Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
File:                     _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json)
Hash identifier:          tP+JYl/GdleCtquumvgCSSju0lOnJNbMufJeCct8pGY=
Subject key identifier:   CB:09:58:5F:F0:8F:BD:10:F4:3A:9E:71:59:D1:56:B4:A3:17:C9:D2
Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23
Certificate issuer:       /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
Certificate serial:       080E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
Manifest number:          13AC
Signing time:             Sat 10 May 2025 18:43:12 +0000
Manifest this update:     Sat 10 May 2025 18:43:11 +0000
Manifest next update:     Sat 17 May 2025 18:43:11 +0000
Files and hashes:         1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: 3OdXuStmF2udH+FBV/RdUVvHx7db5xtJ6D8qeSA37Bg=)
                          2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: RLwYPMhMe9BwDK8rCAnXVnWtpCBgPhejDp6NcWERB7s=)
                          3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: JKN99SL1qpZZYm8JW/0SbU0c9K8PYY5zTB3QwwglAC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
        Validity
            Not Before: May 10 18:43:11 2025 GMT
            Not After : May 17 18:43:11 2025 GMT
        Subject: CN=681f9e40-e944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:36:ea:94:5d:72:21:72:71:46:e1:53:43:
                    b1:7f:e7:f3:a6:bd:2d:b2:f6:b9:9f:5e:74:5e:5c:
                    d7:79:59:c9:ae:f3:6d:c7:ce:11:71:0c:4b:fa:2b:
                    41:41:2f:68:29:30:a9:87:b9:58:08:7b:1f:e9:3a:
                    e3:d0:5b:4e:2f:85:6f:26:21:2b:32:cd:e6:2b:ff:
                    b4:39:a6:4b:07:49:29:29:67:f2:c1:93:a9:54:ae:
                    04:99:9d:94:bc:98:34:a0:9a:40:02:38:c7:59:12:
                    13:40:34:a7:8d:f3:ac:12:4b:22:42:99:f8:b9:58:
                    fa:0d:f9:9e:28:e0:06:0f:bf:c2:2e:68:c7:e3:e6:
                    37:53:e0:13:28:46:2b:ba:06:15:fe:f3:03:e8:91:
                    ca:9d:c5:9b:57:cc:a4:25:4d:04:79:d0:59:92:49:
                    6f:64:c8:12:bd:48:dc:96:cf:83:1f:9d:99:d9:1d:
                    95:20:df:3b:42:ca:5e:19:40:3c:37:59:f8:3a:ad:
                    1c:c1:46:03:f0:ee:ab:bb:5d:28:aa:7e:68:27:de:
                    20:86:1b:11:ad:62:0c:c5:8a:96:9b:8a:45:c3:b7:
                    ea:1a:5b:77:d9:c6:a3:22:50:3d:f8:5d:d1:35:e8:
                    fa:12:8e:e0:70:df:68:9d:d6:a0:e2:f2:90:e7:ce:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:58:5F:F0:8F:BD:10:F4:3A:9E:71:59:D1:56:B4:A3:17:C9:D2
            X509v3 Authority Key Identifier:
                keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:29:38:8a:93:35:22:d8:bf:20:39:b2:68:e5:43:ec:e8:
         57:9a:f5:cb:51:29:8c:69:39:bb:6c:0a:4d:93:c5:01:1d:81:
         26:fb:a9:f5:1d:3b:b1:7c:d1:46:01:3f:7f:01:27:00:d2:6c:
         d8:38:da:9d:74:61:99:5b:d2:aa:00:d0:e8:2f:c6:5b:2a:e8:
         07:c7:1e:d3:c4:df:70:ed:3e:d1:39:5d:68:51:56:a4:67:aa:
         6a:86:2e:7b:1e:fa:30:9e:60:90:4c:d5:97:3c:9c:40:0c:ae:
         91:37:7d:95:6b:37:8b:15:84:44:a1:3f:3b:41:1f:ed:67:9b:
         b2:b4:cc:11:3a:af:61:7a:ad:b9:22:89:32:13:c9:db:a2:3d:
         93:23:d2:65:c2:73:81:de:7a:f2:5a:b2:75:7c:d9:18:e8:0e:
         70:fd:7b:03:a6:19:0a:99:f4:fb:07:ba:85:3d:dd:78:00:e3:
         24:47:06:85:16:90:52:01:5c:d6:af:83:07:bd:fb:15:dc:81:
         f8:f0:21:b1:16:55:4e:44:b6:03:4f:7e:3d:27:54:21:10:53:
         ee:5b:dc:82:ba:2f:fd:ee:37:06:0d:4b:82:a5:7b:d1:a1:b6:
         74:51:60:ca:bb:b7:88:08:4e:82:a3:f0:2b:9c:8e:a3:1b:37:
         0e:11:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:53:12 2025 by rpki-client