Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier:          6nlKzJO0bcU/F+ROq8Tlepk7tU67Im/V6km+P9hQMr4=
Subject key identifier:   50:34:61:9A:58:1F:3F:82:67:03:96:C4:05:9C:8A:3D:80:99:D8:4F
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer:       /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial:       34E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number:          34B5
Signing time:             Sat 26 Apr 2025 14:17:32 +0000
Manifest this update:     Sat 26 Apr 2025 14:17:31 +0000
Manifest next update:     Sat 03 May 2025 14:17:31 +0000
Files and hashes:         1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: VyypiRms3rAQ48FNBtNljRxXfG4M25HUHhmfR49VbO8=)
                          2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
                          rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Validity
            Not Before: Apr 26 14:17:31 2025 GMT
            Not After : May  3 14:17:31 2025 GMT
        Subject: CN=680ceafc-3942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:d4:93:e2:cd:61:3d:31:0a:a9:10:51:ba:
                    63:a5:50:c1:f4:5b:f8:5c:f8:8a:e3:83:04:bc:eb:
                    10:9b:36:90:3d:43:59:30:ee:df:b5:6f:9c:c9:eb:
                    1d:36:24:41:9d:ca:56:92:ed:25:5a:3a:b1:d9:e4:
                    bf:45:bf:8a:22:51:5e:17:de:0c:e2:2e:57:f3:9a:
                    22:c8:78:61:00:55:37:e8:bd:0e:3b:d3:af:e7:1a:
                    ed:f7:a0:aa:6a:b0:f2:68:67:50:11:e6:d4:76:9b:
                    0f:37:93:28:08:89:33:d6:15:a8:b2:7f:35:11:be:
                    77:bc:87:61:c8:17:65:ed:ca:ef:c3:1d:a5:c7:06:
                    cb:76:e8:5a:82:3d:48:f9:4a:f5:82:43:1b:ea:95:
                    f8:55:23:76:0a:7b:81:85:cc:27:a3:f7:38:60:82:
                    92:5e:33:38:1a:e5:24:b0:cd:b5:ed:9e:f5:9d:41:
                    50:a3:4c:6d:a6:c5:b0:ad:f9:9b:7a:10:33:41:54:
                    32:68:46:b1:bb:83:67:7c:13:2d:43:dd:d6:b6:c6:
                    af:62:76:02:4d:de:e5:cd:a6:1a:ac:4e:e2:d6:9e:
                    73:46:8b:5b:0a:64:e8:d1:0b:ba:cf:f9:cd:9c:2a:
                    8a:b3:68:9f:e8:ff:7a:4c:15:b6:85:5c:39:60:a9:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:34:61:9A:58:1F:3F:82:67:03:96:C4:05:9C:8A:3D:80:99:D8:4F
            X509v3 Authority Key Identifier:
                keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:35:e2:eb:d6:fc:59:dd:a0:b1:0a:9c:4d:db:ae:3c:ae:
         12:f5:f4:ea:6e:54:80:c0:c5:5e:a5:16:8f:40:d7:d5:c4:29:
         20:a2:77:19:79:03:2a:cd:fd:86:64:e1:67:32:25:10:53:57:
         d3:8f:3a:6e:65:cb:0f:57:dc:86:18:fc:0b:59:8a:12:18:ea:
         d1:cb:ad:44:fd:b8:a6:29:49:53:d0:01:bb:cc:30:39:09:8f:
         45:2c:bf:24:52:b5:9d:5d:3a:48:e0:b5:14:00:b6:79:7f:36:
         27:94:4f:05:f0:68:62:f6:66:f1:e8:44:ae:f6:77:29:57:f7:
         90:0c:c2:7b:1e:58:fc:d5:8f:c1:cd:8f:71:21:a8:52:ec:ff:
         38:68:ac:1e:b2:b0:a1:ad:99:05:d1:93:53:80:59:d7:7c:38:
         bb:eb:8d:c1:7d:a3:2a:df:83:6f:22:0c:8c:45:e8:e6:45:aa:
         6f:b2:e4:45:13:06:63:4d:bf:b0:11:bd:a9:54:d6:55:c3:11:
         da:11:65:57:14:45:cb:66:3e:0a:cd:62:04:61:32:15:39:00:
         bc:7f:9c:43:97:2a:b1:49:f9:4a:1a:0f:d4:e9:22:22:ad:da:
         e2:e4:0e:e5:0b:de:8b:e1:32:43:43:c8:55:05:68:56:d5:8b:
         be:6d:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:56 2025 by rpki-client