Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          cRFurSXb7Bc7FAzTWJRzwe4TdTNFwBJDgj+TAf6CG9k=
Subject key identifier:   16:93:C3:A0:6F:A7:C6:17:DC:B4:54:67:A6:C0:4D:35:82:F6:CA:1B
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          011E
Signing time:             Tue 13 May 2025 04:02:16 +0000
Manifest this update:     Tue 13 May 2025 04:02:16 +0000
Manifest next update:     Tue 20 May 2025 04:02:16 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: l53YUAvvv5fzwIhqPRGuqQpgZF7Sgxg6gXIKN0dQwms=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: May 13 04:02:16 2025 GMT
            Not After : May 20 04:02:16 2025 GMT
        Subject: CN=6822c448-2644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:4d:cd:ed:41:e6:25:a1:89:e5:6e:cf:f7:
                    38:70:e3:5d:c0:7b:67:7f:4d:21:55:dc:fd:da:fa:
                    c6:37:5c:89:5f:69:67:62:3d:6d:ec:c0:56:82:3a:
                    88:4b:ec:20:e8:ce:30:d5:d7:60:69:e0:a1:6b:9f:
                    43:73:33:91:8f:79:41:a7:36:50:a4:06:5a:ea:35:
                    46:2f:f5:0d:2c:42:66:06:e2:b2:10:be:af:83:38:
                    52:80:a1:eb:d4:c1:2e:bc:9e:75:e7:b3:f2:df:32:
                    c8:44:28:79:f7:66:22:36:01:fe:81:69:31:ee:66:
                    fb:b0:53:23:15:94:81:92:d5:b5:98:f8:20:a9:6a:
                    11:de:ba:5a:70:d9:8e:fe:f7:a0:93:62:e2:88:3a:
                    f5:f2:c9:c7:a9:be:39:fe:49:38:2b:5f:8c:5d:73:
                    cf:6d:8b:06:4c:91:c1:ca:9c:eb:8e:b6:2a:63:f4:
                    7c:31:a1:30:27:22:7b:90:d8:a8:1f:82:c3:cf:8a:
                    17:24:2f:d6:a0:93:ef:79:8b:9f:eb:7f:3b:55:75:
                    c1:11:8c:fb:4d:b0:c4:37:87:4c:d8:68:93:a1:81:
                    ec:e4:8e:5f:71:5a:84:06:9a:5e:01:9f:57:f7:da:
                    a8:c3:39:4b:de:57:21:62:12:27:88:28:b7:62:0b:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:C3:A0:6F:A7:C6:17:DC:B4:54:67:A6:C0:4D:35:82:F6:CA:1B
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:5f:ae:ca:c2:45:7b:85:34:6e:fd:41:1f:8e:78:00:7f:
         b8:c3:38:ed:31:98:16:79:df:80:37:54:32:26:10:c3:6d:14:
         24:4b:65:b2:0b:32:7f:51:69:82:0c:28:51:dd:50:5a:47:64:
         45:4c:cc:94:d3:05:2f:a4:9d:ee:26:14:ea:0e:c6:5a:d7:06:
         bb:75:de:aa:32:c1:b7:87:a8:5d:35:05:b4:cb:be:62:43:c6:
         da:79:38:4e:ed:b0:7e:a5:52:f4:2d:dc:68:ac:4e:8f:6d:36:
         15:90:37:94:70:c5:6e:a1:76:82:07:80:31:01:96:7f:b9:6f:
         14:43:6c:51:44:3d:9c:d7:80:1d:78:b0:da:8a:66:18:bb:cd:
         94:c7:eb:a2:99:b7:db:be:a5:a8:7f:0b:20:42:8d:7b:ea:a2:
         b7:54:11:b7:cb:23:a8:dc:79:e8:fb:4e:36:59:03:2b:8a:7d:
         e3:6b:72:9c:e0:8d:d6:af:f1:42:d8:08:12:2c:41:d2:26:95:
         84:4f:57:34:35:82:7d:46:4c:8f:85:cc:5c:b6:9a:c3:16:5e:
         0a:76:50:20:00:68:b7:cb:cc:87:19:0f:00:1f:94:99:14:8f:
         fc:f8:bf:52:10:fc:15:dc:75:bb:6f:03:0c:60:3f:86:2d:2c:
         a0:a3:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:25:47 2025 by rpki-client