Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
File:                     594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json)
Hash identifier:          Ef5dCxZDAZuUqFIL+EN02hVNkEQ0rj0xH+YEkr1MkiM=
Subject key identifier:   26:E5:EE:30:43:DE:EE:7D:CA:B6:1D:98:30:EC:C5:F8:F4:E5:F7:13
Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
Certificate issuer:       /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Certificate serial:       0D60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
Manifest number:          0D40
Signing time:             Thu 24 Apr 2025 17:58:48 +0000
Manifest this update:     Thu 24 Apr 2025 17:58:48 +0000
Manifest next update:     Thu 01 May 2025 17:58:48 +0000
Files and hashes:         1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: x95K9aa758xRRttK6dcm8eOryHoN6O8k4xwUUBjo6/c=)
                          2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
        Validity
            Not Before: Apr 24 17:58:48 2025 GMT
            Not After : May  1 17:58:48 2025 GMT
        Subject: CN=680a7bd8-6d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:5e:1e:13:4a:69:dd:c0:ea:5a:bf:b9:23:
                    bd:49:a8:9e:ac:e0:b8:ef:ee:c4:77:98:33:a5:69:
                    14:7b:03:4f:b2:b9:b2:00:5a:57:77:8d:2b:3e:8b:
                    81:d3:06:2a:12:00:dc:4b:ed:97:78:52:79:4c:65:
                    c6:12:95:15:7c:80:d5:30:64:55:a0:c3:8e:9f:15:
                    a9:15:44:74:26:21:69:1c:1e:1a:15:a1:64:c7:04:
                    70:4c:9c:86:1f:80:de:36:74:e3:65:89:4a:6c:87:
                    8f:af:be:68:62:aa:e8:ff:27:54:0e:ca:57:f6:c6:
                    31:37:66:75:a5:58:ae:7e:de:15:a7:57:51:c4:0f:
                    4e:16:40:2f:55:e5:09:8b:7b:08:51:72:a3:67:8b:
                    ef:e9:61:76:bf:d4:74:6d:b4:0d:bf:ad:42:52:a7:
                    b1:a3:55:36:50:3e:6c:2f:08:5f:1b:72:fa:fe:97:
                    e5:f4:88:26:6c:53:0f:87:2d:ca:ff:08:61:1d:51:
                    f4:98:83:07:a3:06:e1:24:20:57:81:67:a5:73:06:
                    81:67:f6:47:b5:ce:0d:30:60:09:a8:11:eb:ea:ef:
                    b6:eb:9a:06:c4:36:06:51:99:62:d3:ec:91:07:ab:
                    76:b3:af:48:47:1c:a8:a9:b1:b8:9e:52:a6:be:c6:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:EE:30:43:DE:EE:7D:CA:B6:1D:98:30:EC:C5:F8:F4:E5:F7:13
            X509v3 Authority Key Identifier:
                keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:91:8d:c3:39:86:68:45:a1:a6:72:c8:97:c8:06:ec:6c:
         cb:e2:ef:93:0c:d8:e2:4e:83:3f:bd:77:15:79:46:8e:4a:9e:
         c0:b6:1b:66:8e:bf:64:08:57:f6:05:31:4d:aa:21:e4:a4:d7:
         1e:21:29:36:3b:81:83:f7:78:6b:11:f7:8b:32:fa:01:43:22:
         e3:1d:d2:4f:30:85:55:6e:bd:4a:eb:70:be:06:29:10:01:79:
         15:00:eb:81:f0:ea:ca:c8:eb:c7:fd:1e:37:78:d2:cf:37:61:
         12:af:46:36:58:39:95:68:2f:6d:28:48:74:0b:41:e2:b4:14:
         a4:12:3d:89:2c:c5:0b:45:c8:74:fb:f0:4a:04:d7:42:69:8d:
         d5:8c:5e:ce:d9:80:99:08:f7:44:aa:a5:45:c0:78:2f:7d:35:
         3b:b4:93:2e:7b:24:23:28:78:9f:cb:a1:da:67:a3:f8:dd:13:
         47:77:10:87:01:49:e9:ed:04:8b:20:f6:17:ab:98:57:ae:e4:
         59:51:a0:7e:8c:04:be:a6:e6:5c:6f:57:bf:ca:09:5c:3b:d9:
         f4:f4:81:3d:64:f6:17:1c:18:81:e3:b5:e7:e1:ca:5c:57:46:
         99:7e:68:c6:23:3f:1e:1e:dd:f8:d6:4f:f8:5d:67:ad:c4:07:
         6f:12:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:47 2025 by rpki-client