Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File:                     DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier:          hgLhgw3SighIoqecnm8VgKBiUU8/f9cjn32UmvDkLU0=
Subject key identifier:   F6:1E:AF:E2:D9:C8:5C:80:DA:A0:7B:5D:C6:35:87:00:6C:DC:87:8E
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer:       /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial:       0C00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number:          0BF4
Signing time:             Fri 02 May 2025 18:54:51 +0000
Manifest this update:     Fri 02 May 2025 18:54:50 +0000
Manifest next update:     Fri 09 May 2025 18:54:50 +0000
Files and hashes:         1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: Wzk0OzGcNrxF5ZfnSDmTfK9REUepnL8iL4VvHBiOYcI=)
                          2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
                          rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 18:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
        Validity
            Not Before: May  2 18:54:50 2025 GMT
            Not After : May  9 18:54:50 2025 GMT
        Subject: CN=681514fb-eb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:f7:73:d4:69:b2:f2:da:62:0e:83:bf:2b:
                    c1:e9:18:bc:08:dd:e6:ed:d7:a8:3a:ce:fe:4a:e1:
                    8a:01:b9:58:4c:59:9a:98:20:de:02:fd:75:7d:2e:
                    e9:5c:8e:62:a5:b9:65:68:eb:d9:f4:35:87:6d:c5:
                    6a:30:e5:64:ca:ea:19:b8:f7:37:48:0d:a8:9e:71:
                    ae:f3:b4:c6:d6:0a:70:12:d7:9b:bb:a6:d1:c0:a5:
                    58:02:a1:74:bb:0f:a2:df:ff:69:4e:23:a4:67:31:
                    2b:ae:6a:a4:25:1d:a0:9c:3e:9c:d0:7d:fe:76:6e:
                    5b:4c:86:06:54:c2:de:20:e3:0a:4a:3d:0a:53:9b:
                    3a:bf:75:dd:2c:58:f4:65:ec:62:2d:c2:99:2f:bd:
                    92:fb:6a:7a:12:2a:80:da:a1:55:69:99:de:8d:e9:
                    0f:63:c8:81:9c:be:a5:db:67:3b:24:eb:b1:31:a3:
                    32:20:4d:c6:e1:eb:62:c2:4a:2a:4f:df:af:b9:bc:
                    3e:dc:c7:fe:f7:ab:59:a6:5f:9c:d0:44:82:a5:c0:
                    1e:82:be:71:88:dc:34:50:e6:fc:cb:37:f6:2e:ed:
                    f3:72:97:95:d5:23:bd:1a:24:0a:29:5d:9d:71:45:
                    44:5f:78:bc:7e:cc:34:1b:b9:c5:2b:18:8a:b1:16:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:AF:E2:D9:C8:5C:80:DA:A0:7B:5D:C6:35:87:00:6C:DC:87:8E
            X509v3 Authority Key Identifier:
                keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:44:40:3b:21:d2:8b:85:df:0d:7d:2b:da:34:fa:2d:22:0a:
         fd:e8:29:83:36:b1:79:16:24:41:3e:6a:3f:ad:a5:2d:ba:1a:
         ea:6c:f6:b3:5d:62:d0:a4:c3:73:b0:0d:33:d1:47:cc:06:51:
         9f:de:f9:d5:7b:81:10:08:09:46:0c:2b:37:89:30:f9:37:e8:
         56:ad:96:34:0f:99:7a:29:6f:79:c3:28:04:31:13:68:a0:86:
         cb:e7:4e:ce:3d:a5:66:16:f5:1f:ad:8a:7d:c0:1b:1f:da:1c:
         c8:7a:9a:7f:df:6e:32:fc:8e:41:ef:f8:b1:2b:2c:e5:da:57:
         b2:aa:fd:e5:84:6b:98:2b:5f:3e:d5:1f:03:14:27:1e:25:48:
         2b:ec:06:bd:14:53:0c:9d:2f:96:43:81:c1:b8:22:5c:63:15:
         17:8e:70:56:aa:ec:fa:e2:c1:6f:0a:f1:7c:55:d5:44:96:2a:
         be:a0:ab:1b:0b:b5:e4:5c:95:49:ff:1a:35:fc:69:5f:f8:ea:
         f3:25:3e:49:d4:c2:bb:aa:c5:5e:50:c4:81:eb:44:ed:a7:26:
         f9:3c:3c:6f:03:1c:82:8c:c9:e2:f6:9a:17:c9:00:8c:c2:c8:
         d4:8a:e8:f0:f7:43:51:11:e1:08:f5:82:f7:89:0c:fd:04:49:
         d8:1b:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:09:18 2025 by rpki-client on console.sobornost.net