Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          QDbA00vlFD5ZxYy5SPZV0RcNqxC5AwnfSd3HPcgE6pU=
Subject key identifier:   CB:D8:25:5A:79:BC:22:2D:51:9C:87:D0:40:4A:A9:E1:D1:9C:D0:44
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          01D4
Signing time:             Sun 11 May 2025 01:50:11 +0000
Manifest this update:     Sun 11 May 2025 01:50:10 +0000
Manifest next update:     Sun 18 May 2025 01:50:10 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: tZ87ZdFeVtd9ESPRgm04rd+a/u/0vdRi0X0zUAWt0HM=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: +VcgRf6z1VT/qmLUhorkYqe7TBDudTQ2zcHHrZKRu3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: May 11 01:50:10 2025 GMT
            Not After : May 18 01:50:10 2025 GMT
        Subject: CN=68200253-34c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:bb:37:d7:01:53:2d:af:16:ad:26:53:2d:
                    73:39:e9:30:aa:31:86:28:4b:84:7b:dd:fe:da:61:
                    a7:5b:37:e9:23:ac:1c:b3:4a:ca:61:44:33:b1:39:
                    ef:51:c8:cd:f6:06:ab:5f:e2:7b:a5:ad:55:b1:0d:
                    e1:60:12:e1:bc:04:e4:2f:a6:16:1f:64:7d:ef:5c:
                    63:c0:d7:64:4d:c3:94:4c:f7:a1:ef:7c:74:28:e3:
                    f3:2f:ae:c2:0a:5c:78:1d:c5:52:70:36:31:e1:8c:
                    a7:3e:82:26:a8:11:80:ed:d5:0b:22:35:61:d3:29:
                    32:99:dc:72:ab:62:a9:ee:aa:26:b5:e4:15:76:36:
                    2b:9c:3e:08:fe:a4:03:71:9f:e8:a6:2a:c5:aa:d9:
                    17:b5:79:05:6c:b6:e1:61:b9:03:01:ff:d7:fc:9c:
                    77:59:b0:a9:af:99:33:fe:c5:9e:ff:8e:df:b5:e0:
                    e7:2a:93:ab:23:76:6c:16:76:b6:53:d1:5a:ba:fd:
                    87:d7:d2:1a:f7:cb:96:b3:b6:fe:01:65:25:36:b1:
                    31:70:0e:aa:e6:6c:23:19:3a:35:67:7b:36:f5:3e:
                    ed:57:ed:b1:92:b2:95:cf:bd:11:31:cd:9a:05:b8:
                    11:c1:64:85:16:50:08:72:25:e7:7b:ea:94:a7:9f:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:25:5A:79:BC:22:2D:51:9C:87:D0:40:4A:A9:E1:D1:9C:D0:44
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:db:4e:9a:18:53:9e:d6:b7:3f:a8:d4:35:ec:52:7a:7b:
         22:0e:c8:60:18:16:45:a8:8a:19:8b:4c:18:e3:ff:28:12:f4:
         c2:d7:7f:2e:ef:08:70:e3:0d:1f:0e:97:7b:48:60:09:89:ab:
         a2:ac:b8:7e:7f:bf:b0:a2:98:d2:a8:7f:76:92:f6:0d:3b:dc:
         ce:e0:3c:68:6a:5a:ab:88:95:fc:e6:71:fd:0b:6a:fa:d0:c5:
         43:36:34:cf:c5:91:31:6d:f6:b5:33:4c:b8:2b:08:de:68:76:
         ef:b0:08:5b:68:f4:92:88:c6:e4:b3:75:14:a4:49:ea:b8:ef:
         cb:5e:7f:c4:ec:fe:78:71:c0:9e:36:60:b9:37:82:73:0b:c5:
         9e:3f:1a:0e:d7:fe:fc:7d:af:23:ab:47:e1:06:3e:b8:26:c3:
         cb:36:04:f6:18:2b:2a:d4:8e:4a:6d:e4:14:b7:0a:e2:eb:b4:
         80:d0:22:18:21:f1:f5:87:e6:d2:dd:d0:44:6a:5d:48:c7:74:
         15:16:c1:96:11:97:7f:4d:2c:de:a7:59:f2:0f:c6:d2:b4:be:
         6a:d5:08:d7:71:93:e9:81:ce:b9:e3:ff:84:ad:9b:3c:78:ac:
         75:90:ba:b2:71:09:63:4f:50:40:f3:d6:42:b4:dc:e6:27:9c:
         94:d7:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:07:14 2025 by rpki-client