Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          5tP/kLgZbrdpMY3ydY1s3Bct2Qh/E2jZ9WR2xhzOMiU=
Subject key identifier:   0B:D4:5B:EC:47:B9:16:24:C4:34:BC:6D:1B:16:00:04:0C:CE:66:46
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          CE
Signing time:             Tue 13 May 2025 04:56:11 +0000
Manifest this update:     Tue 13 May 2025 04:56:10 +0000
Manifest next update:     Tue 20 May 2025 04:56:10 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: M1j0YVeiUwQ2A8xJu9yKu/HqfSAKmhyCpkn8lMouHPI=)
                          2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: BxxzK7GYnNA6XmcJ/JSez9aRNvqpHtoWf05MXCUT/Bs=)
                          3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: May 13 04:56:10 2025 GMT
            Not After : May 20 04:56:10 2025 GMT
        Subject: CN=6822d0eb-f25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:fe:17:84:b1:4f:d1:76:86:93:2f:aa:f1:
                    10:15:64:a8:f4:74:47:96:92:b8:28:12:a6:0a:cb:
                    ba:8d:4f:70:fa:ca:e5:12:9e:d7:84:12:20:fd:dc:
                    90:b6:3e:95:6e:06:80:5a:5a:87:1c:56:6c:78:de:
                    8a:97:30:10:fd:1b:a4:f1:a7:29:a7:5a:1e:29:fe:
                    88:bc:e6:ba:cb:1e:b7:8c:44:60:ff:65:9b:31:d3:
                    c5:f1:52:42:55:23:c9:50:d4:93:ee:0c:60:a8:7c:
                    37:b2:35:fb:d1:53:8e:52:fb:bb:5c:2d:c3:13:68:
                    19:8f:f4:f8:6d:68:de:f4:dd:71:7e:39:ad:02:52:
                    29:80:4d:fd:00:b2:0e:89:34:10:18:d8:82:f5:76:
                    7c:61:34:7c:ac:b2:ec:54:6b:c2:2d:fe:ad:c7:e0:
                    c1:33:7c:47:99:4d:c7:57:5f:b8:3f:aa:9d:2f:fb:
                    bc:7b:bc:16:72:0f:ea:ef:24:22:ce:f6:db:26:91:
                    46:a8:5f:82:92:a1:0e:73:4e:19:d4:19:09:62:8f:
                    f7:e9:95:08:11:6a:66:f0:2c:61:6f:d5:76:30:de:
                    c2:39:13:0d:5b:5a:8a:1b:b7:c9:77:e3:13:ee:b6:
                    fe:f0:fb:25:19:0c:7b:24:f5:94:f1:3c:6e:42:e1:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:5B:EC:47:B9:16:24:C4:34:BC:6D:1B:16:00:04:0C:CE:66:46
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:01:80:03:e7:c2:c7:7b:be:3d:10:e7:6a:09:68:02:bd:60:
         5a:22:fd:08:9f:01:76:77:8d:5f:3a:05:15:df:77:ab:1c:1f:
         ca:63:ef:2a:b1:85:a2:46:6e:e9:c5:bc:3b:e7:e6:a1:29:95:
         40:3b:91:c7:88:03:48:ea:bf:3c:60:75:ef:97:22:bd:31:ff:
         5f:4d:65:d5:14:0e:b6:bb:21:1f:b6:90:83:f0:83:bc:0a:0b:
         18:4c:5f:50:2f:8f:89:59:0a:11:56:af:a8:d3:c7:78:d0:74:
         a7:9a:26:37:42:64:98:5e:af:ab:6f:d4:b8:4a:0a:29:28:98:
         ee:91:65:56:61:dd:93:55:43:01:bf:4d:63:2f:62:e5:a8:f4:
         3d:0b:db:3e:96:51:ba:80:fa:b5:f3:25:96:fa:c3:8f:d0:00:
         d7:f8:d6:1b:6e:39:a8:41:65:0a:77:9e:c2:ce:50:7b:e2:99:
         6e:21:26:d1:9c:f9:43:62:b9:35:11:07:24:5e:7c:0d:0c:16:
         61:1e:38:91:a2:3d:91:f9:82:73:41:76:2c:63:3c:6b:c3:60:
         31:4b:82:37:0b:58:af:59:2a:ed:e2:72:60:53:62:22:11:c9:
         c7:f0:b6:cd:e1:96:6a:1e:98:e3:dc:d2:fb:24:16:04:bb:44:
         3f:d5:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:05:26 2025 by rpki-client