Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          EgkeRPNxxGmrKhNIuUl2ezvIP1SpZxHZwWs/lTHeLQI=
Subject key identifier:   85:EA:55:6C:DE:B0:E1:1E:4A:12:80:57:96:8B:C0:B5:76:CD:D5:BB
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          07A0
Signing time:             Thu 24 Apr 2025 21:04:14 +0000
Manifest this update:     Thu 24 Apr 2025 21:04:14 +0000
Manifest next update:     Thu 01 May 2025 21:04:14 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: NqSm3dfeAaJlboNu7dZAq0nhvLsM0Ur0SQUTLYYCoH8=)
                          2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
                          3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Apr 24 21:04:14 2025 GMT
            Not After : May  1 21:04:14 2025 GMT
        Subject: CN=680aa74e-23d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:77:c6:27:f5:a8:14:69:ea:92:df:b1:40:
                    c8:71:51:56:25:28:6f:3c:0c:50:0e:e7:92:f9:29:
                    1b:15:28:80:84:2c:b5:af:aa:26:64:ee:ec:95:ff:
                    6d:c3:c0:79:99:25:12:43:8e:ca:a6:b4:4f:10:a5:
                    51:75:7c:e1:c7:66:34:74:14:4c:62:17:81:dc:50:
                    d8:48:ab:b9:bb:93:77:9c:71:57:ab:06:ba:1f:97:
                    ae:82:39:b6:7c:d6:ee:72:cb:e3:a9:56:26:db:6c:
                    46:9e:02:7a:4e:a5:6a:2b:91:40:19:4d:3c:8b:be:
                    c8:93:9f:da:5f:23:f8:2b:5a:76:00:99:87:2a:8a:
                    05:29:b8:6c:87:b9:eb:b3:27:f2:2f:f4:5f:f7:5f:
                    5f:70:37:90:90:28:ad:72:ec:f4:4c:6b:18:af:cd:
                    07:ba:9d:c7:e2:20:de:22:dc:34:6d:d3:d5:60:53:
                    9f:f3:71:cd:46:a6:e3:66:b0:8d:a1:3a:6d:ee:c3:
                    15:b3:4a:18:7f:b7:5d:33:78:9d:f8:11:f2:b9:c6:
                    42:97:63:e4:e0:fb:17:ed:dc:ae:e3:1b:03:4f:1d:
                    6e:d4:88:85:9b:94:20:af:c8:72:49:5f:ae:6b:b1:
                    ca:87:a3:6b:09:e8:b3:9c:fd:bb:fa:c5:fb:38:29:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EA:55:6C:DE:B0:E1:1E:4A:12:80:57:96:8B:C0:B5:76:CD:D5:BB
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:4f:a0:a3:72:8c:5c:da:a5:23:06:b9:20:3a:06:5e:6c:
         f5:d9:1e:bf:1b:a6:c6:39:a1:e2:12:95:ea:3b:44:1c:cc:e9:
         ab:25:92:28:5b:35:f4:15:cb:2b:85:5b:6b:b2:51:e7:19:7a:
         3f:d3:87:bf:26:48:7f:cd:af:2b:60:69:b8:4a:05:ee:3d:a9:
         ee:0e:b8:f3:94:65:ae:61:61:32:30:55:e0:ff:b8:82:bf:3c:
         f3:30:90:ec:ba:d6:22:0d:69:7a:5a:ff:4c:b4:92:b7:71:5f:
         4b:0a:dd:0b:20:bd:31:78:ad:af:75:66:83:06:f0:d7:51:38:
         a8:2b:c9:23:a3:db:27:60:e5:c2:cb:0c:e9:ed:96:46:57:26:
         bb:ff:dd:d9:5f:34:d9:13:a7:e8:1b:33:49:69:58:ca:65:40:
         c7:36:18:e6:3e:2a:05:63:7a:f8:00:b2:e8:13:c3:9a:b9:9c:
         5b:75:00:be:94:79:d5:d9:52:a1:18:c4:f8:25:7e:cb:ea:ba:
         da:0b:85:28:4b:c2:7e:c5:fb:ef:9a:3a:af:e1:80:69:22:30:
         a6:aa:f7:f8:1c:e0:e4:c3:04:3f:59:32:8c:b7:cf:51:62:03:
         b7:d9:ef:95:bc:26:e2:78:52:42:03:1f:29:b3:c2:77:11:49:
         38:9a:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:23 2025 by rpki-client