Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          wP3vXvXXm7DZtjfbUdYCJ1u5aE9xvcPCCiwyXxUIzw8=
Subject key identifier:   EF:82:55:AF:BF:07:47:BD:74:07:FC:DC:D5:0F:08:47:F5:F7:46:39
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       0FE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          0FBB
Signing time:             Wed 14 May 2025 17:39:53 +0000
Manifest this update:     Wed 14 May 2025 17:39:52 +0000
Manifest next update:     Wed 21 May 2025 17:39:52 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: +o5bJP99uH6+VTGg2EDilssKx1f2BN96kS6EU5IuosQ=)
                          2: 623283BC2E8D11F099F38C68C4F9AE02.roa (hash: g+TJ2RbeRLlUsgRaIQX7+NMc+cBZoi70QxzoNuHppo4=)
                          3: 53E5E76C2BEB11F0B6404111C4F9AE02.roa (hash: UrkCA5c49lhfjbu20IVP5ulUImNhUwsB0Dx6P4o2Exs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4067 (0xfe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: May 14 17:39:52 2025 GMT
            Not After : May 21 17:39:52 2025 GMT
        Subject: CN=6824d569-94a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:fe:5a:e7:62:e1:b6:a0:00:d6:4e:7e:18:
                    84:6a:e9:19:2b:50:7f:49:15:78:ea:68:bb:38:c7:
                    65:42:a0:46:24:a7:f9:d1:25:94:3d:ff:f3:70:e0:
                    55:b8:ae:1f:59:aa:90:d7:b7:ce:8c:7c:93:9d:b6:
                    64:01:85:cd:af:0b:dd:94:29:ab:56:48:0f:6c:b9:
                    bf:a8:95:20:5f:2b:c9:30:c8:c0:a0:88:a1:1c:fa:
                    0f:90:0c:d3:c7:e8:1a:7b:1e:49:de:35:01:57:47:
                    00:20:84:7e:94:de:75:df:e8:a1:77:44:e1:af:94:
                    c7:2f:df:ab:8a:35:e5:57:4c:14:43:52:2a:fd:18:
                    48:2f:d8:85:7c:2c:e8:a1:a6:b8:2d:76:e8:82:c1:
                    a1:b2:b6:63:1a:ff:34:ab:20:b3:72:ac:c1:07:f0:
                    2b:60:d2:a2:45:d0:fa:d3:88:a8:36:ea:21:d8:a1:
                    42:75:75:04:20:27:c4:d7:40:74:0d:cb:ac:4b:ea:
                    11:71:8d:d3:27:dd:60:4d:a3:ed:90:84:71:3f:da:
                    fc:f6:6b:b0:5d:5d:69:36:36:76:5d:b3:c8:75:26:
                    43:29:f4:41:70:ed:6b:8a:3f:2e:a8:a5:e6:8d:6c:
                    72:95:fb:8c:22:f9:d8:c5:8a:5d:b1:16:3c:60:2b:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:82:55:AF:BF:07:47:BD:74:07:FC:DC:D5:0F:08:47:F5:F7:46:39
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:aa:1c:5d:a8:a7:b2:9b:71:f1:f6:ae:91:b6:0d:24:0a:
         19:60:fc:d9:95:dc:3b:6d:c8:da:ce:5e:72:e9:3a:22:85:4b:
         8f:3d:35:c2:46:e9:e2:46:1a:a6:d4:55:e7:ac:d6:df:5f:15:
         67:93:06:3e:c9:23:93:38:26:cb:d0:ea:5d:1a:e3:7b:70:04:
         c2:f0:8f:cc:6c:bc:75:31:ff:9e:80:60:d7:4c:b8:4d:dc:67:
         4f:6f:06:8d:2b:7f:82:e6:76:c5:d1:b2:17:44:78:a0:b1:b2:
         44:04:10:84:cc:8e:3a:1a:2c:3c:18:6d:50:59:5a:2d:f8:22:
         30:72:1f:7d:20:87:5b:30:b9:3a:4b:94:48:00:04:16:6a:38:
         c5:63:c7:1d:f1:7a:11:5e:5f:af:0a:c5:2c:ed:83:a2:db:82:
         c1:bb:9c:5a:81:fd:63:ee:0f:d5:04:52:4c:70:8a:81:c8:32:
         62:a5:e1:40:82:6d:ed:63:07:92:ba:8b:0d:af:df:7c:31:b5:
         ba:c7:f5:29:03:ff:4e:d3:7e:5d:81:ff:60:2a:58:2c:b5:30:
         d4:55:99:0f:e5:64:95:d9:01:08:15:9a:16:29:62:d1:d3:80:
         69:db:57:64:78:46:14:4b:bd:7d:b6:6e:5f:aa:55:4d:27:8f:
         c6:89:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:08:24 2025 by rpki-client