ce:02:55:5b:78:d2:00:
         dc:9d:a8:3d:78:3e:f9:21:f6:a9:53:7c:b9:03:51:66:90:a9:
         61:38:ce:c8:77:25:94:7e:45:63:47:db:0c:fa:dd:ef:63:d2:
         47:a3:a6:cb:b3:d5:0c:6c:74:47:ae:86:e7:90:49:cd:f5:3c:
         b6:3d:1f:42:e8:c5:79:a7:8c:7f:22:a1:a4:5b:3f:d1:18:7b:
         81:f4:ef:d2:50:bb:a3:73:e4:cb:af:7d:53:87:f5:9a:af:58:
         b2:81:29:0a:85:23:a8:df:1f:a1:78:5a:d6:4d:7d:5f:d0:17:
         89:ce:6f:4a:3f:5d:22:3d:e4:9b:36:2a:af:3c:63:fa:75:cd:
         58:6e:83:68:ea:cf:dc:f9:00:b9:8a:c6:a9:09:21:81:44:49:
         86:3f:3b:fc:1c:0f:45:27:b2:5b:37:42:56:76:9a:a2:8a:6b:
         82:74:32:3c:09:02:db:32:eb:74:f4:d9:09:67:56:14:3d:71:
         aa:dd:97:ee:81:4e:31:e4:ed:fe:82:a0:e7:f4:0e:42:1a:41:
         d2:3d:c8:b1:6f:19:f9:08:4f:7f:07:6a:ca:d2:21:e1:4b:0c:
         c3:1d:44:0c:97:e0:96:9f:ea:a7:f6:5a:01:7f:f3:3a:b3:40:
         61:2a:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:59 2025 by rpki-client