Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          Cyu175BBe/2vT49PJcy4BAJCxwarNDDuBUWpViOPOhM=
Subject key identifier:   51:3B:78:A6:13:3F:D9:93:60:9B:C4:06:31:D7:8B:B4:FF:AE:66:54
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          030C
Signing time:             Mon 05 May 2025 00:49:15 +0000
Manifest this update:     Mon 05 May 2025 00:49:15 +0000
Manifest next update:     Mon 12 May 2025 00:49:15 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: rQnv8xKafyw0OH5eoOMLeDUAGe1iakO+m6Mc8qYPXbQ=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 00:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: May  5 00:49:15 2025 GMT
            Not After : May 12 00:49:15 2025 GMT
        Subject: CN=68180b0b-48cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:fc:81:ae:44:47:b7:d8:c8:c6:e3:9c:35:
                    f3:17:15:34:13:dd:ad:8a:f0:4a:ef:fa:ba:e4:ec:
                    82:69:7b:e8:f9:4f:12:8f:df:50:f5:cd:4f:68:fa:
                    4a:e3:42:fe:49:63:6e:21:be:66:53:d3:d8:b7:4c:
                    de:12:f1:01:d6:60:58:23:0f:6b:55:44:c5:59:58:
                    f6:5c:31:8c:9f:24:f4:d8:f0:01:04:7a:03:cd:52:
                    04:cc:a5:c9:34:76:4c:34:a4:17:f4:c0:c7:ce:f7:
                    7c:08:1c:f5:ff:95:4a:79:d4:56:6d:7a:3d:f1:2a:
                    63:a4:91:2a:b7:75:dc:58:5c:b3:31:65:01:cf:93:
                    f5:ae:9e:e2:2b:08:9c:7e:06:02:29:14:aa:9c:6f:
                    a4:8d:02:41:e4:30:2e:0d:1e:23:a6:c7:ed:93:8e:
                    ad:5a:16:af:fe:39:3a:ee:9d:73:94:ab:49:40:cb:
                    f7:d7:d3:85:b7:e1:cb:6d:21:25:c3:2d:a8:fa:d6:
                    0a:0d:81:06:e1:b9:1a:e1:fc:8e:3a:b8:13:85:53:
                    26:5f:eb:45:b3:78:d5:e0:c7:ae:50:14:ad:c7:ec:
                    56:9d:55:c8:b5:0c:0f:a1:c8:5a:7c:1e:50:76:9e:
                    85:e4:a0:5d:8d:c7:af:25:19:1e:27:ca:63:2c:30:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3B:78:A6:13:3F:D9:93:60:9B:C4:06:31:D7:8B:B4:FF:AE:66:54
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:5d:88:f0:8c:58:b4:90:94:1b:e5:06:39:20:57:ba:b9:
         be:58:28:27:b8:f3:9d:eb:80:78:55:60:5a:d8:9e:98:e2:c0:
         73:74:89:9d:1b:19:5e:9f:d1:f7:65:79:4f:d1:b0:23:ac:cc:
         59:57:a5:61:d2:ed:cf:e9:a0:39:4a:6b:70:0b:da:3c:9f:50:
         74:65:c5:77:43:10:0d:e9:f6:86:60:84:27:5a:00:45:83:64:
         ec:9c:fb:95:7c:77:8c:87:9b:f9:41:f5:7a:23:97:14:8c:1a:
         24:9a:6b:16:3c:41:b2:38:0b:3d:94:c3:6d:93:ea:ff:1b:07:
         8f:78:d7:a6:ec:0f:f8:4f:a9:69:44:28:e4:7a:10:5a:13:01:
         e0:f5:e8:cd:9d:c7:58:a3:b7:85:9f:83:a8:12:d8:d1:18:23:
         01:27:35:e6:4e:49:98:66:61:7e:92:3d:1b:a4:1b:bd:af:f2:
         a0:04:fb:95:9b:8b:3b:f8:07:4e:23:66:5e:01:7f:b0:99:cc:
         59:4c:d4:6c:61:76:a9:a1:9a:ab:44:52:96:1a:d2:bc:fe:d0:
         2c:de:be:4a:d7:8e:b8:c7:62:cf:5e:b5:62:df:86:10:2e:92:
         b6:73:bd:1e:d6:cb:f9:fa:86:70:ef:3f:28:ce:83:83:77:4d:
         c0:f5:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:13:33 2025 by rpki-client