Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          PUHDYE3nQuJFTPQ0F/RHcxwYegFF/AjTjjag+N/lxG8=
Subject key identifier:   6A:82:DF:BE:34:1F:B6:81:04:D7:9F:53:F1:92:1C:C6:46:AD:1E:4D
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          0771
Signing time:             Thu 24 Apr 2025 21:18:55 +0000
Manifest this update:     Thu 24 Apr 2025 21:18:54 +0000
Manifest next update:     Thu 01 May 2025 21:18:54 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: wtP94JKtTGw6HOSGTitrwumR4q0Tu0FOv+AG2284Jtk=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Apr 24 21:18:54 2025 GMT
            Not After : May  1 21:18:54 2025 GMT
        Subject: CN=680aaabe-8ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:6b:99:92:a6:d6:f9:e1:f7:7b:53:ec:2c:
                    87:4e:88:21:6d:d6:03:9d:b3:18:1f:21:b3:7c:86:
                    c1:b8:62:44:56:96:2e:7c:d9:33:ae:6a:e4:6f:96:
                    c0:25:45:c2:6e:3c:1d:11:0c:f5:85:0d:8f:fa:8c:
                    8c:6c:21:ff:ea:ca:38:e6:ee:af:ad:b5:52:b8:9b:
                    5d:a3:f0:d0:8e:d0:17:44:96:86:b9:75:38:b2:1b:
                    a9:02:74:58:84:ab:b7:24:45:0b:77:83:9f:d6:da:
                    53:e3:5d:39:a1:f2:49:96:f2:0e:25:56:36:f4:18:
                    64:b2:1f:fe:24:b4:b1:ef:d2:e7:e2:4c:b8:97:e5:
                    dc:69:ed:98:e9:e4:b4:64:7d:5e:8b:a4:c8:2e:30:
                    a8:98:29:b3:95:a9:5b:f9:5a:7a:75:b9:e7:24:2f:
                    8a:2e:52:8c:29:f5:4f:64:22:dc:71:0a:6a:c1:fc:
                    0d:0f:26:3d:27:12:27:00:8b:8d:36:ae:b0:9d:36:
                    19:18:31:1c:44:88:cb:33:37:0c:96:a3:09:2c:f3:
                    19:03:26:04:17:89:a0:b1:f2:6b:c3:96:44:8f:24:
                    0b:be:ac:ca:0e:ce:c2:22:5b:19:f8:e8:fa:7b:cb:
                    8d:57:24:48:e6:b2:d5:0e:55:ae:bb:1f:a8:54:6e:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:DF:BE:34:1F:B6:81:04:D7:9F:53:F1:92:1C:C6:46:AD:1E:4D
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:05:52:1e:e0:c6:80:c6:68:3b:aa:f4:69:7a:e3:77:f7:89:
         06:9a:35:cd:4b:0d:7a:47:0a:a0:d9:5f:4e:68:5e:ca:69:59:
         2c:c9:7f:01:61:b6:2b:ff:03:31:ef:d6:5a:0c:54:1a:ed:ba:
         bf:cd:cd:22:f5:89:0e:8e:4e:fa:f1:cd:19:7b:21:f8:58:c0:
         39:06:b3:e5:45:bf:94:31:af:32:a2:fa:d3:46:89:58:e6:b8:
         a8:e7:9e:92:21:a6:63:fa:f5:a1:97:ac:bc:30:d4:3e:27:43:
         a8:cc:31:8f:ea:8f:f4:42:b0:91:a1:2d:d0:68:ac:ee:93:85:
         f8:1e:44:7f:61:fd:7d:b9:17:c8:0c:c4:cd:22:4b:ff:5f:29:
         24:15:c2:bb:37:96:24:98:64:0a:08:a0:c2:11:c2:9c:5e:73:
         7f:31:0f:aa:6c:03:37:80:96:87:c2:0c:72:76:ed:ff:9c:ec:
         6b:9b:19:48:84:62:d3:bb:c8:0c:76:48:e5:2f:49:53:32:99:
         b5:fe:a3:b5:ff:70:48:e4:5e:3a:1b:64:c9:01:a0:fb:19:ad:
         5f:8f:94:4e:4a:a5:a9:13:d3:6a:e3:ed:2d:1e:2b:72:b0:b4:
         67:df:b1:27:68:fa:e7:b6:83:40:c4:f6:97:11:cf:fd:45:95:
         4f:2b:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:40 2025 by rpki-client