Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          aoFmkA1TxifiFOuj5CZM1ouGMhBYze+syCj4b6NSErI=
Subject key identifier:   58:FD:62:E0:50:E2:9B:A7:EE:E2:29:69:62:AE:D3:F6:9B:63:EB:E7
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          016B
Signing time:             Sun 27 Apr 2025 02:54:58 +0000
Manifest this update:     Sun 27 Apr 2025 02:54:57 +0000
Manifest next update:     Sun 04 May 2025 02:54:57 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: aRDhWGgNcKUsmwkedE0KwJKJav4jNS+9tLJOZSbsWLA=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: xBjv+vXxnqip6awmZ0nrqpewsCYSOweE2hm3wh5fJ/w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Apr 27 02:54:57 2025 GMT
            Not After : May  4 02:54:57 2025 GMT
        Subject: CN=680d9c81-3a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:45:7a:ec:de:3e:ea:8b:a4:74:d4:90:ce:
                    ec:38:70:0c:74:7e:55:72:0f:43:59:38:f9:db:ac:
                    28:75:45:42:0c:a7:85:9d:2a:29:cc:6f:b7:2f:1d:
                    1b:a9:0e:79:08:87:55:b0:c9:77:e4:7e:69:a0:1b:
                    73:65:48:ea:af:ec:a9:14:1f:a4:1f:6e:31:e2:12:
                    fa:68:df:04:6e:95:39:7a:e8:b3:d0:dc:53:90:60:
                    d2:40:8b:a0:9d:33:c6:c0:c2:3c:c6:03:e2:11:b8:
                    62:14:e6:12:21:b9:37:a5:50:73:7a:4e:63:28:ff:
                    85:0e:af:0c:de:44:60:94:6f:13:34:82:3b:66:57:
                    3a:af:08:9d:8c:48:17:bd:12:b3:b8:73:e3:42:ab:
                    6d:ce:fc:3e:25:b9:9d:61:2a:62:52:82:d8:d1:37:
                    f8:e1:bc:72:0e:bd:aa:6b:92:08:a9:fc:2b:ce:36:
                    a1:98:d2:33:c4:65:8c:55:d2:f9:1e:61:1c:4e:9a:
                    2b:47:11:97:31:cb:a2:14:58:d9:7a:77:fb:b3:3c:
                    a5:69:93:39:58:24:ad:e0:dd:c9:ac:50:ea:f9:92:
                    40:ba:d1:1f:7d:b0:f3:8a:5d:24:b1:44:e7:05:9f:
                    e6:1f:24:fe:79:bd:3f:e4:7d:28:48:17:a6:82:37:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FD:62:E0:50:E2:9B:A7:EE:E2:29:69:62:AE:D3:F6:9B:63:EB:E7
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:6b:c8:78:f5:93:1f:42:ca:74:a5:db:f7:bc:96:59:70:
         99:86:5f:52:ba:cd:d3:70:2a:5c:fa:92:52:60:a6:c1:bd:28:
         6e:cc:6c:9e:d5:25:66:6b:11:d4:af:85:d0:d1:79:52:e7:34:
         c7:04:c7:a4:87:2c:6f:d7:98:3e:79:51:4a:91:fe:24:2c:be:
         4f:9d:d0:5e:31:0d:53:e1:c7:7d:5e:7f:71:b9:09:ab:b1:31:
         ec:22:da:2f:f2:2c:66:3f:f6:e5:6b:17:8a:d4:76:ce:bc:05:
         80:42:67:d1:ff:b8:95:6b:de:7d:1d:0e:9a:6f:d2:91:23:3b:
         45:bf:88:ea:7e:a7:b1:c5:48:48:3d:46:00:b1:6f:0a:46:fb:
         30:1b:fb:73:f4:60:7c:f3:aa:74:82:24:da:86:81:bc:fa:4e:
         5b:68:10:e3:c4:58:c8:68:9d:3c:27:11:3b:f4:1e:ff:87:c4:
         a5:48:e5:8f:af:98:e7:f9:90:2f:fb:cd:96:bb:2b:02:05:ed:
         8d:17:42:0b:03:59:79:fb:25:91:5d:9b:f8:8a:3c:52:38:12:
         0b:cf:98:be:01:a4:35:8d:4e:e2:9c:ed:52:a7:b1:37:86:73:
         a8:5f:e5:41:4e:bd:8a:4e:df:32:58:a3:98:62:4b:d3:4d:ff:
         21:4e:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:15 2025 by rpki-client on console.sobornost.net