Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File:                     hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier:          scznMyfm12W10ctDtJobfqnGFepILNnVgnRz8D2xlk0=
Subject key identifier:   E9:A7:5C:3C:C5:E4:94:46:09:E5:6B:2C:CB:83:51:64:12:AA:29:61
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number:          48
Signing time:             Sun 11 May 2025 06:08:08 +0000
Manifest this update:     Sun 11 May 2025 06:08:07 +0000
Manifest next update:     Sun 18 May 2025 06:08:07 +0000
Files and hashes:         1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: Sjl6mrfJhcMJSjdgH26YQ/UkYe6BgOloCRsmina0eDw=)
                          2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=)
                          3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=)
                          4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=)
                          5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 06:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: May 11 06:08:07 2025 GMT
            Not After : May 18 06:08:07 2025 GMT
        Subject: CN=68203ec7-15c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:47:a1:c4:34:bc:e3:1d:0d:e8:e0:cb:cb:2c:
                    b0:a5:fa:09:aa:9f:12:ce:7b:f2:0c:ab:93:84:0a:
                    b4:b0:fc:3d:bd:e2:81:3d:63:2b:bc:63:f0:ca:e3:
                    dc:79:f9:8c:41:c5:72:84:32:55:8e:47:0f:01:41:
                    4c:99:f3:76:45:0a:91:34:c9:ea:09:51:a2:48:09:
                    d5:0f:17:df:5d:e5:00:e5:b0:cb:0f:a8:b7:95:a6:
                    1b:63:1d:29:48:1d:d9:60:77:23:0c:7c:2d:85:a6:
                    0d:f6:a0:10:9f:02:4f:4e:30:43:4a:d6:f3:f7:eb:
                    86:89:1c:eb:2e:ea:4e:5f:7c:84:ab:e0:35:68:4b:
                    9a:8a:b8:7a:18:26:65:14:cc:0d:c9:97:fb:5f:82:
                    3d:5a:fd:10:68:a9:28:d3:25:55:05:5d:ae:62:0a:
                    ef:a8:a9:19:1a:6c:89:14:aa:1c:f1:a1:9e:a1:63:
                    7a:2d:6a:c8:e3:56:45:0d:73:bd:73:f6:b6:9c:1c:
                    6a:1f:e0:eb:a0:fc:84:10:34:c3:d5:8d:01:a2:3b:
                    18:61:34:3b:03:a9:a8:15:c7:dd:e8:0c:97:70:f0:
                    63:eb:e1:76:ad:b3:f6:c4:86:67:ec:e5:00:0b:ef:
                    a2:35:d6:f6:0d:41:0d:7c:a9:0d:5e:3e:3a:79:88:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:5C:3C:C5:E4:94:46:09:E5:6B:2C:CB:83:51:64:12:AA:29:61
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:63:8c:4e:c2:3b:24:e0:77:cd:f3:0e:d8:7d:4b:3f:a3:7c:
         05:b4:c8:fd:33:4d:53:2b:a0:d1:94:22:40:93:b0:d3:ef:93:
         e7:fc:aa:ad:2f:bb:a3:21:ac:ec:37:63:af:a3:9b:7b:03:1c:
         7e:1f:85:87:e4:0b:5c:09:54:d3:e9:ad:bb:9a:97:6d:5d:f5:
         d2:c5:81:6a:9e:15:4d:ce:53:b1:e9:b4:0a:5f:f4:0b:91:b2:
         69:79:ea:4f:3c:77:0c:84:36:d6:29:d6:bf:5a:18:0e:5a:e7:
         da:e7:4f:68:47:35:52:22:59:ee:47:09:db:33:00:7b:a8:8c:
         13:65:7c:a1:de:69:cf:41:bd:fe:83:75:f2:48:07:b1:85:ad:
         6a:41:71:02:a5:84:d3:ed:a6:b6:3a:96:ad:6b:12:fe:9e:6c:
         a4:5d:0e:69:a4:9f:d1:11:04:a9:02:62:2f:f6:ae:47:ed:f2:
         4d:07:ad:ef:ec:7f:4d:34:33:29:90:40:d1:2c:05:8f:7d:7a:
         65:8a:b8:b9:3a:4e:09:90:49:df:9e:cd:0c:ca:25:3d:4f:f4:
         78:e6:0c:31:c3:c2:52:14:eb:ff:83:5d:71:c0:5b:7e:06:ca:
         01:40:72:f8:15:f2:be:ed:72:ca:b2:eb:5f:a8:49:c0:0f:42:
         d5:c3:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:30:03 2025 by rpki-client