Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
File:                     jIdTtwqo02LsUz6Sfxlv62mbGF0.mft (raw, json)
Hash identifier:          xymHSTfPMTcAw9D7tq08CX/pUiocTYDVh9bgN4lCkWM=
Subject key identifier:   AD:81:1B:B2:61:C0:0B:B2:E1:4B:58:B4:9E:78:D1:BF:AB:75:B5:ED
Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
Certificate issuer:       /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
Manifest number:          0271
Signing time:             Sat 05 Apr 2025 01:48:42 +0000
Manifest this update:     Sat 05 Apr 2025 01:48:42 +0000
Manifest next update:     Sat 12 Apr 2025 01:48:42 +0000
Files and hashes:         1: jIdTtwqo02LsUz6Sfxlv62mbGF0.crl (hash: Vwy5VTTW8iqD1sYy63jLDd4owx0RIylaZbe1JCSLZXs=)
                          2: 286A010405AB11EDB94A1E32C4F9AE02.roa (hash: y1hhWIvYIRZY5Wcz830NbFtZiEa8PFTfSRZiRyReX/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD5
        Validity
            Not Before: Apr  5 01:48:42 2025 GMT
            Not After : Apr 12 01:48:42 2025 GMT
        Subject: CN=67f08bfa-df4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:4d:02:8c:44:58:94:4c:03:f8:4a:e7:05:
                    e4:4b:84:55:a8:f8:25:d2:8e:44:ee:a0:9c:73:78:
                    97:9a:71:dd:6a:cf:b7:e7:3c:b7:e3:c6:23:b1:4c:
                    c6:cd:d1:4a:08:16:7d:5e:88:8a:50:23:10:07:ba:
                    28:71:1e:92:e4:4b:31:b7:57:b1:1f:87:61:e7:18:
                    6e:48:27:7b:57:d2:c1:f2:47:9d:ca:5b:c1:1c:32:
                    d4:29:fa:c2:ec:95:da:2e:13:c5:b5:29:87:a2:61:
                    1a:65:94:6b:fa:22:3b:93:d7:57:e2:59:ed:27:5c:
                    58:ae:45:58:1d:77:46:d5:3e:e7:eb:82:e7:84:ad:
                    a4:d2:f4:c4:ab:f8:31:6b:8b:08:94:ae:65:81:7e:
                    0c:46:49:b8:11:5f:7a:82:5e:3a:5d:a3:37:5e:74:
                    7c:5a:5a:26:57:39:be:db:bd:6c:93:58:27:ce:b7:
                    d8:c2:3d:72:c9:12:89:18:f4:4c:90:2c:90:3b:9e:
                    f6:49:5a:fa:18:33:40:bc:86:c7:dc:b2:c7:9a:93:
                    c2:08:76:28:43:19:93:66:3c:95:5a:18:1b:ce:4a:
                    88:c3:7e:ea:e6:21:6a:c9:d2:cb:d3:94:20:83:ae:
                    a8:9a:42:3e:4a:ca:37:08:64:a0:f9:b6:d1:b7:4f:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:1B:B2:61:C0:0B:B2:E1:4B:58:B4:9E:78:D1:BF:AB:75:B5:ED
            X509v3 Authority Key Identifier:
                keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:e3:a6:09:ca:0a:e1:62:44:5c:9a:52:86:aa:19:47:23:
         0d:d5:a1:c3:7a:11:67:db:a0:b9:11:58:04:cb:19:79:5b:c7:
         8c:55:d6:0c:ca:0b:72:22:32:b7:f4:2e:12:7a:d0:b8:13:c3:
         6c:96:e1:15:1e:ea:1a:52:aa:b7:53:46:46:33:50:e3:bf:55:
         a8:de:5c:43:94:8c:9e:1e:83:34:19:d8:84:48:3d:41:bf:b3:
         fc:17:11:0b:26:77:11:65:7f:63:f5:5e:8a:4a:69:2b:ed:2e:
         af:17:c2:53:7e:b5:6c:28:5e:6f:3c:34:dc:ed:2c:41:cc:48:
         f5:c5:71:7d:df:93:4f:07:10:a1:b8:f4:df:8f:4d:ad:e9:51:
         be:a8:bd:33:3d:c9:b2:86:68:7e:f6:dd:bf:59:11:e2:f3:44:
         bf:d5:f4:9b:76:b3:c1:15:62:c9:85:33:54:a6:8a:93:44:68:
         cb:3e:78:b4:f2:84:c0:7b:b3:ee:8f:58:3b:1b:40:c8:5f:d4:
         c4:f4:be:e0:07:4a:83:23:38:d1:f4:55:02:5f:79:e0:59:da:
         05:8f:d2:cb:c9:34:a7:a6:42:e4:2c:03:d8:fe:0b:1b:04:c2:
         bd:f9:3d:3f:d4:9b:9d:a5:88:de:ab:ec:04:55:c0:7e:04:33:
         c5:ab:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:06 2025 by rpki-client