Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
File:                     m8V5k3xyDN2n11YYtyJj0kza_K4.mft (raw, json)
Hash identifier:          mbOQWDdwnqVHQh8nJvQok/PpmUS5drbQUI22kbMLTew=
Subject key identifier:   DF:A7:E9:79:F6:7D:B8:8B:02:EF:73:13:40:B1:9B:9A:5E:03:4B:85
Authority key identifier: 9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE
Certificate issuer:       /CN=A91396E7/serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
Manifest number:          60
Signing time:             Fri 25 Apr 2025 06:03:30 +0000
Manifest this update:     Fri 25 Apr 2025 06:03:30 +0000
Manifest next update:     Fri 02 May 2025 06:03:30 +0000
Files and hashes:         1: m8V5k3xyDN2n11YYtyJj0kza_K4.crl (hash: Q0H9t/tehJPTAYIUVx7nYwGhgybLk6N952FQ+lGKaf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
        Validity
            Not Before: Apr 25 06:03:30 2025 GMT
            Not After : May  2 06:03:30 2025 GMT
        Subject: CN=680b25b2-8d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:09:85:67:6f:d3:e9:bb:33:cd:f5:9c:79:
                    2a:bc:d1:fd:e2:c3:92:a6:3c:76:88:03:f8:16:37:
                    77:a2:b6:60:7d:a8:e2:0e:f0:c0:4f:8e:a5:f2:d0:
                    61:de:07:0c:13:58:a5:74:ec:6f:0f:1e:a9:46:1c:
                    e9:17:c3:e3:87:0b:a9:ce:6e:82:b5:42:55:92:bf:
                    c1:89:4a:3b:9a:f1:c6:85:e6:b9:c3:94:75:42:90:
                    3a:82:e9:4e:49:d4:4d:70:44:e4:06:6e:15:3f:60:
                    7c:82:ae:e7:94:3b:b8:5f:13:4f:ff:ec:59:aa:16:
                    c0:8a:92:38:22:4b:7b:0d:f8:48:df:13:c6:e6:ba:
                    04:1c:2b:b8:d7:6c:bd:f7:90:15:9d:2e:ac:4a:ab:
                    0f:80:31:3b:12:1b:b3:62:ff:1f:a7:d2:5e:60:9d:
                    ce:8c:6c:c7:5d:3e:ca:cb:e5:13:19:50:57:da:1c:
                    1c:71:27:7b:a0:4b:12:d1:33:ff:d8:31:a4:db:11:
                    13:bc:ba:99:ef:32:ba:fe:96:d9:f6:5a:0f:7c:c3:
                    b7:20:c3:20:b6:1a:e8:84:ec:33:c1:6f:71:d9:00:
                    05:e3:ba:c3:d0:f3:90:dd:d2:14:90:36:d3:ba:a2:
                    16:91:f2:2a:18:68:9c:aa:d7:ef:dd:62:e8:7f:b8:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:E9:79:F6:7D:B8:8B:02:EF:73:13:40:B1:9B:9A:5E:03:4B:85
            X509v3 Authority Key Identifier:
                keyid:9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:17:44:78:68:62:f7:ea:e9:e6:75:2a:ec:1e:72:b6:18:
         7e:ca:7c:58:22:c0:96:d5:48:65:5a:3d:79:b8:c8:ab:83:b1:
         c5:9a:74:c5:5c:11:29:7f:a1:97:9e:51:b9:14:78:b0:c7:e4:
         db:01:87:bd:ad:a8:98:25:60:43:60:fc:78:0c:68:9d:8d:0d:
         e1:9d:f1:27:c8:8c:cb:31:2a:4a:be:99:ce:01:dc:12:f1:dd:
         8c:6d:fc:00:b2:af:67:73:e4:b7:38:c3:22:a3:22:49:63:ba:
         78:17:7e:72:49:9c:7a:8d:5a:b4:9f:1c:de:79:35:58:7a:14:
         ec:04:f3:78:33:28:5d:cc:c2:49:5b:18:cc:f7:0c:8d:d6:2e:
         1d:0c:b8:58:93:3b:5b:2c:a6:fe:98:e0:54:09:73:99:35:9f:
         4c:21:28:b6:89:63:8e:b9:22:2a:05:61:a1:cc:e7:34:5a:77:
         45:9c:1f:ef:2b:6d:2f:9f:2e:e2:e2:42:8d:ce:cb:c1:56:f8:
         fe:f9:19:b1:0b:9d:7a:d8:73:53:e9:20:d7:f9:b1:33:c3:dc:
         fc:18:62:54:b6:ab:ca:9e:b8:79:dc:23:07:b5:70:dd:aa:c2:
         9a:d3:1e:03:f9:4c:ab:d7:d8:c6:d8:df:8b:ed:18:ea:17:3c:
         26:25:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:37:34 2025 by rpki-client