Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          EC3k2Dq80O5CDSzUHe6xqEjTuHbRQko+TdYpUxLFVyc=
Subject key identifier:   97:73:F7:B0:8B:45:B5:AB:63:B8:70:8B:2E:A6:F0:A7:13:56:E1:3A
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          55
Signing time:             Fri 25 Apr 2025 06:12:53 +0000
Manifest this update:     Fri 25 Apr 2025 06:12:52 +0000
Manifest next update:     Fri 02 May 2025 06:12:52 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: t7YJ81P9iLm/d41uetpz+G5MVA8KMt5CGmIBMBa6YMk=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Apr 25 06:12:52 2025 GMT
            Not After : May  2 06:12:52 2025 GMT
        Subject: CN=680b27e4-fa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:9b:bf:4e:4b:dd:82:c3:11:10:b2:10:62:
                    e8:3c:24:bb:4e:0b:08:66:39:55:d3:e9:62:c4:1d:
                    1f:90:b7:92:2c:97:7d:67:54:fb:1c:43:82:54:75:
                    d4:83:76:dc:91:12:03:b4:5f:2a:f5:c6:b6:e7:5f:
                    3b:b6:fa:ad:5e:22:42:47:47:c3:b3:0f:9b:d7:22:
                    7c:3b:67:4c:fd:2b:3a:3b:c6:54:ef:a0:0a:8a:32:
                    18:86:d4:f4:14:b7:9e:22:8b:da:ba:bd:4b:11:7c:
                    5b:36:68:03:10:5a:6e:24:e7:2d:0a:06:f2:fd:d8:
                    01:83:af:e9:f5:41:df:ac:6a:8f:74:51:89:97:23:
                    74:34:4d:a8:7c:34:c8:2c:fa:16:bb:d7:78:c6:f3:
                    5d:4d:85:28:28:3e:98:08:92:06:06:58:70:3b:bc:
                    7f:e3:df:3f:26:4c:41:6a:c8:b5:71:00:b6:36:2e:
                    ab:4d:4f:a8:02:6d:dc:b9:5b:f3:98:aa:87:c2:be:
                    85:62:04:35:0e:05:ea:da:56:96:c9:c7:bf:79:e1:
                    81:90:cf:33:fd:d7:e3:4a:5c:ee:81:c3:39:56:c1:
                    a5:62:08:b4:b7:2c:3c:72:41:60:94:4a:01:58:3d:
                    ec:86:dc:f2:11:98:23:2c:b0:a4:29:c7:cd:74:dc:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:F7:B0:8B:45:B5:AB:63:B8:70:8B:2E:A6:F0:A7:13:56:E1:3A
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:69:06:29:53:26:fc:c1:ce:7a:89:cf:e9:f7:67:91:81:
         2d:92:35:09:72:e0:b3:64:5b:b7:e9:5a:3f:09:59:57:d9:17:
         0a:05:e8:43:f2:cb:03:ae:19:c5:59:c5:9c:0b:5e:76:58:ad:
         aa:86:73:03:57:98:65:0d:3c:d8:26:83:ac:10:6f:0a:00:3c:
         75:e1:02:77:91:84:14:1a:b3:86:c6:ed:57:d1:de:d3:fb:10:
         b1:ad:e4:88:c7:8c:75:cc:74:b0:30:e5:0c:c6:02:0d:50:3d:
         97:20:05:fa:3c:d2:00:86:17:b0:7f:4d:df:41:8f:e2:cd:cc:
         75:3a:4f:93:93:cd:b1:d0:66:68:9f:48:04:15:15:5e:84:8d:
         3f:75:ff:f2:c4:3d:64:f4:d0:36:ad:b7:a7:8c:13:79:cf:ca:
         eb:71:63:9a:d1:4b:22:b5:37:33:fe:63:41:b7:fa:ed:fa:05:
         09:fe:5b:ea:9f:53:46:cf:5b:df:34:87:e4:d5:7b:d1:4d:dc:
         aa:e7:56:23:d2:73:67:40:76:89:dd:dc:c5:f5:c5:75:88:bc:
         85:86:e6:49:1d:81:00:6c:72:01:4d:35:51:f5:fe:e6:81:cf:
         2a:50:61:d7:91:c7:19:4c:81:60:52:18:17:bf:eb:2c:20:17:
         fe:05:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:46 2025 by rpki-client