Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File:                     rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier:          hRpiUYLNNw8yHq7ZWXgHrOn1hu3qgRoFQi+QtHUYqTY=
Subject key identifier:   88:77:59:13:26:4B:EA:AF:DA:CC:EC:A5:D8:C4:0F:D2:C5:B8:E2:B9
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number:          57
Signing time:             Wed 09 Apr 2025 06:01:38 +0000
Manifest this update:     Wed 09 Apr 2025 06:01:37 +0000
Manifest next update:     Wed 16 Apr 2025 06:01:37 +0000
Files and hashes:         1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 1Zt9P3tNtftGsCXRu0TCEpph//IJZpw57F0vsoPFBfE=)
                          2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94
        Validity
            Not Before: Apr  9 06:01:37 2025 GMT
            Not After : Apr 16 06:01:37 2025 GMT
        Subject: CN=67f60d41-0521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:17:57:a4:12:72:7f:cb:14:31:c9:95:dd:
                    15:88:a0:57:9e:40:4b:59:2e:2d:c3:be:b5:99:0f:
                    0e:35:3e:17:6d:b4:37:ee:c3:a5:ed:b0:c2:39:6d:
                    fc:1b:93:63:76:f8:af:12:fa:03:31:e1:a0:a3:5e:
                    b3:91:cb:66:4a:18:8a:0a:45:88:ff:e2:7b:9f:ff:
                    6c:63:9c:b6:7a:d8:b1:8b:69:f9:fe:51:a0:80:1e:
                    5a:d2:5d:3c:6f:8e:80:68:ba:23:34:19:b8:47:95:
                    35:cc:e5:b5:bc:5f:50:86:8b:8e:d6:c1:98:8c:35:
                    14:d9:91:a9:98:7e:33:1a:03:7e:e7:04:10:cf:e6:
                    d6:ff:88:b3:65:ae:6e:05:08:7d:3e:31:2e:4b:25:
                    0f:65:e0:ff:87:09:99:06:43:64:e6:54:90:33:0a:
                    ea:e9:92:b6:e1:c3:41:f6:24:d0:6d:8e:97:e2:e3:
                    1c:97:fb:02:4d:cf:22:de:a2:74:ea:36:58:b5:95:
                    35:da:56:5c:14:0c:6d:fb:5b:40:90:b5:ed:30:6d:
                    51:a9:3d:a9:8a:8d:7c:58:1c:c3:60:75:ee:4f:18:
                    56:4e:b1:18:6a:ba:68:c3:72:5c:93:93:68:89:73:
                    e5:21:c2:b5:ec:3f:dc:14:0f:1e:90:dc:2f:ca:cc:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:59:13:26:4B:EA:AF:DA:CC:EC:A5:D8:C4:0F:D2:C5:B8:E2:B9
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:72:06:a4:cb:c0:39:d3:3b:ac:99:35:e0:56:e6:1f:5d:c7:
         49:dc:f7:08:b5:06:cd:7b:fa:8d:d5:c6:9f:9a:f7:f5:a8:9e:
         57:0e:9d:d2:93:e6:1b:11:22:ec:cf:4f:79:93:df:29:81:02:
         3b:b1:71:ba:c2:fd:a5:46:88:f9:64:60:07:09:23:4d:eb:89:
         47:cb:0b:cd:8b:a5:8e:ac:47:ce:f6:83:55:fc:6f:63:35:9b:
         2e:2b:b0:ef:ba:bb:e3:57:c1:9d:91:52:10:c0:90:27:d0:25:
         df:e2:7d:63:86:bd:af:bf:ee:9d:77:0d:be:f1:1a:1a:24:48:
         75:dd:be:ef:5a:e7:95:93:8f:5e:39:66:c1:27:2d:14:b4:1b:
         f8:f2:48:86:61:e3:0e:e4:06:04:79:ae:a7:60:13:9c:fd:15:
         c7:f6:ee:2b:b5:56:4c:b1:b8:66:aa:c0:25:c0:dc:2e:a7:05:
         55:5b:20:d6:3e:fa:2a:57:84:3a:d7:d8:c8:60:22:2a:67:c9:
         37:17:bf:d9:c1:b0:f1:99:73:1f:b5:25:97:d7:68:e8:25:f9:
         a1:32:0a:6f:f8:f1:ad:82:fe:3e:38:12:63:4a:61:31:0f:98:
         61:9c:75:7c:4b:e1:ff:ad:93:77:c3:b6:91:68:bf:a2:59:7a:
         08:c6:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:20:27 2025 by rpki-client