Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          Ba3a8pj9LwMpEyFWElSZ1waL6WLdMoQg8DCVRUtNPag=
Subject key identifier:   BD:D7:11:69:5E:F5:74:33:7F:A9:E9:3E:7D:7A:62:03:58:92:F0:F2
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          01DB
Signing time:             Sun 27 Apr 2025 01:53:26 +0000
Manifest this update:     Sun 27 Apr 2025 01:53:26 +0000
Manifest next update:     Sun 04 May 2025 01:53:26 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: qd+fDCULq3vue2dtGSZpLwCD4yR0chcckUPRafKbHVQ=)
                          2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=)
                          3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=)
                          4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Apr 27 01:53:26 2025 GMT
            Not After : May  4 01:53:26 2025 GMT
        Subject: CN=680d8e16-fb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:47:c8:00:83:10:7d:24:b7:86:4b:75:f8:
                    cd:84:fd:b6:c3:63:ef:f9:f5:5f:4f:5d:ed:a3:9a:
                    c5:c3:3c:69:75:46:d0:1d:e5:e5:13:e8:fb:1b:61:
                    2a:45:20:ed:ad:c0:84:c3:b3:96:e1:96:63:c4:15:
                    b4:9c:bc:ba:00:48:8a:98:63:0d:16:a6:9f:c4:f5:
                    9a:3f:77:31:7c:f0:c7:7d:94:b4:63:8e:e0:93:fc:
                    4a:53:59:3c:49:22:7c:63:93:b0:85:f7:83:cc:fa:
                    f8:86:44:bd:a1:d0:6e:83:5d:e2:d7:72:ae:b3:6e:
                    2d:80:66:bb:e5:c6:88:05:a8:83:b0:df:94:03:80:
                    7b:13:08:52:bf:bb:92:8d:ce:85:5a:86:aa:41:d9:
                    2a:1f:0a:11:d3:95:03:18:4f:03:a7:9a:d3:ee:7e:
                    cd:e3:9f:c3:46:38:d6:27:e0:05:75:d0:23:2d:c7:
                    79:67:1b:0c:82:e1:34:c9:f2:3b:f5:96:35:34:88:
                    92:98:cd:14:06:91:01:ce:51:24:6d:33:16:60:29:
                    f6:16:d1:4f:e9:9f:fc:61:14:17:08:11:dc:09:61:
                    3f:00:73:7f:6c:ab:02:6b:cc:a4:9c:25:ac:0e:aa:
                    b7:37:01:fe:40:5f:f5:47:e3:5c:f8:9e:76:43:92:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:11:69:5E:F5:74:33:7F:A9:E9:3E:7D:7A:62:03:58:92:F0:F2
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e1:0b:50:a4:76:26:b9:40:09:cd:9b:3e:f6:44:ba:37:9f:
         2f:60:04:e7:c7:fb:13:83:79:08:22:bf:ac:a9:68:0c:40:cf:
         ed:1f:cd:c1:16:c7:f9:03:2a:30:8c:c9:f5:80:e9:63:a5:d6:
         99:5e:4f:0b:d7:cf:81:8f:8b:46:f2:d9:23:3a:c4:0c:28:58:
         e6:9d:6b:41:da:97:eb:a8:da:df:12:4b:77:60:55:6b:5f:be:
         f4:a8:e1:8a:b1:16:54:f1:0b:84:96:db:5c:9f:60:65:9b:1d:
         51:8b:14:67:ea:62:ce:49:cd:cd:53:7e:ef:be:49:7d:73:60:
         37:02:7c:8a:6f:f0:0d:aa:07:ff:ef:aa:11:a6:40:a8:03:75:
         f7:56:65:60:be:94:03:76:2b:05:e6:dc:5d:73:d0:9e:7d:01:
         6b:5c:ec:f1:f5:b3:e7:af:f6:ab:dc:77:89:87:91:0d:cc:88:
         0c:4a:d7:99:4d:a1:62:a1:10:20:ff:cd:b5:be:2b:63:bf:a1:
         45:c4:be:7f:7d:47:61:24:6d:93:d8:4c:9d:d9:e2:b4:0d:d6:
         9f:54:bb:25:2d:cc:f3:69:1d:00:22:54:30:68:08:e9:b4:02:
         d6:c4:f7:90:74:13:af:83:dd:47:e4:b6:5e:7a:6a:ec:e6:f2:
         5e:6e:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:14 2025 by rpki-client on console.sobornost.net