Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          DthcrbyICPraEn7Nq2Cd2esu26ql76LcTPx1qSjXf9Y=
Subject key identifier:   D5:E0:9B:45:54:A9:B0:D0:30:F2:5C:80:56:D9:0A:C7:87:1B:25:8D
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          0876
Signing time:             Thu 24 Apr 2025 20:30:29 +0000
Manifest this update:     Thu 24 Apr 2025 20:30:28 +0000
Manifest next update:     Thu 01 May 2025 20:30:28 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: 6z2tvoOl6vFV18+2DzOMPFXMJo0PM8rVNoaAp+rHVVg=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Apr 24 20:30:28 2025 GMT
            Not After : May  1 20:30:28 2025 GMT
        Subject: CN=680a9f64-b057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:63:8e:7d:ce:e5:b7:17:e0:be:8a:b3:b4:
                    30:b0:b3:29:13:33:18:2c:83:7c:f6:ab:f5:4f:ef:
                    15:90:34:bc:e3:cf:ee:71:dc:8b:ad:f7:4d:4b:18:
                    bc:9d:8d:0f:ee:f3:c7:e5:af:41:95:39:4e:5a:eb:
                    70:85:44:ad:c0:b4:f7:d5:c0:e4:f3:e9:b8:a9:0c:
                    38:a2:19:5d:97:4e:b8:4e:f6:06:50:d2:18:9b:0d:
                    fb:e7:6d:bb:49:da:c5:bc:10:bf:9c:5b:01:39:c1:
                    8c:b8:bf:0e:18:e8:4f:61:61:ee:e7:13:27:11:1f:
                    78:f2:53:38:a3:aa:ff:8c:2d:1f:69:54:31:4e:06:
                    1c:0d:29:58:f0:ed:97:84:53:e7:b5:fd:b8:6a:fb:
                    04:7c:da:6d:bd:37:82:c2:be:3d:40:a1:8f:4e:de:
                    53:af:0b:a2:60:75:4f:2b:63:92:18:f0:ac:59:cd:
                    1c:25:b7:57:1c:c7:4c:d2:d8:80:25:9a:25:73:07:
                    6c:e2:76:4c:ac:11:27:3a:46:4d:d4:9f:b0:a4:56:
                    a6:52:93:84:ea:d8:61:b6:9d:2c:78:1c:74:57:ae:
                    d3:ab:9a:d0:87:f2:e7:f7:34:c8:ea:93:e3:09:c8:
                    c4:b5:e5:e1:f4:9e:0d:fa:1e:f4:3d:83:35:6f:99:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E0:9B:45:54:A9:B0:D0:30:F2:5C:80:56:D9:0A:C7:87:1B:25:8D
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:5d:f7:8c:b4:41:6f:34:0b:64:df:d6:66:93:84:b7:04:
         0d:8b:35:d3:0d:21:8a:65:24:e2:8a:9b:07:e3:49:3e:a4:a2:
         d9:b8:ec:50:0e:59:db:da:ea:aa:a3:34:54:52:91:dd:e5:11:
         ed:83:4b:40:fa:2c:1c:9f:1c:43:96:4e:c0:1c:18:fa:c0:00:
         a8:77:36:51:3f:b4:d3:05:20:b7:f0:8e:f7:0f:b7:b2:de:fe:
         88:6d:bb:e3:de:29:56:75:eb:4a:0a:59:b3:41:36:9c:d4:2e:
         0c:e6:b9:97:f2:8c:3e:5f:4c:5d:8a:02:7a:31:d1:9c:11:a0:
         6c:7d:90:23:18:d5:b3:6d:39:c1:49:35:65:95:5b:ed:db:9d:
         d3:b0:1c:d8:25:f6:0f:22:73:05:32:74:c2:a0:30:4c:59:d7:
         a0:9c:b4:0d:2f:b1:42:c3:34:df:a3:b4:13:fd:86:f1:0d:27:
         ec:62:e8:6b:ac:3c:5b:c2:87:04:80:46:fb:51:d7:51:8c:a7:
         f8:e1:a5:08:c9:47:a4:93:5c:c9:c7:39:3c:fa:66:fe:47:c2:
         7e:68:a3:77:43:4d:7f:ec:67:13:0c:b9:94:be:a7:cd:f4:32:
         12:73:62:b3:e7:3b:cb:bf:f5:02:93:76:e9:e5:45:40:dc:e7:
         4b:a5:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:06:46 2025 by rpki-client