Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File:                     fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier:          5G0o5reebIp6+omGWSu60hJieiAWvMuBU0XwU//ogz8=
Subject key identifier:   B4:F9:88:3B:D7:87:90:44:7E:1C:33:B4:28:7A:E5:50:CA:78:B3:51
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer:       /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial:       34E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number:          34A1
Signing time:             Thu 24 Apr 2025 14:46:57 +0000
Manifest this update:     Thu 24 Apr 2025 14:46:57 +0000
Manifest next update:     Thu 01 May 2025 14:46:57 +0000
Files and hashes:         1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: lDhBisoji2ejNixFzB96Xvw7aEZpVLA9hk6DNpZ+Fz8=)
                          2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: JRmfeJomvQSzfrIXjYmMHFlugXE6bFe42lyJQeKQfX4=)
                          3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=)
                          4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: ++KskV0PPNEiZEaTeUOZbL0iJBq0mAX/g0VHSQfJFGU=)
                          5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: /yUj95kJkPDjakWPdMSLk/tFuL1bJXsSQl7hw6ucO/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
                          rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13536 (0x34e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
        Validity
            Not Before: Apr 24 14:46:57 2025 GMT
            Not After : May  1 14:46:57 2025 GMT
        Subject: CN=680a4ee1-6c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:60:cd:21:1a:e6:b2:92:81:ee:9f:76:a4:
                    91:35:d6:31:ab:fa:fe:b3:d9:8b:ea:f0:0b:19:1b:
                    f6:c9:23:e7:2e:d9:63:68:05:dd:59:bb:f8:b6:b1:
                    3b:d6:1d:5f:93:95:29:1a:5d:f0:e2:a2:33:59:b1:
                    82:ee:53:26:85:35:8e:99:dc:5d:86:55:4b:49:c1:
                    20:47:18:3c:e3:17:40:6b:7e:41:44:e3:13:49:6f:
                    a1:9f:50:3c:e0:7f:76:94:42:18:d5:8d:a6:b6:0d:
                    a4:3e:3d:67:fb:a6:e9:e5:c5:9c:0c:80:77:6f:20:
                    51:04:18:93:0e:36:26:0b:7a:0f:2e:0d:4e:51:49:
                    48:fe:d1:b9:85:c0:28:8d:26:a8:d3:a0:6c:32:27:
                    36:08:d4:1f:78:06:47:e3:2d:8f:56:67:08:81:8d:
                    1a:b9:e0:8e:f3:b7:f2:63:57:45:6d:0d:27:fa:71:
                    50:39:ab:38:2f:95:49:d2:4f:29:ce:58:25:09:02:
                    04:d6:17:5b:2a:ec:c0:12:62:94:46:f6:f8:9b:24:
                    f2:3a:45:82:30:0e:de:e8:1b:e0:9c:4c:ae:e6:e1:
                    d9:83:75:69:de:01:d8:68:5a:1f:39:e0:5c:61:09:
                    cd:e8:71:3c:4f:6c:22:73:26:5d:42:51:a7:13:80:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:88:3B:D7:87:90:44:7E:1C:33:B4:28:7A:E5:50:CA:78:B3:51
            X509v3 Authority Key Identifier:
                keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:20:e1:d0:70:04:21:5b:0f:4e:61:30:25:92:e3:04:e5:
         4b:01:23:da:b8:fc:77:68:1f:c2:e5:62:82:16:6c:dd:fb:20:
         99:62:81:78:58:50:fa:db:85:76:b4:bd:b8:f7:c5:34:75:40:
         de:e6:e7:82:69:44:a5:8d:c0:55:92:49:51:0a:f6:61:da:ad:
         fc:d3:78:02:0f:08:2a:12:57:a0:07:1a:52:de:fc:85:3c:54:
         d6:c7:34:c0:f4:6f:e7:79:02:28:2e:eb:d8:93:9d:ff:62:dc:
         76:d8:a4:2c:e6:f1:7b:52:6e:a5:6b:b6:38:76:53:c5:f6:87:
         d5:60:13:35:7d:3a:1c:cf:10:a9:34:6e:79:2b:db:29:ff:d6:
         d0:e9:c1:38:f7:18:d6:ec:7a:50:2d:1c:31:33:29:89:1f:bc:
         cb:1b:41:50:7c:74:df:69:43:b6:60:74:00:ed:3b:83:ff:1e:
         41:f2:c1:9b:3f:4c:f3:46:d7:86:3e:b5:9b:52:e8:50:a1:cf:
         59:8b:07:e1:15:1a:4b:04:ab:2c:33:ee:b7:4b:ba:61:ae:52:
         33:79:98:4c:a1:fc:30:85:60:80:8c:8a:f9:59:64:db:a9:4e:
         45:7b:7f:fe:a4:a9:64:05:82:c7:3b:1c:3a:c4:b5:40:1b:d8:
         a6:9e:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:28 2025 by rpki-client