Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          4ptI1xyZoAf2QdqoQ/mBZ779mZVlz3/VHl8EvW+QjBk=
Subject key identifier:   98:AE:4F:4D:85:91:E3:AC:F7:06:57:F3:67:DF:09:72:38:32:98:48
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          60
Signing time:             Fri 25 Apr 2025 06:03:56 +0000
Manifest this update:     Fri 25 Apr 2025 06:03:55 +0000
Manifest next update:     Fri 02 May 2025 06:03:55 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: j9BUvB2y0K2B5D4Kt2rB7xS+HkEukkG5v35LKJY1XSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
        Validity
            Not Before: Apr 25 06:03:55 2025 GMT
            Not After : May  2 06:03:55 2025 GMT
        Subject: CN=680b25cb-7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:01:21:38:b1:97:31:53:8c:f0:52:76:b2:
                    2b:be:24:fa:f8:9c:1e:40:cf:48:31:a9:d8:56:4d:
                    02:96:18:c6:ba:e1:8c:b1:bc:02:8d:bb:df:a6:2c:
                    19:d9:b2:8d:e1:77:bb:13:ba:a3:b7:4a:73:64:86:
                    b4:e2:30:71:45:88:b3:cf:82:e4:e2:d2:3f:68:e5:
                    37:6d:76:2f:ab:88:a8:fb:b1:f2:ec:f5:2e:73:50:
                    e9:ce:80:b2:f0:db:59:a2:9d:a1:e2:8d:3b:a4:3b:
                    e1:4c:26:f3:b9:94:44:49:99:15:31:1f:b4:6e:8c:
                    c4:0b:64:84:03:45:3d:bd:e2:e8:bf:5d:bc:06:da:
                    de:2c:2b:0c:58:07:02:c2:df:16:9e:fd:ce:28:23:
                    08:f6:bb:43:cb:ec:8f:7f:03:c7:0b:cf:92:32:4e:
                    b2:db:44:8e:72:ed:72:f7:35:8b:e3:c5:61:a3:53:
                    93:67:36:90:30:6d:27:80:bd:e2:fb:a6:be:d6:06:
                    68:bc:dd:6d:1c:32:f6:9d:7a:bd:b4:90:71:38:75:
                    22:dc:0d:1a:57:ac:05:8c:6e:2b:1c:f8:cd:93:5e:
                    2f:62:cd:52:76:2e:25:72:34:1c:f1:dc:26:55:a0:
                    4f:ec:c2:60:13:c3:7c:8e:db:3c:d6:12:7a:9f:70:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:4F:4D:85:91:E3:AC:F7:06:57:F3:67:DF:09:72:38:32:98:48
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:99:0a:31:d4:ab:f0:de:80:f6:b1:71:e1:34:a1:93:34:
         aa:8d:20:7a:11:3a:98:b3:39:b8:1e:2a:28:86:da:2a:72:30:
         13:f8:de:3a:8f:c7:dc:65:8b:81:d9:5e:0b:f6:92:03:6d:4f:
         ee:02:da:4c:84:1f:99:28:60:db:44:83:cc:2c:43:3a:90:66:
         cb:b3:18:54:6b:de:c6:0c:d8:d0:32:9a:4c:9f:b6:6e:7a:82:
         66:61:eb:fc:d3:b3:b8:dc:23:89:e4:69:6d:58:b0:a9:cc:81:
         0e:af:e2:4a:e3:d5:26:04:6e:0a:f5:82:3f:97:06:d5:d3:bd:
         3b:bc:ef:8c:c1:25:a6:ee:92:09:8b:a9:e0:f5:69:6d:07:e2:
         ba:07:b9:4a:01:59:79:13:1a:68:a0:fd:30:ba:62:64:2f:bb:
         0f:20:76:74:fc:d7:ab:79:69:6d:ad:5a:9e:86:0d:80:23:5c:
         40:f5:c3:85:9f:17:cf:d8:02:3c:ac:c6:e4:5f:78:84:b3:c8:
         2d:68:54:50:e4:81:e0:9a:34:38:aa:1b:ee:b1:6a:9b:df:b9:
         49:76:b6:eb:c6:74:4e:9a:a9:76:c2:ca:39:a1:01:05:32:90:
         74:0c:77:76:13:21:e6:c6:d9:af:6c:be:b4:ca:4c:3b:9c:8c:
         37:c3:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:53 2025 by rpki-client