Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File:                     T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier:          6KyLSJFLFuSUJ6Fq9BXTEC4W2MJ0H2vNGNSx6l/IXGU=
Subject key identifier:   71:87:F9:A0:18:F4:08:F2:A6:05:7A:9E:CC:A2:3B:09:D1:13:64:A4
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer:       /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number:          01A6
Signing time:             Tue 13 May 2025 02:34:29 +0000
Manifest this update:     Tue 13 May 2025 02:34:28 +0000
Manifest next update:     Tue 20 May 2025 02:34:28 +0000
Files and hashes:         1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: 15fG0xXg7EpsGSxgndAmr975VpFypmEEHY7k2DstN+8=)
                          2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=)
                          3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=)
                          4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
                          rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
        Validity
            Not Before: May 13 02:34:28 2025 GMT
            Not After : May 20 02:34:28 2025 GMT
        Subject: CN=6822afb5-1a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:4d:d4:70:03:39:53:1b:e2:ca:98:7a:fd:
                    94:13:98:36:b0:1d:bf:33:5b:20:8d:0a:fc:cd:48:
                    fb:a1:5a:ee:96:b7:16:7a:57:fb:b4:f2:6a:88:54:
                    22:b5:e4:7d:85:8c:b2:ef:ed:af:22:f6:88:64:03:
                    e2:e7:1c:2d:1e:1a:ee:4c:09:48:d3:81:6d:c0:68:
                    36:f6:78:23:8c:32:57:3d:5c:53:ff:aa:af:01:e2:
                    87:ea:85:f5:a1:ad:20:53:59:d5:82:fe:3a:d0:5b:
                    4e:97:7d:95:38:a8:05:55:9a:10:43:98:1d:da:bf:
                    cf:bf:57:ed:77:02:8c:81:2c:6d:89:c8:2b:38:fb:
                    a0:fe:3c:00:62:7e:35:7e:df:9f:67:e7:7c:8c:53:
                    12:f1:4f:46:76:ad:b2:e8:36:ac:43:e0:88:59:03:
                    b2:5f:2e:34:82:9d:22:cb:89:ad:b2:f8:ce:1b:f0:
                    64:4c:80:a7:b0:fd:6c:be:8c:0c:a3:0a:a8:f7:11:
                    0b:8d:4d:4e:1b:d1:d1:03:86:3f:98:4b:a9:72:7f:
                    7b:11:e7:2b:b5:1f:50:40:0d:77:e2:9f:e2:6e:b1:
                    25:69:51:6e:7d:9a:bc:0a:fa:f2:48:c6:fb:f3:fd:
                    cc:12:ec:72:7e:09:95:c3:fa:80:f7:ad:99:d8:34:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:F9:A0:18:F4:08:F2:A6:05:7A:9E:CC:A2:3B:09:D1:13:64:A4
            X509v3 Authority Key Identifier:
                keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:d3:21:8a:60:5e:9c:96:b6:94:f7:dd:b6:35:6e:44:ba:
         08:4a:2d:17:2f:56:44:1a:0f:be:43:ae:e2:a7:2b:1a:2e:39:
         a0:ad:e6:60:ed:52:eb:bc:71:d9:01:70:31:ca:a6:3e:41:68:
         ec:6f:ca:c3:03:0e:90:af:4d:6c:3e:50:04:d1:b4:91:d6:3f:
         aa:38:ae:f5:ba:f0:10:0f:c5:e2:02:27:75:b3:69:38:e3:93:
         c6:fd:4d:58:43:69:e3:4c:e9:23:99:13:d1:a6:6d:88:0c:49:
         71:75:0b:87:00:23:fe:06:8a:00:94:f5:7d:1a:75:df:77:54:
         0d:52:03:05:2c:3f:aa:e9:00:7c:3d:47:eb:f6:67:54:a0:8c:
         f5:71:28:28:d3:31:e3:29:34:71:a5:66:79:d3:5e:01:af:a5:
         f7:2d:2a:a3:fd:1f:56:db:15:de:03:78:f7:ac:82:69:fa:9f:
         52:dd:83:3e:bd:e3:8c:50:0d:59:1f:c7:86:88:31:28:51:4b:
         6a:de:85:2d:90:f0:a4:ff:aa:85:39:8c:9c:43:04:46:9b:8d:
         b3:9e:65:23:2f:59:83:fb:54:f6:fc:f7:09:ab:b6:7e:d9:b5:
         6e:68:06:15:cd:db:c2:cc:bc:2f:f4:cd:22:5c:b1:fb:b8:40:
         0c:55:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:38:13 2025 by rpki-client