Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
File:                     RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json)
Hash identifier:          dVhvcqkxTYSecz2O3n5vLX3xPpUGglbm+9SexGZYDxc=
Subject key identifier:   1B:9D:9C:48:BC:6F:6E:63:E2:FA:6B:CD:AD:02:B0:F4:22:04:DC:13
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
Manifest number:          0629
Signing time:             Mon 12 May 2025 20:32:44 +0000
Manifest this update:     Mon 12 May 2025 20:32:44 +0000
Manifest next update:     Mon 19 May 2025 20:32:44 +0000
Files and hashes:         1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: fBUC0wZShWlhcLikXGUtc2e1Peeq9Rb2VEq2i0rEPHE=)
                          2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 8e05gzQi7pUAaZxz5oxTvUQfM0A7KbTjJTrGpKehcUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 20:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: May 12 20:32:44 2025 GMT
            Not After : May 19 20:32:44 2025 GMT
        Subject: CN=68225aec-402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:77:80:11:6b:bf:32:06:5e:ef:80:78:1e:
                    11:7c:c7:bf:21:b2:4f:36:fd:1d:ae:bd:63:0e:98:
                    14:96:06:59:ff:9f:2b:68:c1:ad:b6:03:41:c7:fa:
                    a3:da:d5:1b:b2:54:29:ea:54:f7:19:62:75:74:c0:
                    3e:3e:15:ab:12:c9:b3:4f:13:53:44:96:d1:05:ae:
                    0b:a9:f5:54:ad:f2:65:9d:02:bd:0c:72:b6:69:7f:
                    90:1e:e1:59:1b:f0:1a:14:cb:0c:dd:a7:83:cf:e4:
                    3e:bd:7c:d8:af:d5:c7:f2:db:ba:ea:50:21:8b:de:
                    a4:42:9c:f1:72:fd:49:d7:2a:43:5d:bb:ba:37:f9:
                    52:83:ed:be:77:47:cd:32:ad:58:67:8f:93:e6:83:
                    87:63:e7:40:a9:64:77:39:ac:30:49:ec:a9:b8:b5:
                    c8:9e:65:88:02:19:ba:4d:44:5a:a9:c5:a9:9b:a8:
                    0e:f4:ec:fe:77:75:ae:97:f2:12:da:04:eb:6a:ce:
                    c1:f6:9e:62:fe:2e:2e:b7:d9:d3:d5:ab:7f:2a:f5:
                    c9:80:f2:71:4b:76:7e:e3:bb:f4:a6:d5:c1:bf:23:
                    b6:45:b2:92:45:9c:a8:86:30:d6:1c:39:63:cc:60:
                    59:b3:1b:1c:ec:87:bb:0c:60:46:df:da:21:49:b5:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:9C:48:BC:6F:6E:63:E2:FA:6B:CD:AD:02:B0:F4:22:04:DC:13
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:cd:ea:d0:c7:ab:42:d4:e7:02:46:00:72:ee:62:40:f4:
         40:a6:31:1e:f5:a4:7b:58:1d:42:db:c3:d9:7f:de:e0:d6:72:
         e7:d4:c2:1d:09:33:23:1f:a4:cf:42:be:f3:c4:19:c9:40:e3:
         72:24:4b:46:bd:be:c7:28:e5:a9:23:e9:01:81:fc:d8:26:1c:
         30:37:ad:64:4d:77:75:e0:64:86:1b:9e:3d:42:64:f3:0d:cf:
         e1:ea:e4:b7:30:44:88:da:b0:32:83:65:a0:95:64:83:27:f4:
         62:c8:93:8d:b6:f5:73:89:dc:12:88:d8:dd:cc:65:af:63:e6:
         70:db:7b:a4:dc:08:ae:c4:35:e6:96:ba:07:74:c6:72:80:74:
         9d:21:6f:f5:f7:f3:58:85:b2:3a:3f:d7:15:24:68:34:3c:95:
         76:33:f6:a9:5b:63:cc:27:d2:8a:32:5e:bb:a6:55:98:0b:a3:
         28:15:5c:04:9d:4d:f5:56:36:93:49:ee:41:43:33:9a:d8:16:
         30:fb:38:14:be:b6:9c:95:56:14:a0:37:06:04:4b:9e:d3:03:
         80:11:9c:0d:34:57:8a:95:18:e1:78:05:56:76:ae:ec:be:56:
         1c:57:e6:dc:16:84:d3:ed:af:3e:81:00:31:54:82:c4:af:18:
         94:06:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:56:24 2025 by rpki-client