Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          TMsWKS5PxazmFrgbxiBh5poXqICn1FNB3CjOJodyujA=
Subject key identifier:   80:D3:5D:B5:50:CC:7A:BB:6D:31:CA:6E:09:DE:04:5F:F7:51:00:86
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          0174
Signing time:             Fri 25 Apr 2025 02:55:27 +0000
Manifest this update:     Fri 25 Apr 2025 02:55:26 +0000
Manifest next update:     Fri 02 May 2025 02:55:26 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: AEXOK1i+tBpZ+/WpDt/wD8srHCQTmu05+UN0npWQEOg=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: kgAbrMxDjdyKqEEvFfGcY8h/Xgxe3iJZ0yN268wXz80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Apr 25 02:55:26 2025 GMT
            Not After : May  2 02:55:26 2025 GMT
        Subject: CN=680af99e-32ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:b8:e2:03:78:47:1b:45:b9:05:28:f6:be:
                    42:24:46:21:47:a0:90:62:b1:e1:c2:fb:cf:c8:b0:
                    33:e5:ba:2c:bb:eb:4a:e1:32:62:b5:78:4b:e6:5e:
                    f9:46:57:d5:fc:72:a1:6b:b9:75:b2:ab:67:fd:aa:
                    ff:6a:4a:f9:46:98:34:17:b0:94:13:3f:d7:20:57:
                    34:bb:87:94:7f:46:c7:21:89:c1:91:91:ea:af:5c:
                    72:2b:55:1b:1d:77:75:94:93:cd:da:7b:9f:1e:73:
                    50:93:bd:ac:5a:5e:cf:83:2e:ae:ea:ac:c5:dd:86:
                    8f:13:f5:16:6c:57:18:63:e0:30:fd:42:90:98:7a:
                    6c:b6:56:fe:59:97:05:20:97:fc:7d:76:24:0f:7d:
                    d9:10:ac:bf:e5:fc:08:0b:1a:40:89:e1:3e:58:03:
                    0d:86:e3:df:f0:18:8d:38:39:50:4b:4a:d8:c0:b0:
                    7c:94:e7:9b:b5:b3:97:f0:17:c6:a1:f0:c4:32:d1:
                    21:2f:22:d1:de:7b:36:97:69:b0:86:00:d6:93:07:
                    7e:cd:24:9f:06:6f:75:32:53:7d:26:38:e6:7d:d8:
                    73:b9:ff:b3:29:3c:28:be:a7:d4:51:b2:f6:5b:ac:
                    15:84:93:2d:7d:32:a0:d2:60:7b:37:ee:ab:1a:0a:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D3:5D:B5:50:CC:7A:BB:6D:31:CA:6E:09:DE:04:5F:F7:51:00:86
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:00:ef:8a:f2:4a:8c:b1:6e:b3:19:a8:10:f3:b1:3b:f7:
         fe:c9:ad:7d:da:29:5e:d9:a7:5f:d1:d8:dd:9d:4a:8b:eb:c2:
         74:9f:23:aa:fd:48:5b:04:e0:34:ad:83:b4:04:4c:89:00:40:
         25:9b:82:eb:79:28:c2:a7:35:3f:0c:8f:ec:a0:26:db:74:3f:
         bb:c6:2d:9e:01:5a:25:5e:06:e5:50:ab:c5:c1:ed:28:d8:04:
         5c:98:91:3c:db:05:f8:6c:e4:dd:7e:95:4c:c5:72:75:47:ca:
         ba:ff:8b:9e:90:03:b2:57:eb:bd:c1:e1:84:26:1f:bb:b0:49:
         7b:83:05:46:c1:6d:58:c1:9c:94:ce:da:12:94:38:d7:57:3e:
         85:de:ac:1d:9b:c8:c9:5d:d7:5e:9d:d0:ac:b9:92:f0:9d:3a:
         06:27:c3:60:1e:fc:a9:11:94:cc:86:e0:8b:0c:e2:6f:02:aa:
         f4:fb:ed:b1:75:92:4d:39:30:32:28:9e:f4:02:e3:80:10:e3:
         41:b3:0a:c5:87:d2:66:e2:98:ab:de:c4:34:a6:d8:1b:01:ef:
         d9:8c:c2:b2:86:d7:8b:2b:9f:19:a3:92:5f:01:a4:a0:76:8f:
         7b:9b:2e:16:52:9e:e3:29:0e:07:c1:38:a9:1e:2c:db:31:04:
         53:90:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:30 2025 by rpki-client