Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
File:                     4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json)
Hash identifier:          2r8nXCEfG3L826Pt7ubmDfRosv2I1wmSoe/aWxo69w4=
Subject key identifier:   73:A5:F9:7F:88:98:35:E2:69:3B:FA:ED:6A:BA:5B:BF:4A:A2:76:FF
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
Manifest number:          035E
Signing time:             Sun 27 Apr 2025 00:39:54 +0000
Manifest this update:     Sun 27 Apr 2025 00:39:53 +0000
Manifest next update:     Sun 04 May 2025 00:39:53 +0000
Files and hashes:         1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: RzbZSLmoktTRLwLzxwD06tyzH0n+O0fdpy8LQCYxOVY=)
                          2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9EpF1KSRDUTf9NcUi/a70PIVjE8UhhzWQZ3BPoHFE5E=)
                          3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: vRjukEW4CGsNZU7R18s79FlIRs3QIG4fzBAqDqQhjVk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: Apr 27 00:39:53 2025 GMT
            Not After : May  4 00:39:53 2025 GMT
        Subject: CN=680d7cd9-51e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:f1:07:3e:1f:ad:79:1c:d1:87:76:a5:42:
                    0a:6e:ca:c5:cd:a0:12:17:85:e4:56:ad:ca:d0:26:
                    9a:4c:a6:ba:5a:fc:4d:12:78:9a:86:a1:f0:89:ef:
                    03:d1:01:8e:11:9e:b5:fe:95:7b:2e:94:f6:19:dc:
                    ad:a6:c8:a4:6d:4e:fb:36:ba:ab:50:df:94:f7:ec:
                    38:13:76:64:37:85:70:f0:af:0b:8e:ee:90:0f:22:
                    c0:f1:7d:6c:91:45:ee:3d:e8:9a:d3:a1:83:cc:8a:
                    48:18:3e:15:5d:8c:51:a3:a9:8e:72:9b:dc:80:b6:
                    6d:d8:b0:7f:2f:54:7a:dc:b5:73:16:ad:0f:85:f6:
                    1b:ff:2b:a9:0c:f1:d4:bf:65:c6:24:68:0b:6f:8e:
                    7a:22:9e:96:c4:e5:61:87:a2:60:68:2f:9a:37:15:
                    8b:ee:01:6e:84:17:66:c4:30:d3:a5:e6:cb:f7:c2:
                    19:bb:9d:46:35:d6:9b:ea:16:06:96:2b:60:66:5b:
                    fd:d4:09:1a:ff:2a:c3:83:80:5c:b5:9b:ba:d8:00:
                    bd:81:c6:e9:6d:cd:f2:8d:92:56:bb:60:60:69:31:
                    7f:09:a7:48:24:c6:4e:f2:fd:c5:ce:d0:80:fa:1d:
                    23:b7:88:ed:f6:e8:bf:aa:52:24:a1:af:96:10:4e:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:F9:7F:88:98:35:E2:69:3B:FA:ED:6A:BA:5B:BF:4A:A2:76:FF
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:fc:22:11:7e:d0:25:a5:dd:d2:fd:57:72:fb:ea:76:03:
         78:1d:9d:0b:ab:b4:8e:52:db:5f:57:5e:ee:e6:18:36:1e:d0:
         fe:8a:0f:38:ea:9b:6d:6a:32:c3:7f:f3:a4:d3:cb:a2:6b:6c:
         1c:77:f2:e7:7d:2e:2d:d8:5a:f9:90:4b:ee:fa:84:44:b1:75:
         06:65:9b:5e:1b:f8:4b:de:79:fd:6c:9e:19:db:91:de:8d:40:
         24:70:c7:64:30:8f:6e:aa:1b:2e:0f:27:e0:85:48:cb:24:6d:
         04:12:fb:c2:83:3e:5d:56:59:d2:86:8a:5f:e3:b9:a1:78:4d:
         c5:af:3e:4e:51:a6:d1:a7:ce:a7:b9:33:89:83:b8:de:ec:59:
         14:1a:3b:4a:9c:e4:a4:87:f5:80:d9:dd:1c:91:be:34:78:07:
         2d:b6:37:89:7b:2b:65:9a:eb:d2:c0:83:8e:17:8f:d5:b8:56:
         06:18:a5:97:06:a8:0b:65:aa:7c:b7:72:94:ca:9f:a8:41:06:
         d2:16:e9:39:6f:44:46:5e:43:0b:dd:3c:18:92:09:25:0d:6b:
         16:8f:c8:aa:86:a6:f3:26:ef:55:6f:0b:80:f6:8c:f2:85:09:
         76:f5:61:82:9a:52:92:d3:27:be:1a:6a:25:7e:39:f3:4f:da:
         6d:de:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:14 2025 by rpki-client on console.sobornost.net