Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
File:                     adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json)
Hash identifier:          ZeWCoa9z8G3H9Agr819A3O8aD73AgD850L8KeK5uKxo=
Subject key identifier:   1D:20:AE:22:28:F4:95:A3:8F:1D:9D:26:3C:F8:75:0C:21:CC:4D:6A
Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49
Certificate issuer:       /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
Manifest number:          51
Signing time:             Fri 25 Apr 2025 06:15:07 +0000
Manifest this update:     Fri 25 Apr 2025 06:15:06 +0000
Manifest next update:     Fri 02 May 2025 06:15:06 +0000
Files and hashes:         1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: lfIERsxFzG1HxDbTOAXdF2vzH2Omf/LdKZ/+CQLoDXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
        Validity
            Not Before: Apr 25 06:15:06 2025 GMT
            Not After : May  2 06:15:06 2025 GMT
        Subject: CN=680b286a-7aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:f8:1b:2a:cd:f1:52:93:6b:11:6a:69:b8:
                    66:7c:5a:25:63:cd:3f:2e:39:7e:ec:19:a2:bf:c9:
                    f4:66:46:46:e5:f4:61:7d:50:50:12:cd:9d:f9:9a:
                    00:9c:e3:a7:d3:30:22:59:38:28:7c:b9:d1:c9:86:
                    74:dd:73:4d:ec:19:d0:ef:ac:64:ae:9f:51:97:1c:
                    11:c2:17:3e:86:d1:37:81:16:ba:e1:bb:29:d9:0b:
                    a6:10:19:2c:b2:ac:05:d8:7d:af:50:92:60:42:02:
                    74:96:bc:41:a9:a4:4d:db:ae:f4:c4:e1:b6:bb:13:
                    4e:24:62:fa:fc:22:bc:0d:51:42:5a:4d:12:d0:62:
                    06:77:a3:d2:be:ff:be:ab:f8:c2:e9:9e:50:b0:e9:
                    4b:d1:d0:4e:05:90:3a:ce:a2:45:46:84:cf:01:16:
                    a0:a5:f6:35:fa:4d:35:05:35:17:c4:9f:2f:8a:14:
                    23:e8:a9:fe:8e:9f:1e:8c:25:99:0e:77:91:03:47:
                    b1:68:30:a1:e8:3c:6e:78:81:44:96:07:fb:b0:72:
                    df:0f:98:68:bd:78:f0:0a:de:cd:8d:c1:5d:48:90:
                    aa:b5:39:e0:1e:ac:d7:d2:db:71:af:fe:a9:36:04:
                    57:4f:09:79:59:98:c6:b2:51:79:78:34:d6:b6:84:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:AE:22:28:F4:95:A3:8F:1D:9D:26:3C:F8:75:0C:21:CC:4D:6A
            X509v3 Authority Key Identifier:
                keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:d1:39:ad:d6:8e:e4:10:ac:c1:5a:a2:9a:67:77:19:b2:
         95:57:b4:ca:94:eb:d0:13:68:bb:01:37:b4:a1:d5:af:36:78:
         22:1e:13:08:ee:0f:2c:32:d9:65:8e:7d:24:e6:f0:32:ab:55:
         57:73:90:af:5f:c1:6b:07:7b:f2:fe:c5:4f:b6:04:a4:b7:55:
         7e:09:d7:e3:ba:fd:6f:84:84:4a:e8:c1:de:47:c7:98:aa:fb:
         0d:42:c2:fe:80:97:94:7f:e9:ba:cb:a8:61:77:d3:27:8a:24:
         4d:4f:27:9b:5c:9a:ac:a4:57:98:81:8c:53:70:1e:d5:fb:1f:
         67:eb:f4:9a:9b:37:1e:4b:54:95:69:21:96:eb:1d:b6:84:d4:
         50:41:0d:09:c7:9e:9c:cf:e9:93:9f:7c:cc:e8:8e:fb:c4:30:
         dd:d7:e8:51:f1:0a:f7:1d:29:db:53:e7:a3:18:79:1f:e0:2e:
         d5:27:70:58:b0:75:33:cf:f8:25:99:28:85:bd:e3:ce:79:72:
         f3:d8:f2:49:54:57:4e:6e:de:75:16:b8:4b:1b:c2:76:d3:5a:
         36:f9:57:49:32:f3:ee:b0:73:98:b0:8b:7f:ef:ab:39:ac:20:
         17:5f:6b:80:56:dd:fd:58:03:a1:b7:cd:42:6a:7b:a3:48:79:
         79:ec:78:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzlBQzExMC8GA1UEBRMoNjlEQUZDQzdERTNFRDFDMDlGNEMzNjZBNENBNEUxN0ZG
QjExQTg0OTAeFw0yNTA0MjUwNjE1MDZaFw0yNTA1MDIwNjE1MDZaMBgxFjAUBgNV
BAMTDTY4MGIyODZhLTdhYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC9PgbKs3xUpNrEWppuGZ8WiVjzT8uOX7sGaK/yfRmRkbl9GF9UFASzZ35mgCc
46fTMCJZOCh8udHJhnTdc03sGdDvrGSun1GXHBHCFz6G0TeBFrrhuynZC6YQGSyy
rAXYfa9QkmBCAnSWvEGppE3brvTE4ba7E04kYvr8IrwNUUJaTRLQYgZ3o9K+/76r
+MLpnlCw6UvR0E4FkDrOokVGhM8BFqCl9jX6TTUFNRfEny+KFCPoqf6Onx6MJZkO
d5EDR7FoMKHoPG54gUSWB/uwct8PmGi9ePAK3s2NwV1IkKq1OeAerNfS23Gv/qk2
BFdPCXlZmMayUXl4NNa2hMWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHSCuIij0
laOPHZ0mPPh1DCHMTWowHwYDVR0jBBgwFoAUadr8x94+0cCfTDZqTKThf/sRqEkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzY4Rjc5MjJDQTgw
MTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGNDZlREWnFUS1RoZl9zUnFF
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWRyOHg5NC0wY0NmVERacVRLVGhmX3NScUVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OUFDLzY4Rjc5MjJDQTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGND
ZlREWnFUS1RoZl9zUnFFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEcK0Tmt1o7kEKzBWqKaZ3cZspVXtMqU69ATaLsBN7Sh1a82eCIeEwju
Dywy2WWOfSTm8DKrVVdzkK9fwWsHe/L+xU+2BKS3VX4J1+O6/W+EhErowd5Hx5iq
+w1Cwv6Al5R/6brLqGF30yeKJE1PJ5tcmqykV5iBjFNwHtX7H2fr9JqbNx5LVJVp
IZbrHbaE1FBBDQnHnpzP6ZOffMzojvvEMN3X6FHxCvcdKdtT56MYeR/gLtUncFiw
dTPP+CWZKIW94855cvPY8klUV05u3nUWuEsbwnbTWjb5V0ky8+6wc5iwi3/vqzms
IBdfa4BW3f1YA6G3zUJqe6NIeXnsePs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:20 2025 by rpki-client