Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          nFMUtvGyesPOCpUKDxrHt3AMA69enK0gpanwuAc8W8k=
Subject key identifier:   94:2C:88:2B:41:37:F2:4C:29:0B:B4:91:EA:68:E0:A5:59:B0:94:A7
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          0174
Signing time:             Sat 26 Apr 2025 18:47:51 +0000
Manifest this update:     Sat 26 Apr 2025 18:47:51 +0000
Manifest next update:     Sat 03 May 2025 18:47:51 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: 4WpFaam4NEeMm/ccElnSxCNs2yyENKGJch4qXqpWdxk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
        Validity
            Not Before: Apr 26 18:47:51 2025 GMT
            Not After : May  3 18:47:51 2025 GMT
        Subject: CN=680d2a57-ba5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:b6:c4:c3:0c:a6:38:a8:f3:8d:67:e2:d0:
                    80:14:ba:87:b1:6a:c8:d2:66:01:1e:07:03:c4:89:
                    96:1e:71:5f:3b:01:5c:44:38:b4:e4:60:a0:ea:c0:
                    ef:bc:78:48:3e:a1:7e:c7:34:9a:5d:21:7b:7b:21:
                    b0:14:70:0b:a8:55:9a:1c:10:fd:4b:ce:dd:d3:2a:
                    18:23:61:3e:c9:24:18:8e:41:d3:e0:2e:41:ae:e9:
                    d1:b7:98:cd:09:0d:38:d4:1f:0e:de:c3:f1:a8:38:
                    af:24:7c:01:43:98:b4:46:54:c8:1d:c2:5a:dd:d3:
                    24:de:e9:7f:c3:e3:0f:1a:a0:db:53:2f:7d:4b:90:
                    e5:42:68:58:d4:d1:22:05:ec:ae:58:25:45:e7:17:
                    31:46:a8:97:b1:97:3d:55:b8:7c:f1:17:15:30:50:
                    f5:f0:b2:9f:06:62:28:56:0f:a5:7c:20:d2:a3:7f:
                    ff:f7:79:89:d9:d6:10:74:bb:6d:0c:9c:2b:c4:39:
                    94:b0:dc:75:61:57:7d:79:46:e2:76:0c:f1:57:39:
                    9a:85:94:8a:5a:89:6a:85:73:1a:67:72:ff:94:7b:
                    99:79:16:c7:a2:80:b1:37:a8:d3:7a:e9:0d:38:04:
                    44:61:b2:af:8a:c0:62:96:8b:5f:b4:f4:76:aa:b3:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:88:2B:41:37:F2:4C:29:0B:B4:91:EA:68:E0:A5:59:B0:94:A7
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:cc:55:c8:38:26:f8:13:bb:d4:45:06:bd:b9:02:3b:63:
         a1:00:d6:cd:a8:d8:b9:9f:57:d4:86:32:de:24:1e:cb:75:b4:
         f6:50:e9:d1:d3:b9:4c:d6:4d:52:4e:b0:67:05:53:b4:90:ad:
         46:1d:09:9d:c7:b9:fe:4f:de:ab:46:5c:87:7e:20:dd:e7:f3:
         3f:7d:73:8c:5a:5b:5b:b2:d9:89:73:95:a0:fb:1d:00:3d:f9:
         4c:32:e6:1f:09:65:11:5f:e0:27:60:dd:72:70:81:61:54:52:
         cd:65:e5:7d:59:7b:29:be:d2:4d:ef:01:15:97:ea:59:64:7d:
         87:5c:a8:a3:4d:25:49:5e:b3:96:08:b8:05:aa:f9:4b:39:f0:
         fd:f4:e0:06:0c:84:f3:49:cc:a1:7c:e2:3d:1b:a4:2f:d8:8c:
         7c:3e:05:3c:10:f1:2a:dd:07:37:64:3b:df:2a:98:22:4d:5f:
         b7:fc:aa:b0:0e:1e:cb:0c:da:9d:38:f7:f5:cf:1a:6c:b3:93:
         ce:e7:00:a3:e4:e3:37:8b:ab:82:91:3a:1f:23:d0:0f:c5:d9:
         75:1f:38:45:55:eb:f3:b4:b2:96:53:3a:f2:c5:94:f9:e3:fe:
         10:1c:dd:d0:4c:48:6c:b8:5d:c1:28:4b:56:0b:59:eb:ea:2e:
         bf:5f:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:48 2025 by rpki-client on console.sobornost.net