Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File:                     E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier:          f2g8U1YYXN6psfj1XFNculLO1EJVojj45ZAsw+bRFVw=
Subject key identifier:   2E:2D:D1:26:A1:9B:9E:49:06:DE:50:20:5C:E2:C1:A7:F9:06:5B:DB
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer:       /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial:       0C6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number:          0C57
Signing time:             Fri 30 May 2025 18:37:30 +0000
Manifest this update:     Fri 30 May 2025 18:37:30 +0000
Manifest next update:     Fri 06 Jun 2025 18:37:30 +0000
Files and hashes:         1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: coErYJDrPF3X+05L0auTRC4l08g6Z4r0t1FgGwWMxj4=)
                          2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=)
                          3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=)
                          4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3181 (0xc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
        Validity
            Not Before: May 30 18:37:30 2025 GMT
            Not After : Jun  6 18:37:30 2025 GMT
        Subject: CN=6839faea-e213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:76:13:a8:7f:84:1f:cb:a3:8e:bb:13:91:
                    35:80:2f:14:6b:ea:df:b8:f7:de:6b:b1:eb:26:cd:
                    13:92:f4:df:e1:b5:66:b2:7b:99:01:65:27:28:4f:
                    24:3e:df:91:65:2f:9a:ec:a8:41:8e:79:67:a7:54:
                    6b:6c:9c:d5:c2:56:a3:c2:8a:99:7a:4a:c0:c4:89:
                    c5:cf:f2:60:4c:c0:66:ef:95:c2:49:a5:73:6d:6a:
                    93:3e:a6:d0:2f:6e:7d:28:b4:a7:24:e7:e2:e2:f8:
                    31:49:f3:86:bd:ff:ab:bd:2b:cc:31:52:3b:74:02:
                    aa:6d:8c:b7:88:97:58:53:f4:67:f6:7e:52:05:8b:
                    3c:07:a0:9f:e5:fe:92:01:50:f2:35:b9:3a:f5:c4:
                    29:62:da:67:45:99:4e:5d:0e:b6:34:f5:05:8e:6b:
                    d4:82:bd:3f:24:82:30:8e:a1:23:bf:9d:23:e7:0b:
                    f3:ca:43:68:9f:31:08:b8:a7:fd:e8:38:39:dc:ff:
                    82:47:22:36:a8:e9:03:e9:8a:24:ff:89:57:f2:a2:
                    88:52:21:29:ef:80:7d:d2:13:89:60:64:93:cf:b7:
                    60:71:ba:15:4c:5c:15:a5:11:ab:26:06:e4:ea:fb:
                    5f:c6:2c:42:e6:e2:61:d6:dc:e8:fe:27:4e:e5:cb:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2D:D1:26:A1:9B:9E:49:06:DE:50:20:5C:E2:C1:A7:F9:06:5B:DB
            X509v3 Authority Key Identifier:
                keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:a6:29:4d:bb:21:a3:10:7d:d8:e5:ab:55:c4:da:ce:92:
         cc:01:25:82:9f:f5:4c:8c:ea:66:36:5d:8f:9a:43:3c:4c:4f:
         f3:0f:4d:00:31:f2:de:6b:2f:1a:87:8d:9f:64:0a:ac:7f:05:
         dc:e4:70:01:4e:f6:e4:9a:bf:1f:c0:45:15:5c:51:ad:83:b3:
         5c:63:5e:36:e8:14:55:31:d9:55:29:9c:b8:45:69:09:6d:bc:
         a7:e1:83:f5:39:9f:1f:4a:9d:97:0a:4d:31:40:e9:a9:23:a3:
         6b:64:37:bf:88:03:98:23:d1:3f:00:2c:28:d2:38:3d:cc:15:
         dc:fb:43:a5:f9:30:e0:b7:a2:33:f2:6f:07:bc:34:5c:bf:38:
         95:15:99:7f:aa:cd:02:c9:82:06:20:20:38:ab:c4:65:1e:67:
         68:f2:1f:84:4c:dd:78:fd:39:aa:a1:b6:e2:69:67:84:aa:f0:
         d4:7a:43:d8:a8:ec:d3:20:d9:23:65:1a:bf:b8:a7:39:5b:60:
         e4:6c:72:e5:8e:d3:25:55:97:d8:11:f7:4a:bc:dc:a4:c4:0d:
         43:34:a5:9e:b4:2a:10:ba:74:61:df:0c:55:b8:5f:05:7a:c0:
         67:37:c4:02:e8:9b:09:10:01:a0:0a:88:1d:f0:b4:e2:55:2e:
         be:6a:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:37:41 2025 by rpki-client