Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File:                     awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier:          ADAXlQ3PbSHitjcvL9C52TZTCcUWFNkEJwT/r63nq3w=
Subject key identifier:   39:01:81:82:82:DB:B9:58:49:E4:ED:71:D4:21:22:BC:8D:E4:AB:94
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer:       /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial:       0C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number:          0C07
Signing time:             Thu 24 Apr 2025 18:39:34 +0000
Manifest this update:     Thu 24 Apr 2025 18:39:34 +0000
Manifest next update:     Thu 01 May 2025 18:39:34 +0000
Files and hashes:         1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 0e6Niv0/EfNrfd3kNd9c2CX+8Z9A5kJf0EuR2O2lHOg=)
                          2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=)
                          3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=)
                          4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=)
                          5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=)
                          6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
        Validity
            Not Before: Apr 24 18:39:34 2025 GMT
            Not After : May  1 18:39:34 2025 GMT
        Subject: CN=680a8566-2b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:45:e2:6e:45:c1:98:1b:b4:b4:62:b3:ae:
                    37:f3:31:92:8c:df:59:63:93:45:00:45:a5:ac:80:
                    f2:cf:72:15:69:b7:29:97:2e:d4:5f:8c:1a:df:16:
                    a1:a6:ff:d9:cf:50:5f:f6:37:17:a6:7d:9c:dd:c5:
                    b9:ce:07:11:e1:29:64:e7:47:20:9b:da:99:5c:6f:
                    fa:05:07:b7:a9:f7:97:21:46:a9:2b:92:0e:4d:24:
                    04:31:e2:2e:0d:7c:74:c7:41:7b:c6:fe:c7:36:8a:
                    f4:65:ec:0e:c5:e8:91:53:8f:2b:54:34:41:1b:eb:
                    27:a5:e3:eb:55:37:bf:a2:38:99:b8:d7:ca:a4:2a:
                    4b:85:b1:da:54:1f:ba:02:30:66:87:9a:7e:5f:8a:
                    4a:18:dc:0b:94:9a:09:73:77:45:83:6e:a4:25:3d:
                    bb:8c:37:50:03:e3:db:99:05:92:e2:b3:dc:ce:8e:
                    4b:1a:85:1d:cc:01:28:d9:a8:ad:6e:1f:3c:59:af:
                    6c:af:88:fd:37:30:7f:61:b4:f4:81:9c:27:f8:af:
                    5a:50:ca:cd:7a:d7:f9:4b:d2:99:28:8c:57:50:c0:
                    28:a9:06:80:de:4e:89:95:59:3d:9c:a7:23:79:a7:
                    70:b5:48:91:e5:47:ab:c1:cc:de:43:32:34:43:ad:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:81:82:82:DB:B9:58:49:E4:ED:71:D4:21:22:BC:8D:E4:AB:94
            X509v3 Authority Key Identifier:
                keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:64:8c:10:21:59:41:f8:87:58:f2:c8:9d:01:80:f0:8f:19:
         4f:29:aa:f4:01:f0:11:1a:57:46:4b:64:31:a6:07:f9:56:74:
         71:cd:a5:29:3d:b3:31:91:35:6c:a3:5d:d0:09:d6:37:5a:18:
         0e:27:38:cd:29:16:1b:6b:38:8a:f3:73:f7:1e:d9:63:1b:a1:
         94:89:f3:01:12:28:f2:c2:34:08:ba:e4:b2:53:26:71:6d:ed:
         80:7c:8c:76:ea:07:00:fa:3a:8c:1a:06:2b:86:c3:f3:b2:62:
         ef:b3:b5:f2:a3:aa:59:7f:45:45:cf:20:7c:78:29:af:71:61:
         b4:f0:bf:92:d4:22:1c:e9:bc:e3:9b:d4:fa:ca:6d:cc:ac:04:
         48:6e:ee:e5:cc:29:26:19:55:61:cd:c6:68:a4:64:a7:3a:5d:
         ab:f3:8e:01:e1:6f:af:b0:66:d5:2e:a6:5a:64:52:5c:22:af:
         57:f8:e3:b7:5f:0c:6f:7c:73:7a:84:70:d8:b2:fb:1c:01:65:
         87:f8:0a:d0:6a:91:9d:87:20:eb:2a:b9:a9:80:8c:cd:07:28:
         cb:9e:37:62:0c:ab:68:b3:25:8c:9c:d0:b2:9c:98:4c:b9:e4:
         60:07:2b:bb:07:d2:cc:d3:39:5f:07:50:5e:5a:50:16:5a:48:
         33:9c:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:11 2025 by rpki-client