Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          DYfWltTXz6k/c0j1HjDziATMuFGWFr9y2Vh1/OW1eHE=
Subject key identifier:   7C:B0:51:52:0D:09:5E:67:AB:2E:49:47:50:01:9C:27:E4:6D:FD:55
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0A88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0A81
Signing time:             Wed 16 Apr 2025 19:26:18 +0000
Manifest this update:     Wed 16 Apr 2025 19:26:18 +0000
Manifest next update:     Wed 23 Apr 2025 19:26:18 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: 0TpWiYKz+TXG4qK5lHtMnAQo5D3iwtW7DmlMjuceZ7g=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: TCYPp0B7wELGdVmkmZ/2o9IhPqXAxvWxV7x+iOfRhsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 18:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2696 (0xa88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Apr 16 19:26:18 2025 GMT
            Not After : Apr 23 19:26:18 2025 GMT
        Subject: CN=6800045a-14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:46:d7:ad:b8:cf:30:94:11:79:ea:ae:ec:
                    08:22:be:fe:c3:8f:1e:18:e4:af:72:d4:50:4a:b0:
                    d6:c1:7d:f4:06:b2:d9:91:37:34:dc:94:96:90:78:
                    59:00:c7:2d:40:2f:a4:73:09:b3:e5:1e:cd:5c:1c:
                    dd:8e:c8:c6:71:31:76:33:88:0e:ea:f3:f3:be:df:
                    ca:76:9e:05:34:51:d2:39:88:f1:63:94:7e:85:20:
                    3c:a1:d8:10:99:4a:9e:c2:8f:67:de:e4:e7:1c:22:
                    e2:2b:23:43:c9:71:a1:45:31:4f:29:a7:32:93:85:
                    7d:5d:98:97:26:0e:dc:3c:ff:59:c9:66:68:9a:36:
                    de:84:d1:b2:99:c0:f8:b3:4c:69:47:7a:e6:f8:b9:
                    d2:53:11:93:11:d3:7b:59:11:37:5f:6f:20:c9:5b:
                    80:6c:04:36:fd:c1:06:4a:6c:c8:4d:93:ea:74:72:
                    1f:e6:2e:96:12:b5:0c:2e:24:33:aa:8f:a7:ff:3d:
                    8d:29:e3:8e:b2:fd:2c:05:1d:43:cd:39:58:46:90:
                    74:ce:2a:fa:f9:97:d3:26:a9:70:d5:a6:d8:36:e4:
                    d6:ff:2f:0d:f1:ff:71:8a:aa:d7:eb:71:f1:4a:72:
                    a0:a2:36:2c:d3:a4:6d:16:14:e2:88:5c:fa:93:f8:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:51:52:0D:09:5E:67:AB:2E:49:47:50:01:9C:27:E4:6D:FD:55
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:88:f2:ab:92:c0:ba:4e:29:73:76:5c:fb:3d:dc:b2:03:
         7f:2f:86:63:78:26:3f:7e:cd:fd:17:64:ed:3b:b6:76:00:ba:
         f9:d2:30:20:68:67:04:b7:a0:ef:c6:0c:f9:4e:88:25:30:71:
         92:e9:88:50:e6:89:c7:76:db:08:e3:e7:35:63:8c:a3:5a:8b:
         1d:84:f7:ba:74:63:73:b3:b8:c4:2c:98:3f:aa:76:0d:7d:c0:
         90:1d:0b:29:dd:15:2c:af:65:23:2e:c5:b0:10:bb:07:f8:6e:
         b0:24:11:13:59:86:14:4a:56:16:9f:bb:c7:8d:02:5b:5a:b0:
         72:ea:e2:50:8b:48:3e:79:ff:12:67:5f:84:ce:14:4f:4b:dd:
         3b:db:84:92:01:56:08:d6:18:10:ef:4b:1b:c0:dc:d3:20:ca:
         98:fb:b2:f7:65:ea:2e:43:09:27:1c:c1:0a:e7:9f:1a:db:ef:
         c3:0b:00:c0:3f:2b:59:65:01:bf:69:5f:ec:75:a2:6c:72:c7:
         99:60:cc:32:65:8a:83:89:22:5b:51:a1:28:0f:73:9f:d1:ff:
         c1:95:41:5c:81:e5:dd:8f:26:ba:cf:e0:8f:1f:c2:33:56:94:
         89:00:dd:8d:86:b8:c8:9f:89:41:e0:e2:90:ee:90:03:4d:a2:
         04:4b:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:53 2025 by rpki-client