Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          yKzXCgEqEJeBQFqzqn5mj7za8kBjWUyMriHnFw5DedE=
Subject key identifier:   41:FB:C6:44:16:6D:F9:B1:0D:0C:46:69:49:19:79:98:68:16:B6:C7
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          C6
Signing time:             Sun 27 Apr 2025 04:42:22 +0000
Manifest this update:     Sun 27 Apr 2025 04:42:22 +0000
Manifest next update:     Sun 04 May 2025 04:42:22 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: FeSOeLlvsw/VyObziUnGokc/KTGryA0H6uBkoxZrkQU=)
                          2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: BxxzK7GYnNA6XmcJ/JSez9aRNvqpHtoWf05MXCUT/Bs=)
                          3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Apr 27 04:42:22 2025 GMT
            Not After : May  4 04:42:22 2025 GMT
        Subject: CN=680db5ae-1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:01:71:d4:d5:70:d5:03:59:22:1c:10:a8:
                    f7:95:85:6a:11:e1:e7:f4:31:2b:6d:aa:ce:61:2d:
                    c3:8e:74:cf:31:72:92:90:58:63:db:4c:be:2c:53:
                    2e:23:73:8e:82:46:33:3c:d7:5f:86:e1:c1:f6:52:
                    bb:eb:6e:13:12:fe:9e:61:0e:45:19:56:04:6b:b7:
                    0f:b5:ba:da:07:d3:2b:d3:92:70:6c:a2:ba:ed:ab:
                    44:eb:93:e8:92:15:25:55:fd:c4:43:00:b4:25:c0:
                    c5:9c:60:55:eb:a0:9d:3d:38:b3:86:fd:83:ec:5a:
                    f9:a3:82:46:a6:1e:68:ad:c9:5f:70:f6:ab:ef:33:
                    ba:b1:b9:57:0e:ca:72:02:81:1d:d2:e2:e4:f4:ec:
                    e2:a1:0d:56:36:81:17:f7:91:e4:f9:e0:67:03:25:
                    f0:0b:5a:12:81:40:9b:12:fb:80:09:8d:b7:cf:d8:
                    29:c9:0c:22:c3:89:ca:bf:ca:84:b6:83:74:5c:bf:
                    06:ed:2b:d9:68:4e:3e:8c:b1:18:68:37:29:50:76:
                    5b:13:ca:dd:70:7d:c6:40:ed:be:4e:25:66:60:39:
                    cf:20:0c:13:9e:3f:56:67:e3:8b:79:a9:f7:5d:01:
                    b8:0a:bf:3a:14:42:9e:7f:f5:5c:81:59:cb:9a:6c:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:C6:44:16:6D:F9:B1:0D:0C:46:69:49:19:79:98:68:16:B6:C7
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:79:5c:42:f5:df:a6:92:8b:4a:fc:91:c7:b6:af:08:0c:
         bb:2c:a1:9e:d5:09:7b:44:e6:a5:98:e0:ce:b9:98:f5:22:93:
         0b:41:59:9a:b9:83:25:36:4a:25:4f:c5:ea:78:54:ba:34:d6:
         f8:d9:40:af:e7:ba:dc:6c:d0:8f:26:3b:2d:f4:bb:1e:d9:d8:
         af:e7:b1:da:a9:13:b3:2f:77:fc:fd:32:74:35:82:7c:96:05:
         af:f4:4a:95:3c:b6:1a:d5:32:cd:b2:32:af:7b:a9:1e:9f:ad:
         70:04:40:3d:a8:67:f7:2a:8e:ea:68:8e:14:e1:57:be:7d:0a:
         50:3d:fc:0b:d8:55:91:ae:dd:23:ac:79:8b:c5:eb:a5:99:5b:
         57:43:1f:ac:0a:65:3a:52:e9:9e:77:de:9c:99:af:83:39:b3:
         f6:90:29:d7:7e:71:0a:1a:52:1d:db:d2:1f:35:5a:01:65:bb:
         90:f5:fb:72:ec:22:53:7d:d1:53:e8:05:31:ab:3a:0c:86:c3:
         a1:2f:44:5e:e2:b5:e0:81:a0:be:3d:b1:2e:a9:a9:3f:50:2d:
         2d:89:3a:56:89:19:a1:4b:c3:01:b2:7f:74:55:12:1f:5b:5a:
         60:37:77:a6:4e:ab:e6:89:b8:8c:32:ed:93:5f:21:a6:18:c5:
         98:83:a5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net