Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File:                     yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier:          UpqxUPg62ZLahnRah3CZGT5gLJeYAZWFsclCYNhhhEE=
Subject key identifier:   64:DA:F1:73:21:53:C7:2D:B5:90:5B:2A:CF:2C:F1:BA:7A:39:98:65
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer:       /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number:          0453
Signing time:             Sat 26 Apr 2025 23:50:24 +0000
Manifest this update:     Sat 26 Apr 2025 23:50:24 +0000
Manifest next update:     Sat 03 May 2025 23:50:24 +0000
Files and hashes:         1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: zFxvH7Q7+Yml8w4tC9TmWVieRaTxyQrxwcRpD1Acs4o=)
                          2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
                          rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
        Validity
            Not Before: Apr 26 23:50:24 2025 GMT
            Not After : May  3 23:50:24 2025 GMT
        Subject: CN=680d7140-9241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:6c:f4:42:d5:7e:c0:ed:3b:f7:70:08:d9:
                    b0:7e:ec:24:89:fd:3e:a5:1f:76:b8:64:a4:b9:39:
                    26:be:1d:b5:55:99:02:ab:74:b0:9d:6a:e5:1d:41:
                    7d:ae:df:20:6c:c3:7d:aa:97:3c:0b:10:4e:72:75:
                    11:b8:6a:c0:cc:ef:65:73:c7:3e:75:76:60:b2:63:
                    83:fd:f5:3b:df:6a:03:87:5e:bc:23:b4:79:46:39:
                    d2:4a:28:ee:df:e6:ac:7f:9b:7c:ce:34:a6:6f:7a:
                    8b:93:49:9a:e5:8a:5e:5a:79:bc:16:ef:42:f3:93:
                    19:cd:0a:8f:e4:8c:8c:ca:6f:87:c9:3b:9a:80:44:
                    6a:0c:87:c4:0c:65:a6:02:31:c6:3a:4c:ad:b5:d2:
                    c6:89:a2:c5:a9:a6:c4:59:c9:30:d0:56:0c:c5:e4:
                    e2:a6:a7:bd:5d:24:ff:e6:ce:6f:12:3c:e0:6d:ad:
                    cd:b6:7f:50:04:4e:f3:db:0e:7b:03:39:f2:24:84:
                    22:e5:7d:1b:89:85:9e:68:6b:d8:ea:5c:72:ca:d3:
                    ab:8c:38:73:9a:f8:83:e4:20:5f:7f:63:bf:48:4d:
                    0b:97:ae:a3:9a:fb:f6:8c:e9:b5:5d:c7:5f:7c:a4:
                    73:ce:08:b5:9f:cc:ce:69:15:bc:84:fa:f7:ba:2b:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DA:F1:73:21:53:C7:2D:B5:90:5B:2A:CF:2C:F1:BA:7A:39:98:65
            X509v3 Authority Key Identifier:
                keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b2:79:d1:81:27:62:5d:2e:73:2e:60:0c:3e:ee:e8:b8:21:
         33:08:01:f8:aa:76:b2:25:6c:17:6b:b1:67:3f:a0:c7:a5:ce:
         05:b0:57:a2:ca:f2:43:f7:29:d1:a1:4d:dc:d8:80:04:1a:7c:
         a6:c8:c8:38:f2:0b:7c:7b:ad:63:ff:b5:2a:d4:2b:74:3c:7e:
         c5:37:3b:aa:c0:fb:02:14:87:bb:03:bf:5b:cf:41:ad:d6:7c:
         33:b0:af:20:f5:08:66:1d:2e:f0:57:cc:02:4f:3b:ab:b6:23:
         56:1e:19:20:17:b0:73:9e:94:2e:21:5d:1a:98:a0:58:2e:ae:
         f4:b4:c5:af:07:27:52:d2:77:41:8d:3b:9a:47:4a:1f:44:8a:
         c8:47:bf:b4:18:b9:e9:c0:cf:0c:79:21:fb:e3:ca:c5:de:c3:
         f0:36:0c:d7:f2:b9:95:60:8f:05:15:38:d1:4a:16:74:91:a8:
         7d:ce:ac:33:9a:a8:7e:8b:f6:f8:68:52:0c:04:c0:18:04:43:
         8b:9e:2f:94:f5:f7:29:60:1e:4b:ec:9d:fb:d0:45:ce:37:3e:
         e5:55:7f:af:e1:91:3c:0a:cf:94:fa:b8:6d:c6:db:40:e6:cf:
         19:be:a5:0d:b7:82:1d:d3:42:69:52:08:43:6c:4d:ef:68:03:
         eb:0e:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:15 2025 by rpki-client on console.sobornost.net