Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          Cae7wXkMnPnZPRAruXh+2pEEHPEsx6s3QSFqDpoYD84=
Subject key identifier:   26:89:04:A9:82:6E:46:FA:BF:1C:5F:02:77:41:2B:87:86:49:35:D8
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0EE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0EDB
Signing time:             Wed 14 May 2025 17:47:34 +0000
Manifest this update:     Wed 14 May 2025 17:47:34 +0000
Manifest next update:     Wed 21 May 2025 17:47:34 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: 7ud95lnLea8H8Hfa7y3eU6vkp8C6CKyzY3CxSvXAHmQ=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: +5h350Entxop10VDTkTCS9JuaJOuqYNRDCA3VkMIaEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: May 14 17:47:34 2025 GMT
            Not After : May 21 17:47:34 2025 GMT
        Subject: CN=6824d736-369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:20:2b:33:9a:c7:21:c8:f5:27:7c:d5:54:
                    80:4f:21:08:0e:f2:7b:09:f4:84:bb:9e:eb:9c:38:
                    f7:cc:24:4f:16:88:00:03:ce:f5:f4:5e:6f:0f:91:
                    eb:44:1b:df:a0:6e:b4:26:40:b1:6f:22:4f:40:9b:
                    46:96:82:22:41:0a:12:18:da:99:ca:17:72:d3:45:
                    56:30:64:36:5c:2b:b9:81:6f:47:b4:1e:41:71:ed:
                    05:a5:90:a1:e8:6e:57:b7:51:c3:99:2a:37:79:92:
                    0f:93:6a:3f:28:15:42:b5:0f:81:57:54:48:3a:09:
                    61:85:c1:5d:43:39:23:85:77:51:e1:57:fe:c8:b9:
                    d7:95:d1:20:57:f2:1c:ec:f5:c7:57:6b:7c:81:fa:
                    01:d9:8e:f8:7f:d0:ac:22:93:b4:d3:49:da:3f:48:
                    14:81:fd:f1:bc:7f:74:91:ba:ce:0c:58:22:dc:8d:
                    f5:1a:80:86:6a:c6:de:65:ae:09:79:5a:f7:84:2a:
                    76:e2:b8:b1:24:80:59:f2:e2:8a:59:8d:05:52:e8:
                    c1:31:8e:f4:b4:10:d1:83:2a:59:9e:cf:5c:8c:41:
                    d3:a8:40:a4:c6:ab:e0:c2:d3:a1:54:ef:c0:6a:0a:
                    72:3a:53:56:be:e4:fe:66:56:2d:c5:32:58:44:8c:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:04:A9:82:6E:46:FA:BF:1C:5F:02:77:41:2B:87:86:49:35:D8
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b4:c4:da:0a:81:06:d7:ea:83:f4:43:da:51:b7:1c:2a:01:
         44:bf:7e:67:ba:51:0e:58:89:2b:3e:af:04:83:68:2a:15:8f:
         19:86:f9:2c:9d:fb:29:05:23:7e:db:f8:d4:07:58:d6:a0:43:
         2c:27:98:b6:58:db:9f:45:41:b7:3a:4e:c4:1b:b1:ce:4c:b4:
         15:d1:27:f8:e9:c5:39:eb:45:25:eb:13:12:b8:cd:26:f0:fd:
         82:4c:0c:d1:46:3c:c2:b7:84:ff:f3:88:e3:24:3d:57:30:e3:
         44:d5:e1:af:dc:cf:ec:8e:9e:a6:73:12:b3:af:05:4a:de:be:
         c3:34:f0:cb:a7:db:c1:11:db:f8:4f:c5:e4:97:25:a7:46:83:
         ad:73:3b:b6:60:65:5d:b6:7b:a8:b5:a1:6b:04:9d:68:f3:b9:
         12:e6:06:d7:9e:89:9f:41:78:d8:11:52:eb:0c:41:3e:66:9f:
         63:ab:7b:96:94:cc:5f:18:85:80:c9:5a:ee:33:bc:06:55:01:
         25:77:a9:27:bd:fb:1c:b1:e7:6f:5a:d2:93:0d:0b:68:09:cd:
         15:ed:44:5e:44:9e:47:06:cb:44:27:70:2c:0d:db:bd:c2:23:
         16:c7:44:1c:39:a1:65:a7:64:35:bf:6b:72:d6:96:e8:f3:c1:
         f0:ba:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:22:58 2025 by rpki-client