Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          66h4QxqArjaJwh7zVC1LOZ3fLDT9XEwnXr536K+pR8U=
Subject key identifier:   01:B6:2A:61:9B:5D:53:73:03:66:69:62:78:2B:82:19:E4:00:58:03
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          0640
Signing time:             Thu 24 Apr 2025 22:21:09 +0000
Manifest this update:     Thu 24 Apr 2025 22:21:09 +0000
Manifest next update:     Thu 01 May 2025 22:21:09 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: eanRa1F6HAQtBKaX9RUnUha+mz8ym1zMCUuI3djQFuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Apr 24 22:21:09 2025 GMT
            Not After : May  1 22:21:09 2025 GMT
        Subject: CN=680ab955-4257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:50:a4:7f:a7:7d:6e:ba:bc:ac:57:36:fc:
                    b0:2b:3a:94:af:99:b4:99:c5:8f:69:66:98:59:02:
                    6e:d8:07:57:d2:88:09:a5:75:e0:17:ab:fc:97:8f:
                    3a:b8:03:7a:a0:cf:b6:ca:64:63:56:38:5f:e7:1d:
                    47:32:b6:ad:b1:39:04:64:c8:d9:3c:ce:c3:bc:1d:
                    c3:51:8e:4c:86:55:1d:f6:22:1a:11:fc:09:ce:de:
                    0e:d8:05:1b:95:84:15:80:f7:b0:14:5e:5e:8d:26:
                    42:a7:8d:83:62:58:e3:62:9c:9f:8a:67:ab:b4:12:
                    a8:24:47:cf:4b:b1:34:73:e6:31:e1:7a:0b:6b:73:
                    77:2d:07:a7:3a:99:fb:13:8c:4e:53:5e:19:e3:17:
                    52:7f:ff:5a:1f:dd:00:dd:fb:cc:a2:7e:67:1a:ab:
                    5e:0b:f6:fd:16:3f:1c:cf:5b:30:4c:ff:e0:53:28:
                    3d:8e:ec:5f:94:6a:19:ac:76:2e:b3:1f:a2:f2:6e:
                    ed:d3:d8:22:6a:59:58:54:bb:c2:56:a9:ab:2b:d6:
                    3b:f2:bd:21:9f:1c:71:bc:1e:6c:ca:f5:e6:09:0b:
                    b1:70:ea:18:98:00:56:35:f0:07:5d:d2:c4:f3:64:
                    3d:13:c6:c3:c1:35:77:dd:8b:7a:9a:31:09:b0:28:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B6:2A:61:9B:5D:53:73:03:66:69:62:78:2B:82:19:E4:00:58:03
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:89:1c:db:af:9a:6c:07:37:5a:78:f0:f8:75:75:4e:ac:9b:
         37:95:26:d8:a7:2e:1d:0a:3e:96:a4:ea:22:a2:0b:4e:20:4d:
         bd:d1:a4:b3:3a:bc:a0:23:ce:b5:8f:50:b7:12:32:3d:37:e5:
         a2:8f:6e:56:40:d3:1d:b3:64:33:21:dd:ee:db:15:b4:de:5b:
         df:75:24:3c:8c:f0:a1:07:74:f6:5b:27:53:88:72:fc:4c:51:
         ca:a2:de:ce:ae:7e:3c:c2:b2:03:5e:fd:20:c8:fa:8b:00:4e:
         9e:15:8d:96:06:4f:47:3c:19:79:ec:4f:39:7b:aa:d8:c8:d4:
         23:d3:18:87:44:5d:af:0d:4f:dd:52:ea:e7:fb:8e:4e:de:a7:
         89:47:1a:ff:e0:d3:63:a7:eb:f1:af:5e:25:b0:17:c9:d1:c5:
         7c:09:a6:4c:23:0c:06:cf:66:59:97:d7:b4:08:97:95:6c:4c:
         55:a8:9f:96:70:26:83:28:7f:98:c7:58:98:ab:16:d4:b1:8f:
         16:16:bf:27:95:82:57:63:57:9a:f5:6a:5f:77:23:0e:08:ee:
         fe:d6:bd:91:75:4e:a9:cf:e6:e5:ff:00:55:ca:d1:0e:c6:c6:
         42:ce:f8:6e:94:2a:e9:d1:f3:22:39:12:bd:49:f6:a0:4b:6b:
         d4:dc:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:44 2025 by rpki-client