Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          sI7FnaIbFh5UB/6+ExVD4+IRLotumx4nY4yeEYYwRAE=
Subject key identifier:   05:CC:34:F8:4F:4C:F6:49:93:CD:59:7A:92:12:86:B0:EC:5C:3F:3B
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          79
Signing time:             Sun 27 Apr 2025 05:34:32 +0000
Manifest this update:     Sun 27 Apr 2025 05:34:32 +0000
Manifest next update:     Sun 04 May 2025 05:34:32 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: x6KzsSPLUja1QHgnRAO8buqqJwOYlyGkqTXRHOzg7k4=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: Ur23uerjkF05UN2d4OV8Z6LvPx8JS26HE6YTaEzhleU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Apr 27 05:34:32 2025 GMT
            Not After : May  4 05:34:32 2025 GMT
        Subject: CN=680dc1e8-2089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:33:a8:bd:64:5c:a8:b4:f1:c3:88:23:bd:
                    9b:4e:af:a9:4d:d5:2f:c0:f0:92:3a:4b:c2:72:ac:
                    06:18:0d:30:11:3e:2e:ba:7a:80:49:1c:69:8b:a3:
                    63:1f:6e:2f:e5:f1:69:e0:70:05:17:a9:4d:77:79:
                    c5:e7:0d:84:86:19:41:95:81:a3:19:5b:00:9d:a6:
                    41:8d:a1:f0:be:9f:90:47:94:39:f5:fb:c4:d6:5b:
                    00:8c:7f:de:90:93:bd:49:38:c8:a3:3d:2f:ab:5f:
                    36:b2:1e:a2:cd:8e:1e:fb:f3:a2:2b:cf:f3:e0:65:
                    41:51:38:f2:ab:ef:96:ce:29:32:c9:c7:37:55:cd:
                    07:a9:b8:01:ae:67:58:30:db:4b:21:ae:08:d3:1a:
                    4d:f6:66:b5:4c:5f:96:38:8a:2a:00:b0:f9:dc:d7:
                    d2:63:c0:da:bd:ab:79:96:d4:67:65:16:ed:e9:bc:
                    76:d6:55:76:e7:d1:82:14:1b:ce:bb:b2:db:bb:f2:
                    a8:22:65:e1:f9:27:a9:bf:35:27:bc:c4:71:a8:fd:
                    0a:f8:d8:a4:53:b3:dc:8d:fc:c0:63:47:97:c9:23:
                    12:3b:66:8c:b9:da:5b:b6:e8:cd:74:36:fe:4d:d8:
                    46:54:86:f8:80:9e:81:ec:54:69:b2:ae:fc:0d:78:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CC:34:F8:4F:4C:F6:49:93:CD:59:7A:92:12:86:B0:EC:5C:3F:3B
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:d2:7c:c8:21:6c:e6:a7:b2:77:59:05:df:77:91:a7:9e:
         66:83:74:90:21:ea:1d:22:de:d5:7b:3f:17:d3:82:47:c8:fb:
         b4:9e:e6:f5:f7:2b:ba:24:8c:b4:58:fd:d7:30:24:fc:0b:3c:
         c8:b8:85:99:f5:28:a7:58:b8:c4:d7:7d:88:70:89:28:43:0c:
         4f:49:22:6b:2c:21:9a:ed:d3:f3:06:b1:13:e7:ed:e4:2d:b0:
         d0:c6:d0:1a:84:f4:39:38:76:33:97:86:36:d9:a4:01:31:cf:
         e8:0e:4b:03:72:d1:41:84:ce:98:65:09:df:8a:fd:3c:db:6b:
         be:ff:27:f0:c9:6b:89:49:fb:a3:c5:a6:d1:07:33:4c:dc:79:
         ee:fb:c4:96:d7:f5:47:16:f7:5b:11:e5:ec:89:ba:0e:76:99:
         96:05:67:27:56:b5:7d:2e:dc:a8:d1:9f:cd:e4:15:b1:36:6e:
         f0:1c:45:01:6f:2f:5f:08:f6:69:f0:93:82:d7:3b:8e:6c:28:
         1d:8c:c0:99:4b:ac:c7:67:c1:0b:e7:f8:33:17:38:42:28:3f:
         85:97:ca:59:19:fc:33:1e:d8:57:2a:e6:66:cd:d8:56:6c:29:
         0d:a1:28:be:9c:d2:41:45:b1:af:e1:e7:25:bc:c0:df:cd:67:
         12:c8:b4:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NTYyMDExMC8GA1UEBRMoMzM3NUE5NjEzNEM1NzMzMUFGNTRERDcxNEVEMzYzREFC
MzFCNkJEMDAeFw0yNTA0MjcwNTM0MzJaFw0yNTA1MDQwNTM0MzJaMBgxFjAUBgNV
BAMTDTY4MGRjMWU4LTIwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgWDOovWRcqLTxw4gjvZtOr6lN1S/A8JI6S8JyrAYYDTARPi66eoBJHGmLo2Mf
bi/l8WngcAUXqU13ecXnDYSGGUGVgaMZWwCdpkGNofC+n5BHlDn1+8TWWwCMf96Q
k71JOMijPS+rXzayHqLNjh7786Irz/PgZUFROPKr75bOKTLJxzdVzQepuAGuZ1gw
20shrgjTGk32ZrVMX5Y4iioAsPnc19JjwNq9q3mW1GdlFu3pvHbWVXbn0YIUG867
stu78qgiZeH5J6m/NSe8xHGo/Qr42KRTs9yN/MBjR5fJIxI7Zoy52lu26M10Nv5N
2EZUhviAnoHsVGmyrvwNePuDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBcw0+E9M
9kmTzVl6khKGsOxcPzswHwYDVR0jBBgwFoAUM3WpYTTFczGvVN1xTtNj2rMba9Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1NjIwLzE0QTM3NjQ0NkJB
OTExRUZBM0IzNDY4NEM0RjlBRTAyL00zV3BZVFRGY3pHdlZOMXhUdE5qMnJNYmE5
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTTNXcFlUVEZjekd2Vk4xeFR0Tmoyck1iYTlBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1
NjIwLzE0QTM3NjQ0NkJBOTExRUZBM0IzNDY4NEM0RjlBRTAyL00zV3BZVFRGY3pH
dlZOMXhUdE5qMnJNYmE5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABW+0nzIIWzmp7J3WQXfd5GnnmaDdJAh6h0i3tV7PxfTgkfI+7Se5vX3
K7okjLRY/dcwJPwLPMi4hZn1KKdYuMTXfYhwiShDDE9JImssIZrt0/MGsRPn7eQt
sNDG0BqE9Dk4djOXhjbZpAExz+gOSwNy0UGEzphlCd+K/Tzba77/J/DJa4lJ+6PF
ptEHM0zcee77xJbX9UcW91sR5eyJug52mZYFZydWtX0u3KjRn83kFbE2bvAcRQFv
L18I9mnwk4LXO45sKB2MwJlLrMdnwQvn+DMXOEIoP4WXylkZ/DMe2Fcq5mbN2FZs
KQ2hKL6c0kFFsa/h5yW8wN/NZxLItLE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net