Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          dYN+2keX7eH5mv/r5OyqMsKid93c4SRpCp2QRJESKUY=
Subject key identifier:   CE:64:44:3E:A7:3D:63:83:8D:F2:2E:C5:A8:47:B0:5A:0B:1A:EB:25
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          58
Signing time:             Thu 13 Mar 2025 05:12:43 +0000
Manifest this update:     Thu 13 Mar 2025 05:12:42 +0000
Manifest next update:     Thu 20 Mar 2025 05:12:42 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: p0QV98zxQGH/y6fkOleQb4k9dNOfXimxbCEEAWOF2S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 05:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380
        Validity
            Not Before: Mar 13 05:12:42 2025 GMT
            Not After : Mar 20 05:12:42 2025 GMT
        Subject: CN=67d2694b-75d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:f7:38:93:d9:7b:ca:ef:26:ad:ef:1a:d8:
                    dd:ea:e4:65:a5:e9:0f:8c:0d:6f:e9:a0:b1:09:70:
                    68:30:2a:8a:2f:22:f0:05:9b:87:14:e9:fe:c9:3f:
                    67:65:fe:17:42:fe:df:58:c1:20:5e:bf:8d:79:0e:
                    50:a7:8e:00:ed:4f:5a:cd:78:69:55:85:4f:28:51:
                    2c:a5:48:ac:98:e7:9b:2a:a8:f6:60:89:ea:2d:49:
                    84:4d:bf:1b:3f:e8:51:90:5f:47:82:8c:45:39:71:
                    63:3b:8a:e2:b5:c1:b0:79:a0:51:8e:34:4e:6c:94:
                    5f:f1:9b:25:94:16:36:cd:71:16:f6:ff:39:c0:aa:
                    2c:3e:97:39:ca:f5:33:09:e1:41:ba:83:df:e7:1e:
                    ac:8f:67:f3:6a:2e:b8:57:a9:75:f2:b9:07:25:3c:
                    da:44:2b:af:23:c5:d4:0a:ee:44:45:9d:af:d6:fe:
                    ea:13:22:42:dd:a4:15:90:4c:95:7c:b4:26:93:72:
                    aa:e5:c9:66:44:56:92:44:99:47:e0:a6:d7:32:eb:
                    54:b9:ca:ad:af:90:ed:55:8c:6b:b6:dc:94:db:e1:
                    af:90:5a:5c:18:0a:87:03:08:f9:ab:f6:b3:08:10:
                    e1:bc:73:6b:57:9a:e0:9b:94:37:29:9b:04:6d:93:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:44:3E:A7:3D:63:83:8D:F2:2E:C5:A8:47:B0:5A:0B:1A:EB:25
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:d2:dc:cc:95:78:41:94:01:56:2f:5a:16:cd:3f:61:b3:
         87:63:d7:83:89:d1:42:32:5d:2b:6c:13:9d:de:9a:ed:d9:eb:
         06:67:dd:36:5d:eb:00:9d:63:a3:c9:ba:6e:74:4f:a9:5b:d1:
         0b:89:5e:b4:34:a7:8f:ef:93:c8:e0:44:4d:dc:d5:9c:7c:5d:
         5e:7e:0a:22:bc:1a:fd:27:5c:f6:1f:81:e8:6d:83:c2:6e:12:
         1e:1d:3a:a9:9e:4b:dc:67:3b:1f:18:de:3b:3c:f8:c7:f4:2e:
         00:4a:b2:ce:fb:cd:1d:7d:8f:a5:0c:1e:7f:ed:00:fa:f5:11:
         1c:c9:9e:1b:ba:06:c0:74:55:37:ab:07:5f:d0:fb:72:b9:c5:
         5d:cf:c5:51:dc:29:be:f2:6d:c7:6d:ec:89:33:8a:f1:d9:ff:
         c1:19:5c:86:c3:51:e0:70:60:f6:89:97:90:93:05:01:3b:4e:
         e6:e9:8d:9b:f3:d8:9b:21:64:9c:07:08:3f:cb:5d:58:f3:7a:
         5b:a3:ce:63:22:aa:5d:f5:6c:2b:78:4c:b7:9d:8f:1a:8a:ad:
         6b:e4:59:36:05:c2:5d:cb:9f:3d:c2:d3:00:55:10:f9:16:23:
         0f:08:cc:e0:42:5d:9d:00:04:dd:f3:a1:08:a9:bc:3e:32:3c:
         4a:94:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:02 2025 by rpki-client